Privacy Policy

Gulf Med Ethics ("we", "us") is the data controller for the personal data described in this policy. We decide why and how it is processed. For any privacy question or request, email support@gulfmedethics.com.

• Account details: your name, email address, password (stored in encrypted form) and, if you give them, your profession and country of practice.
• Order details: the courses you buy, prices, dates and billing details. Card payments are handled by our card payment processor; we do not see or store your full card number.
• Learning records: your progress, knowledge check and assessment results, certificates issued and the content of any reflective account you save on the site.
• Messages: what you send us through the contact form or by email.
• Technical data: IP address, browser and device type, and pages visited, collected through cookies and server logs.

We do not ask for health data about you. Please do not enter patient names, file numbers or other information that could identify a patient anywhere on the site.

• To provide the courses you buy: running your account, giving access, marking assessments and issuing certificates. This is necessary to perform our contract with you.
• To take payment and keep financial records, as the contract and applicable law require.
• To answer your messages and support you.
• To keep the site secure and working, including preventing fraud and account sharing.
• To send course updates or news, only where you have agreed. You can withdraw that consent at any time using the link in each email or by writing to us.

Your assessment answers and reflective accounts are visible to you and to the small number of our staff who need access to support your account. We do not share them with the Saudi Commission for Health Specialties, the Ministry of Health, any committee, your employer or anyone else unless you ask us to or the law requires it. If a legal demand is made, we will tell you unless the law prevents us.

We share personal data only with service providers that help us run the site, under contracts that require them to protect it and use it only on our instructions. These are our hosting provider, our card payment processor, our email delivery provider and, where you consent, an analytics provider. We may also disclose data where the law requires it. We never sell your personal data, and we do not share it with advertisers.

Some of our service providers store or process data outside the Kingdom of Saudi Arabia. Where personal data of people in Saudi Arabia is transferred abroad, we do so only in the circumstances permitted by the PDPL and its Personal Data Transfer Regulations, with the safeguards those rules require, and we transfer no more data than is needed.

• Account and learning records: while your account is open, and for up to 5 years after it closes, so that we can confirm a certificate if you or an authority ask.
• Order and payment records: for as long as tax and accounting law requires.
• Messages: up to 2 years after the matter is closed.
• Technical logs: up to 12 months.

When data is no longer needed, we delete it or make it anonymous.

We use essential cookies to keep you signed in, run the cart and remember your country edition. With your consent, we also use analytics cookies to understand how the site is used. You can change your cookie choices at any time from the cookie settings link on the site or in your browser.

We use encrypted connections, access controls and reputable hosting to protect your data. If a breach affects your personal data, we will notify the competent authority and, where required, you, within the time the law sets, and tell you what we are doing about it.

Under Saudi Arabia's Personal Data Protection Law you have the right to:

• be told how your personal data is collected and used (this policy)
• access the personal data we hold about you
• receive a copy of your data in a clear, readable format
• ask us to correct, complete or update your data
• ask us to destroy data we no longer need
• withdraw consent you have given, at any time

To use any of these rights, email support@gulfmedethics.com. We may ask you to confirm your identity. We will respond within the time the law allows. If you are not satisfied, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), the authority responsible for the PDPL.

If you use the site from another Gulf state or elsewhere, the data protection law of that country may give you further rights. We will honour them. Contact us at the address above.

Our courses are for qualified healthcare practitioners and are not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy when our services or the law change. We will post the new version here and email account holders about significant changes.