Privacy Policy

What HAZ MED’s legal adviser must hand over

• The identity of the data controller: registered legal entity name, commercial registration number, national address, and a named contact for privacy enquiries.
• Every category of personal data collected, listed field by field against the live quote form, plus anything collected by an analytics or advertising tag once one is deployed.
• The lawful basis and the stated purpose for each category, under the Saudi Personal Data Protection Law.
• Retention period per category, and what triggers deletion.
• Every processor the data reaches: the form endpoint or CRM, the email relay, the hosting provider, and any analytics vendor — each named.
• Whether personal data leaves the Kingdom, to where, and the transfer safeguard relied on.
• Data subject rights and the exact mechanism for exercising them, including the response time HAZ MED commits to.
• The complaint route to the competent supervisory authority.
• Effective date and version number, and which language version governs if the Arabic and English texts diverge.