DEMA is a healthcare digital growth consultancy based in Khobar, Saudi Arabia. This policy applies to the DEMA website and to personal information handled through our client-facing services.
Information we collect
We may collect information you provide directly, including your name, role, organisation, contact details, enquiry details and the answers you submit through a Growth Diagnosis or other form.
When you use the website, technical information may be collected automatically, such as device and browser type, approximate location, pages viewed, referral source and interaction data. During a client engagement, we may also process relevant business, marketing and operational information supplied by the client.
How we use information
We use personal information to respond to enquiries, assess whether DEMA can help, provide agreed services, operate and improve the website, send insights when you have chosen to receive them, and meet legal or regulatory obligations.
Legal basis for processing
Depending on the context, we process personal information with consent, to take steps at your request or perform a contract, to comply with a legal obligation, or where another basis permitted under applicable Saudi law applies. The appropriate basis will depend on the information and the purpose for which it is used.
Health-related information
DEMA is not a healthcare provider, and our public website is not designed to receive patient records or sensitive medical information. Please do not submit patient-identifiable or clinical information through our forms.
If a client engagement requires access to information connected with patients, the responsibilities, safeguards and permitted processing must be defined in the relevant agreement and data-processing terms before access is provided.
Cookies and tracking
We use essential browser technologies needed for the site to function. Additional analytics or marketing technologies will only be described and configured when the relevant tools and consent controls are enabled. See our Cookies Policy for the current position.
Data retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet contractual, legal, accounting or reporting requirements. Retention periods depend on the nature of the information and our obligations.
Security
We use reasonable organisational and technical safeguards designed to protect personal information from unauthorised access, alteration, disclosure or loss. No internet-based system can be guaranteed to be completely secure.
Your rights
Subject to applicable law, you may have rights to request access to your personal information, ask for inaccurate information to be corrected, request deletion where permitted, withdraw consent, or object to particular processing. We may need to verify your identity before acting on a request.
International transfers
Some service providers may process information outside Saudi Arabia. Where an international transfer occurs, DEMA will assess and apply the safeguards required by applicable law before the transfer is made.
Children’s privacy
Our website and services are intended for organisations and healthcare professionals, not children. We do not knowingly collect personal information directly from anyone under 18 through this website.
Changes to this policy
We may update this policy when our services, technology or legal obligations change. The latest version will appear on this page with its effective or review date.
Contact us
To ask a privacy question or exercise a data right, use our dedicated privacy enquiry form. Please do not include sensitive health information or identity documents.
Submit a privacy enquiry ↗