Privacy Policy
Khaled Al-Zulal Medical Cupping Centers This policy was prepared in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its implementing regulations. Website: cuppingclinic.net Location: Riyadh – Kingdom of Saudi Arabia Last Updated: June 2, 2026 Version: 1.01. Introduction and Scope
Khaled Al-Zulal Medical Cupping Centers places the utmost importance on the privacy of its clients and website visitors, and is committed to protecting their personal data and processing it transparently and responsibly. This policy explains how personal data is collected, used, stored, protected, and disclosed when using the website, booking appointments, or receiving services. This policy is applied in accordance with the Personal Data Protection Law issued in the Kingdom of Saudi Arabia and its implementing regulations, as well as relevant health regulations.Consent Acknowledgment
By using the website, submitting your personal data, or booking an appointment with us, you acknowledge that you have read and understood this policy and agree to the collection and processing of your personal data as described herein. If you do not agree to any of its terms, please do not use the website or submit your data.2. Controller Identity and Contact Information
Entity Name: Khaled Al-Zulal Medical Cupping Centers Activity: Medical Cupping and Alternative Medicine Services (Licensed) Website: cuppingclinic.net Branches:- Riyadh – Al-Sahafa Branch
- Riyadh – Al-Nuzha Branch
- Riyadh – Al-Hamra Branch
3. Key Definitions
Personal Data
Any statement that directly or indirectly identifies its subject, such as name, ID number, phone number, and email address.Health Data
Any statement that refers to an individual’s health condition or health services provided to them; considered sensitive data.Sensitive Data
Data whose disclosure or processing may cause harm to its subject, including health, religious, and ethnic data, among others.Data Subject
The natural person to whom the personal data relates, such as a client, visitor, or patient.Controller
The entity that determines the purpose and means of processing personal data — the Center in this policy.Processing
Any operation performed on personal data, such as collection, recording, storage, use, disclosure, and destruction.4. Personal Data We Collect
4.1 Identification and Contact Data
- Full name.
- Phone number or WhatsApp.
- Email address.
- Gender and age group for service customization.
- City and preferred branch.
4.2 Booking and Service Data
- Type of service requested.
- Appointment date, time, and branch.
- History of previous visits and services.
4.3 Health Data (Sensitive Data)
With your explicit consent, we may collect health data necessary to provide the service safely, such as:- General health condition and chronic illnesses.
- Medications in use, especially blood thinners.
- Pregnancy or breastfeeding status.
- Medical reports or test results when needed.
- Allergies or medical contraindications related to the session.
Note Regarding Health Data
Health data is treated as sensitive data subject to the highest levels of protection. It is only collected or processed based on your explicit consent and solely for the purpose of providing medical services and ensuring your safety. It is not used for any marketing purposes.4.4 Technical Data and Cookies
- IP address, browser type, and device.
- Pages visited and browsing duration.
- Analytics data via Google Analytics and Google Tag Manager.
- Necessary, functional, and analytical cookies.
5. Processing Purposes and Legal Basis
We process your data for the following purposes:- Managing bookings, confirming, and organizing appointments.
- Providing medical services and assessing safety before the session.
- Post-session follow-up and providing instructions.
- Maintaining medical and financial records in accordance with regulations.
- Improving service quality and developing the website.
- Sending offers and marketing messages upon obtaining separate consent.
- Responding to official requests from competent authorities.
6. Consent and Withdrawal
We rely on your consent as the primary basis for processing in many cases. Consent must be:- Free and unconditional.
- Specific to each purpose.
- Based on clear awareness of the purpose.
- Explicit with regard to sensitive data.
7. Data Disclosure and Sharing
We do not sell your personal data or share it except in the following cases:- With medical and administrative staff within the Center when necessary.
- With trusted service providers such as booking systems, payment gateways, or messaging services.
- With competent government or judicial authorities when there is a legal obligation.
- When necessary to protect the Center’s rights or individuals’ safety.
Sensitive Data and Marketing
Your health data is not shared with any third party for marketing or advertising purposes. Your personal data is not used for direct marketing without your explicit and separate consent.8. Data Transfers Outside the Kingdom
Data is stored within the Kingdom of Saudi Arabia wherever possible. In cases where technical service providers outside the Kingdom are used, we comply with data transfer controls stipulated in the law and its implementing regulations.9. Cookies
The website uses cookies for the following purposes:- Necessary files for website operation.
- Functional files to remember preferences.
- Analytical files to measure visits and improve content.
10. Your Rights as a Data Subject
You have the right to:- Know the purpose and legal basis for data collection.
- Access your personal data.
- Correct inaccurate data.
- Request deletion of data when the retention purpose no longer applies.
- Withdraw consent at any time.
11. Data Retention Period
We retain your data for the period necessary to fulfill the specified purposes or for the period required by relevant regulations, whichever is longer. When no longer needed and there is no legal obligation to retain it, data is securely destroyed.12. Data Security and Protection
We apply appropriate organizational, technical, and administrative measures to protect data, including:- Restricting data access to authorized personnel only.
- Applying approved cybersecurity controls.
- Storing records in a secure and protected environment.
- Raising employee awareness of data protection responsibilities.
13. Children’s and Legally Incapacitated Persons’ Data
When providing services to children or legally incapacitated individuals, we require the consent of a parent or legal guardian before collecting or processing any data relating to them.14. Contact and Complaints
For inquiries, to exercise your rights, or to submit a complaint, please contact us via: Phone / WhatsApp: 0531568000 Privacy Email: To be completed before publication Branches:- Riyadh – Al-Sahafa
- Riyadh – Al-Nuzha
- Riyadh – Al-Hamra
15. Amendments to This Policy
We may update this policy from time to time to keep pace with regulatory or operational changes. When any material amendment is made, the updated version will be published on this page with an updated “Last Updated” date. Your continued use of the website after the amendments are published constitutes acceptance of the updated version.© 2026 Khaled Al-Zulal Medical Cupping Centers – All Rights Reserved.