Shomooly

Privacy policy

This policy explains which personal and health data we collect when you use Shomooly, why, who sees it and how to exercise your rights, under the Saudi Personal Data Protection Law and its regulations.

Draft pending legal review. This text may change before launch and is not yet binding.

Last updated:

Who we are

Shomooly is a digital service that connects clients with approved holistic care specialists in the Gulf and Egypt. We are the controller of the data collected through Shomooly; what a specialist writes in your care file is also their responsibility as your care provider.

What we collect

Account data: your name, email, country and preferred language.

Health data you share with your specialist, such as symptoms, conditions, lab results and medicines. This is sensitive data, collected only with your explicit consent.

Booking and payment data: appointments, services and payment status. We never keep your card details; a certified payment provider processes them.

Technical data needed to run and protect the service, such as device type and sign-in logs.

Why we use it

To provide booking, reminders and programs in weeks.

So that your specialist and their authorised assistants see only what your care needs.

To process payments, refunds and invoices.

To review specialist applications before a profile is published, and to protect the service from fraud.

To send service notifications. We send marketing only with your consent, and you can stop it at any time.

Who we share it with

We never sell your data. We share it only with the specialist you book and their assistants, technical and payment providers bound to protect it, and authorities when legally required.

If your specialist is in another country, only what your care needs is transferred to them, under the rules for transfers outside the Kingdom, and you see their country before booking.

Your rights

You may know how your data is processed, access it and get a copy, correct it, ask for it to be destroyed and withdraw consent at any time. You may also complain to the Saudi Data & AI Authority (SDAIA).

Keeping and protecting it

We keep your data while your account is active, then for the period health and financial rules require, after which it is deleted or anonymised. We use encryption, limited access and a log of every access to health data.

This website

shomooly.com sets no analytics cookies unless you turn them on yourself in the cookie card; they stay off until you choose. See the cookie policy.

Minors

No one under 18 may create an account. A guardian may book for a minor and is responsible for the data they provide.