Last updated – August 06, 2026
1. Introduction
In this policy, “we”, “us”, and “our” refer to Child Oxford Fertility Excellence, a fertility clinic operating in the Kingdom of Saudi Arabia. The terms “you” and “your” refer to any visitor or user of our website located at childfertility.com, as well as individuals who contact us or enquire about our services.
We are committed to protecting the privacy and confidentiality of individuals who interact with us. As a healthcare provider handling sensitive medical information, we take our data protection responsibilities seriously and comply with applicable laws in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and relevant healthcare regulations issued by competent authorities.
We act as the Controller of the personal data we collect and process.
This policy explains what personal data we collect, how we use it, the legal bases for processing, and your rights in relation to your data. Please read it carefully before using our website or submitting any information.
By using our website or contacting us, you acknowledge that you have read and understood this Privacy Policy.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide Directly
- Contact details: name, email address, telephone number, and postal address
- Appointment and enquiry information: details provided when submitting forms or booking consultations
- Medical and health information: fertility history, medical conditions, test results, treatment information, and related clinical data
- Identity information: national ID, passport, or other identification where required for clinical or regulatory purposes
- Communications: correspondence, emails, messages, and feedback you send to us
We collect this information when you submit a form on our website, contact us directly, or request an appointment or consultation.
2.2 Information Collected Automatically
- Usage data: IP address, browser type, device information, operating system, pages visited, and time spent on pages
- Cookies and similar technologies: information collected through cookies and tracking tools (see Section 9)
2.3 Sensitive Personal Data
As a fertility clinic, we may process sensitive health-related data. This is handled with strict confidentiality and only where legally permitted under applicable healthcare and data protection laws.
3. How We Use Your Personal Data
We only use your personal data where it is necessary and appropriate for the purposes outlined below:
- Responding to enquiries and communications
Responding to enquiries submitted through our website, phone, email, or contact forms, and managing general communication with you. - Appointments and clinical care
Processing information you provide when you request appointments or consultations, and using it to schedule, manage, and follow up on appointments and fertility treatments. This includes providing medical and fertility-related services such as diagnosis, treatment planning, clinical care, and maintaining accurate medical and clinical records in line with healthcare regulations. - Service delivery and communication
Communicating with you about your care, appointments, and service-related updates. - Marketing communications
Sending marketing or informational communications, only where you have given clear consent through our website, forms, or when you provide your details to us. You may withdraw your consent at any time by contacting us or using the unsubscribe option in our communications. This will not affect service-related messages about your appointments or care. - Website operations and improvement
Operating, maintaining, and improving our website, services, and user experience, including monitoring website performance and usage through analytics tools. - Legal and compliance purposes
Complying with legal, regulatory, and healthcare requirements, protecting the safety and rights of our patients, staff, and the public, and handling or responding to legal claims where necessary.
We may also use third-party service providers (such as website hosting providers, analytics tools, and communication platforms) to support the operation of our website and services. These providers process personal data only on our instructions and are required to protect your information.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: where you have provided clear consent for a specific purpose (e.g., marketing communications)
- Performance of a service or contract: where processing is necessary to provide requested healthcare services
- Legal obligation: where we are required to comply with applicable laws and healthcare regulations
- Vital interests: where processing is necessary to protect someone’s life or health
- Legitimate interests: where we have a legitimate interest in processing your data, provided that this does not override your rights and interests under applicable law
Where we rely on your consent, you can withdraw it at any time. This will not affect any processing that took place before you withdrew your consent.
5. Sharing Your Personal Data
We do not sell or rent your personal data. We may share it only where necessary and in limited circumstances:
5.1 Healthcare Providers
We may share relevant medical information with healthcare professionals, laboratories, or consultants involved in your treatment, where necessary for your care.
5.2 Service Providers
We may use third-party providers for IT systems, website hosting, analytics, communications, and related services. These providers process data only on our instructions and are required to implement appropriate safeguards.
5.3 Legal and Regulatory Authorities
We may disclose personal data where required by law, regulation, court order, or competent authority, or where necessary to protect rights, safety, or public interest.
5.4 Professional Advisers
We may share data with legal advisers, auditors, or insurers where necessary for legitimate business purposes.
6. International Transfers
In some cases, your personal data may be processed or stored outside the Kingdom of Saudi Arabia (for example, through service providers or technical systems).
Where this happens, we will take reasonable steps to ensure suitable safeguards are in place in accordance with applicable Saudi laws. This may include contractual protections or other legally recognised transfer mechanisms.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law.
- Medical and clinical records: retained in accordance with applicable healthcare regulations and Ministry of Health requirements
- Enquiry and contact data: retained for a reasonable period to manage your enquiry and then deleted or anonymised where appropriate
- Website usage data: retained for limited periods for analytics and performance monitoring
- Marketing data: retained until you unsubscribe or withdraw consent
When data is no longer required, it is securely deleted or anonymised.
In some circumstances, we may retain personal data for longer periods where required to comply with legal or regulatory obligations, resolve disputes, or establish, exercise, or defend legal claims.
8. Security of Your Personal Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. These may include:
- Encryption during transmission (e.g., HTTPS)
- Access controls for authorised personnel only
- Secure systems for storing patient information
- Regular review of security practices
While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure proper functionality, improve performance, and improve your browsing experience.
Types of cookies we use:
- Essential cookies: Required for the website to function properly. These cannot be disabled as they are necessary for core features such as page navigation and security.
- Analytics cookies: Help us understand how visitors use our website so we can improve content and performance (for example, Google Analytics).
- Preference cookies: Store your settings and preferences to improve your experience on future visits.
Consent and control:
When you first visit our website, you will be asked to accept or manage non-essential cookies (such as analytics and preference cookies). These cookies are only used if you give your consent.
If you accept non-essential cookies and continue using our website, you consent to our use of these cookies as described in this policy.
You can withdraw or change your cookie preferences at any time through your browser settings or our cookie consent tool. Please note that disabling some cookies may affect website functionality.
For more information on how third-party cookies operate, you may refer to their privacy policies, such as Google Analytics: https://support.google.com/analytics/answer/6004245
10. Your Rights
Under the Saudi PDPL, you have the following rights:
- Right to be informed about the lawful basis and purpose of collecting your personal data
- Right to access your personal data
- Right to request your personal data to be provided in a readable and clear format
- Right to request correction of your personal data (if inaccurate), completion (if incomplete), or updating (if out of date)
- Right to request deletion of your personal data
- Right to withdraw your consent to the processing of your personal data at any time
- If you believe your personal data has been misused or your rights under the Saudi PDPL have been violated, you have the right to file a complaint with the competent data protection authority in the Kingdom of Saudi Arabia
To exercise your rights, please contact us using the details in Section 13. We may need to verify your identity before responding.
We aim to respond within the timeframes required by applicable law.
You also have the right to lodge a complaint with the relevant data protection authority in the Kingdom of Saudi Arabia.
11. Minors
Our services and website are intended for adults. We do not knowingly collect personal data from individuals under 18 without appropriate parental or guardian involvement where required.
If we become aware that such data has been collected without appropriate consent, we will take steps to delete it.
12. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies before providing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on this page with a revised “Last updated” date.
Where changes are significant, we may also notify you through appropriate channels.
