Privacy policy
This policy explains which personal and health data we collect when you use Shomooly, why, who sees it and how to exercise your rights, under the Saudi Personal Data Protection Law and its regulations.
Draft pending legal review. This text may change before launch and is not yet binding.
Last updated:
Who we are
Shomooly is a digital service that connects clients with approved holistic care specialists in the Gulf and Egypt. We are the controller of the data collected through Shomooly; what a specialist writes in your care file is also their responsibility as your care provider.
What we collect
Account data: your name, email, country and preferred language.
Health data you share with your specialist, such as symptoms, conditions, lab results and medicines. This is sensitive data, collected only with your explicit consent.
Booking and payment data: appointments, services and payment status. We never keep your card details; a certified payment provider processes them.
Technical data needed to run and protect the service, such as device type and sign-in logs.
Why we use it
To provide booking, reminders and programs in weeks.
So that your specialist and their authorised assistants see only what your care needs.
To process payments, refunds and invoices.
To review specialist applications before a profile is published, and to protect the service from fraud.
To send service notifications. We send marketing only with your consent, and you can stop it at any time.
Your rights
You may know how your data is processed, access it and get a copy, correct it, ask for it to be destroyed and withdraw consent at any time. You may also complain to the Saudi Data & AI Authority (SDAIA).
Keeping and protecting it
We keep your data while your account is active, then for the period health and financial rules require, after which it is deleted or anonymised. We use encryption, limited access and a log of every access to health data.
This website
shomooly.com sets no analytics cookies unless you turn them on yourself in the cookie card; they stay off until you choose. See the cookie policy.
Minors
No one under 18 may create an account. A guardian may book for a minor and is responsible for the data they provide.
