Privacy Policy

IMAGE Healthcare Middle East LLC Last updated: July 2026 1. Who We Are IMAGE Healthcare Middle East LLC ("IMAGE Healthcare", "we", "us") is a limited liability company registered in the Kingdom of Saudi Arabia (Commercial Registration No. 7054610378), headquartered at Quraish Street, Al Salamah District, P.O. Box 2421, Jeddah, Kingdom of Saudi Arabia. We provide medical imaging software solutions (including PACS and RIS systems), enterprise imaging integration, and teleradiology services to healthcare providers across the Middle East. We are committed to protecting personal data in accordance with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated 09/02/1443H, as amended, and its Implementing Regulations, under the supervision of the Saudi Data & Artificial Intelligence Authority (SDAIA), as well as other applicable laws and regulations of the Kingdom of Saudi Arabia. 2. Scope of This Policy This Privacy Policy explains how we collect, use, disclose, and protect personal data when you: - visit our website (www.imagehealthme.com); - contact us or submit an inquiry through our contact form; - communicate with us as a customer, supplier, or business partner. Note on patient data: Where we process patient data or medical images in the course of providing teleradiology services or supporting our software at healthcare facilities, we do so on behalf of, and under the instructions of, the relevant healthcare provider, under separate written agreements. Such processing is described in Section 6 below. 3. Personal Data We Collect Data you provide to us, for example when you complete our contact form or correspond with us: - First name and last name - Organization / hospital name and position - Email address and phone number - Country - The content of your message or inquiry Data collected automatically when you visit our website: - IP address, browser type and version, device type, operating system - Pages visited, date and time of access - Technical data necessary for the operation and security of the website We do not intentionally collect sensitive personal data (such as health data) through this website. Please do not include patient information or medical details in the contact form. 4. Purposes and Legal Basis of Processing We process personal data for the following purposes: - Responding to your inquiries and demo requests - Communicating with you about our products and services - Preparing quotations, agreements, and fulfilling contracts - Providing customer support and managing our business relationships - Complying with legal and regulatory obligations in the Kingdom of Saudi Arabia - Maintaining the security and proper functioning of our website We process personal data on the legal bases permitted under the PDPL, including your consent (which you may withdraw at any time), the performance of an agreement to which you are a party, our legitimate interests that do not prejudice your rights, and compliance with legal obligations. 5. Disclosure of Personal Data We do not sell personal data. We may share personal data only with: - IMAGE Information Systems Europe GmbH (Germany) — our technology partner and the manufacturer of the software solutions we distribute — where necessary to respond to your technical or product-related inquiries or to provide support; - Service providers who assist us in operating our website and business (such as IT and hosting providers), under appropriate confidentiality and data protection obligations; - Competent authorities in the Kingdom of Saudi Arabia, where disclosure is required by law or regulation. 6. Patient Data and Teleradiology Services In the course of providing teleradiology services or technical support for PACS/RIS systems installed at healthcare facilities, we may process medical images and related patient data. In such cases: - We act on behalf of, and under a written agreement with, the relevant healthcare provider, which remains responsible for the patient relationship; - Patient data is processed only to the extent necessary to deliver the contracted diagnostic reporting or support services; - Diagnostic images and patient-related files are anonymized or pseudonymized wherever possible and legally permitted; - Remote access to healthcare systems is established only through secure, approved tools; - All personnel involved are bound by confidentiality obligations; - Processing is carried out in accordance with the PDPL, applicable Ministry of Health requirements, and the healthcare provider's instructions. Patients seeking to exercise their rights regarding data processed in this context should contact their healthcare provider, and we will support the provider in responding to such requests. 7. International Data Transfers Personal data may be transferred outside the Kingdom of Saudi Arabia only in accordance with the PDPL and its Implementing Regulations — for example, to our technology partner in Germany for support purposes. In all such cases, we ensure an adequate level of protection through appropriate safeguards and limit the transfer to the minimum data necessary. 8. Data Retention We retain personal data only for as long as necessary for the purposes described in this Policy, to comply with our legal and regulatory obligations in the Kingdom of Saudi Arabia, or to establish, exercise, or defend legal claims. When personal data is no longer required, it is securely deleted or anonymized. 9. Data Security We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption where appropriate, secure remote access tools, and staff confidentiality undertakings. 10. Your Rights Subject to the PDPL, you have the right to: - Be informed about how your personal data is processed - Request access to the personal data we hold about you - Request correction of inaccurate or incomplete data - Request deletion of your personal data, where legally permissible - Withdraw your consent at any time, where processing is based on consent To exercise any of these rights, please contact us using the details in Section 13. You also have the right to lodge a complaint with the competent authority in the Kingdom of Saudi Arabia. 11. Cookies Our website uses only the cookies and similar technologies necessary for its proper functioning and security. We do not use advertising or third-party marketing cookies. If this changes in the future, we will update this Policy and, where required, request your consent. 12. Children Our website and services are directed at healthcare organizations and professionals. We do not knowingly collect personal data from children through this website. 13. Contact Us If you have any questions about this Privacy Policy or how we handle personal data, please contact: IMAGE Healthcare Middle East LLC Quraish Street, Al Salamah District P.O. Box 2421, Jeddah, Kingdom of Saudi Arabia Email: info@imagehealthme.com Phone: +966 56 550 6590 14. Changes to This Policy We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The updated version will be published on this page with a revised "Last updated" date.