Legal

Privacy Policy

Health data is treated as sensitive personal data. This document explains what we collect, why, and the control you keep over it.

Data we collect

Identity and contact details
Assessment answers and lifestyle inputs
Laboratory and biomarker reports you upload
Genetic data, only with separate explicit consent
Order, delivery and support records

Purpose and legal basis

[Purposes, legal bases and consent mechanics under applicable Saudi and GCC data-protection law — placeholder pending legal review.]

Security

Encryption in transit and at rest
Role-based access control
Access logging and audit trails
Purpose-limited internal use

Sharing

We share data only with reviewing professionals, laboratories and fulfillment partners necessary to deliver the service. Genesis Arabia does not sell identifiable health data.

Retention and deletion

[Retention periods per data category and deletion procedure — placeholder pending legal review.]

Your rights

Access and export your data
Correct inaccurate information
Withdraw consent, including genetic consent
Request deletion, subject to legal retention duties
Contact the data protection officer — [contact placeholder]

This policy is a draft placeholder and is not legally binding until reviewed and published by qualified counsel.