Privacy Policy

This Privacy Policy applies to all services provided by Florya Veterinary Clinics across its 13 hospital locations in the Kingdom of Saudi Arabia, our digital booking systems, the online shop (shop.florya.co), telehealth consultations, and customer communications. Florya acts as the Data Controller under the Saudi Personal Data Protection Law (PDPL).

To deliver clinical care and manage appointments, we collect: • Owner Identification: Full name, national/resident ID (where legally required for controlled substance prescriptions), contact telephone number, email address, and billing address. • Patient Medical Records: Pet name, species, breed, microchip number, vaccination history, diagnostic lab results, radiographic/ultrasound imaging, surgical notes, and ongoing prescriptions. • Transactional & Technical Data: Payment references (processed through PCI-DSS certified gateways; we never store raw credit card details), website usage analytics, and IP addresses.

We process your personal information strictly for legitimate, declared purposes: • Clinical Diagnosis & Treatment: Maintaining accurate medical history, emergency triage, and dispensing SFDA-regulated medications. • Communication & Reminders: Sending appointment reminders, vaccination booster alerts, critical lab results, and post-operative follow-up via SMS/WhatsApp/email. • Legal & Regulatory Obligations: Complying with reporting mandates established by the Ministry of Environment, Water and Agriculture (MEWA) and the Saudi Food and Drug Authority (SFDA).

We never sell, rent, or trade your personal data. We disclose information only to authorized entities under strict confidentiality agreements: • Accredited Reference Laboratories: For specialized pathology, histopathology, or genetic analysis. • Regulatory Authorities: When mandated by Saudi law (e.g. notifiable zoonotic diseases reported to health/veterinary authorities). • Service Providers: Secure cloud infrastructure providers, SMS gateways, and logistics partners for temperature-controlled pharmacy delivery.

We implement industry-grade technical and organizational security measures, including 256-bit encryption at rest and in transit, multi-factor authentication for clinical staff, and strict role-based access controls. Data is hosted and processed securely in compliance with the National Cybersecurity Authority (NCA) guidelines and Saudi data residency regulations.

Under the Saudi Personal Data Protection Law, you have the right to: • Access your personal data and request a full copy of your pet's electronic health record. • Request correction, updating, or rectification of any inaccurate personal data. • Request deletion of data when it is no longer necessary for medical, legal, or regulatory retention periods. • Withdraw consent for marketing and non-essential communications at any time.

For any inquiries, requests to exercise your statutory rights, or concerns regarding your privacy, please contact our Data Protection Officer at privacy@florya.co or visit any Florya Veterinary Clinic.