How we handle personal data in Home Visit.
Last updated: 28 October 2026
Who we are
This Privacy Policy explains how almustashfa alsuudi alalmani far sharikat alsharq laawsat Company For health care ("we", "us"), which operates Saudi German Hospital – Jeddah, handles personal data in Home Visit: the website at homecaresghj.com and its provider app.
We decide how and why this personal data is used and are responsible for it.
Who this policy covers
- Healthcare providers who use the Home Visit provider app, both Home Care Team staff and providers who work by incentive.
- Hospital staff who use the coordinator portal.
- Patients who receive home health care, and relatives who sign for a visit.
Personal data we collect
Healthcare providers
- Name, mobile number, employee ID, position or profession, specialty, licence number, employment type and profile photo.
- Availability, weekly days off, and the visits you accept, decline, cancel or complete, with their times.
- Incentive amounts for completed visits and shifts.
- Device details needed to send the app notifications you allowed.
Hospital staff
- Name, mobile number and role.
- A record of changes you make to visits, providers and settings (audit log).
Patients and relatives
- Name, medical record (file) number, phone number, home address and map location, area and payer type (cash or insurance).
- Visit details: service, date and time, notes, invoice number and amount, and invoice attachments.
- The signature and name of the patient or relative confirming a completed visit, and the provider's short visit note.
Everyone who signs in
- Sign-in records and security logs. One-time sign-in codes are stored only in protected (hashed) form and expire after 5 minutes.
How we use personal data
- To arrange home visits and shifts and match them to providers of the right profession.
- To send visit offers, assignments, invitations and sign-in codes by app notification, WhatsApp or SMS.
- To confirm attendance with arrival and completion times and the patient's signature.
- To calculate provider incentives and prepare monthly reports for HR and payroll.
- To keep the platform secure, investigate problems and keep an audit trail of changes.
- To meet our legal, regulatory and medical-record obligations.
WhatsApp and text messages
We send messages only to people who registered with Home Visit or whom the department registered as its healthcare providers. These messages are invitations to complete a provider profile, one-time sign-in codes, and notices about visits offered or assigned to them.
Messages are sent through Taqnyat, a Saudi messaging provider, using the WhatsApp Business Platform operated by Meta, and by SMS where enabled. We do not send marketing messages through Home Visit.
Providers who no longer want to receive messages can ask their coordinator to deactivate their account. Sign-in codes are needed to use the app.
Legal basis
We process personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations.
Depending on the data, we rely on providing health care to our patients, our working arrangements with healthcare providers and staff, our legal and regulatory obligations, and our legitimate interest in running a safe and reliable service. Where we rely on consent, you can withdraw it at any time.
Who we share data with
- Hospital departments that need it, such as nursing administration, HR and payroll, finance and medical records.
- Service providers acting on our instructions: our hosting and database provider; Taqnyat and Meta (WhatsApp Business Platform) for WhatsApp messages; SMS gateways where enabled; browser push services (Apple, Google and Mozilla) for app notifications; and Google for maps and fonts.
- Government authorities and regulators when the law requires it.
We do not sell personal data or use it for advertising.
How we protect personal data
- All connections to Home Visit are encrypted (HTTPS).
- Sign-in uses one-time codes sent to your registered mobile number.
- Each role sees only its own screens and data, and providers see only the visit details they need.
- Changes to visits, providers and settings are recorded in an audit log.
- Data is backed up daily.
Where a service provider processes personal data outside the Kingdom, we do so only as permitted by the PDPL and its regulations on transferring personal data outside the Kingdom.
How long we keep data
- Visit, attendance, signature and incentive records: for as long as required for medical-record, financial and legal purposes.
- Provider accounts: while you work with the department. Afterwards the account is deactivated and can be removed on request, except for records we are required to keep.
- One-time sign-in codes: 5 minutes.
Your rights
- To be told how your personal data is used, as set out in this policy.
- To access your personal data and obtain a copy.
- To correct personal data that is inaccurate or incomplete.
- To ask us to destroy personal data we no longer need.
- To withdraw consent where we rely on it.
To make a request, contact us using the details below. You may also complain to the Saudi Data & AI Authority (SDAIA), which supervises the Personal Data Protection Law.
Cookies and browser storage
Home Visit uses only the browser storage needed to keep you signed in, remember your language and deliver the notifications you allowed. We collect basic usage statistics, such as page views, to keep the site working well, and our pages load fonts from Google Fonts.
We do not use advertising cookies.
Children
Home Visit accounts are for adult healthcare professionals and hospital staff. Records of patients who are children are entered by the department as part of their care, with their guardian's involvement.
Changes to this policy
We may update this policy as Home Visit changes. Any changes will be posted on this page with a new "Last updated" date.
For questions or requests about this policy, contact almustashfa alsuudi alalmani far sharikat alsharq laawsat Company For health care, Saudi German Hospital – Jeddah, 4 Batterjee Street, Al-Zahra District, Jeddah, Kingdom of Saudi Arabia.