Privacy Policy
Last updated: 22 September 2026
Muathirun Holding Group, as the awarding body of the Professional Patient Experience Certificate, is committed to protecting the personal data of website visitors and applicants in accordance with the Saudi Personal Data Protection Law issued by Royal Decree No. M/19 and its implementing regulations. This policy explains what data we collect, why, how we keep it, and your rights regarding it.
What we collect
We collect only the data you provide through the website forms: identity data (name, national ID or Iqama number, date of birth, nationality, gender), contact data (mobile, email, city), professional data (employer, sector, job title, years of experience, professional classification number, qualification and specialty), and attachments (ID copy, qualification certificate, experience certificates, professional classification card, personal photo). We use no third-party tracking tools other than the hosting provider's basic performance metrics, and we collect no data from other sources.
Why we collect it
To process your application for the certificate or your registration in preparation programs, verify eligibility, contact you about your request, issue and document the certificate, and meet the requirements of the accrediting body. We do not use your data for marketing without separate explicit consent, and we do not sell or share it with third parties except technical service providers who process it on our behalf (hosting, database, email) under contractual confidentiality obligations.
Legal basis
We process your data on the basis of your explicit consent when submitting the form, to carry out the application procedures you requested, and to meet regulatory obligations towards the accrediting body.
Retention
We keep the data of accepted applications for the validity period of the certificate and five years after its expiry for certificate verification purposes. Incomplete or rejected applications and introductory course registrations are deleted within twelve months of the request date. The ID number is stored encrypted, and attachments are deleted at the end of the stated periods.
Protection
Data is stored in secured databases accessible only to the authorized certificate team, transmitted over encrypted connections, and attachments are kept in a private store not available to the public. We apply technical and administrative controls to limit unauthorized access and disclosure.
Your rights
You have the right to know what data we hold about you, request a copy, correct it, request its destruction when the purpose no longer applies, and withdraw your consent at any time without affecting the lawfulness of prior processing. We respond to requests within thirty days.
Contact
For any request or enquiry about your personal data, email info@muathirun.com with the subject Personal data request; the data protection officer at Muathirun Holding Group will respond.