Privacy policy
This site asks for no personal data beyond your email if you subscribe to the newsletter: no accounts, other forms or comments. The server keeps a technical log (IP address, browser, page and time) solely to run and protect the site. With your consent only, Google Analytics measures visits — no advertising, nothing sold — and you can withdraw that consent at any time.
- Reading time
- 2 min read
- Published
What does this site collect?
Nothing you type, except your email if you choose to subscribe to the newsletter (see below). The public site has no sign-up, contact form or comments.
Like every web server, ours keeps a technical log of each request: IP address, browser type, the page requested and the time. We use it only to keep the site running and to defend it against attacks.
The newsletter
If you subscribe to the newsletter, your email address is the only datum we collect, for one purpose: sending the newsletter. Subscribing starts with your explicit consent in the form and is complete only after you open the confirmation link sent to you and press the confirm button. If you do not confirm, the link expires after 48 hours and your address is deleted 7 days after that. We keep the consent text you saw and when you agreed. Every message carries an unsubscribe link; one click is enough, and the address is deleted 90 days after unsubscribing. No tracking in the messages, no hidden images. Messages go out through Resend, an email delivery service with servers in Japan, which receives subscriber addresses solely to deliver them.
Does the site use cookies?
No advertising cookies. The site sets one cookie that remembers your answer in the
analytics consent bar (dw_analytics, kept six months). Only if you accept Google
Analytics does Google set its cookies (_ga and _ga_…), which tell visits apart
without knowing who you are; they are deleted when you withdraw your consent.
Where is the data stored, and for how long?
The server is hosted in Vienna, Austria (European Union). Technical logs are kept for no more than 30 days and then deleted.
Is anything shared or sold?
No. Logs are not sold, rented or shared for advertising. They are disclosed only if the law requires it.
What about analytics?
We use Google Analytics 4 to learn which pages are read, where visitors come from and how long they stay — only after you accept; nothing of it loads before.
It records the page (without any token in its address), the device and browser type, the approximate country and city, the site you came from, scrolling, and clicks on links to other sites. It does not record what you type into the search, nor your email, and it is not linked to your Google account: Google signals, ad personalisation and data sharing with Google are all switched off. Google keeps the detailed event data for two months, then deletes it.
Google processes this data on its servers outside Saudi Arabia (including the United States) under its data processing terms. You can withdraw your consent at any time from «Privacy settings» at the bottom of every page.
What are your rights?
Under Saudi Arabia's Personal Data Protection Law you may ask to know what we hold about you, to obtain a copy, to correct it, or to have it deleted. You may also complain to the Saudi Data & AI Authority (SDAIA).
Who is responsible, and how do I reach them?
The data controller for this site is Dr. Dawood Hamid. For any request about your data — to know what we hold, obtain a copy, correct it or delete it — write to dr.dawoodhamid@gmail.com.
Links to other sites
Links to the hospital, social networks or sources are governed by those sites' own policies.