LegalPrivacy Policy
Version 1.0 · Last updated: June 2, 2026
Khaled Elzallal Medical Hijama Centers places utmost importance on the privacy of its clients and website visitors, and is committed to protecting their personal data transparently and responsibly in accordance with Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations.
Consent Acknowledgment
By using this website, providing your data, or booking an appointment with us, you acknowledge that you have read this policy and agree to the collection and processing of your personal data as described herein.
1
Data Controller Identity
EntityKhaled Elzallal Medical Hijama Centers
ActivityMedical cupping & alternative medicine services (licensed)
Websitecuppingclinic.net
Phone / WhatsApp+966114700030
Emailkhaled.alzulalcenter@gmail.com
BranchesRiyadh – Al Sahafa | Al Nuzha | Al Hamra
2
Data We Collect
Identity & Contact Data
- Full name
- Phone number or WhatsApp
- Email address
- Gender and age group
- City and preferred branch
Booking & Service Data
- Type of service requested
- Appointment date, time, and branch
- Visit history and past services
Health Data (Sensitive — with your explicit consent only)
- General health status and chronic conditions
- Medications (especially blood thinners)
- Pregnancy or breastfeeding status
- Medical reports or lab results
- Allergies or medical contraindications
⚠ Health data is only collected to provide the service safely and is never used for marketing purposes.
Technical Data & Cookies
- IP address, browser type, and device
- Pages visited and browsing duration
- Google Analytics and Tag Manager data
3
Processing Purposes
- Managing bookings and confirming appointments
- Providing medical services and pre-session safety assessments
- Post-session follow-up and instructions
- Maintaining medical and financial records per regulations
- Improving service quality and website development
- Sending marketing offers (with separate explicit consent only)
- Responding to official requests from competent authorities
4
Disclosure & Data Sharing
We do not sell your data. We only share it in the following cases:
- With medical and administrative staff within the center when needed
- With trusted service providers (booking systems, payment gateways, messaging services)
- With government or judicial authorities when legally required
- When necessary to protect the center's rights or individual safety
5
Your Rights as a Data Subject
- Know the purpose and legal basis for collecting your data
- Access your personal data
- Correct inaccurate data
- Request deletion when the purpose no longer exists
- Withdraw your consent at any time
6
Data Security & Retention
- Access restricted to authorized personnel only
- Approved cybersecurity controls applied
- Records stored in a secure, protected environment
- Staff trained on data protection responsibilities
- Data securely destroyed when no longer needed
7
Children's Data
When providing services to children or legally incapacitated individuals, we require the consent of a parent or legal guardian before collecting any data related to them.
8
Policy Updates
We may update this policy periodically to reflect regulatory or operational changes. The updated version will be published on this page with a revised 'Last Updated' date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.
For inquiries, to exercise your rights, or to file a complaint, please contact us:
© 2026 Khaled Elzallal Medical Hijama Centers — All rights reserved