Privacy policy

Who we are

The controller of your personal data is EBTEKARAT NOUREDDINE For Technologies Company (شركة ابتكارات نور للتقنيات, trading as “NIT”, “we”, “us”), a limited liability company registered in Riyadh, Kingdom of Saudi Arabia, under Commercial Registration No. 1009099813 (Unified No. 7041741039). For anything about your data, write to privacy@nit-med.com.

This policy follows the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) and its implementing regulations. It covers this website and its forms. It does not cover the GlucoState® app, which has its own privacy notice [TO BE PUBLISHED WITH THE APP].

The short version

• We collect only what you type into our forms, plus basic technical data needed to run a secure website.
• We use it to reply to you, to process your request or application, and to tell you when GlucoState® is available if you ask us to.
• We never sell your data, and we do not use it for advertising.
• Messages and requests are deleted automatically after 24 months; job applications and CVs after 12 months.
• You can ask to see, correct or delete your data at any time.

What we collect and why

Contact form

• Data: name, organisation (optional), email, the role you choose (optional) and your message.
• Purpose: to answer your enquiry.
• Legal basis: your consent, given with the tick box on the form.
• Kept for: 24 months, then deleted automatically.

Product information and clinician requests

• Data: name, work email, organisation or institution, role, and what you would like to receive.
• Purpose: to send the information, samples, training or meeting you asked for.
• Legal basis: your consent.
• Kept for: 24 months.

Waitlist and “notify me” forms

• Data: email, and optionally your city and whether you are a patient, caregiver or healthcare professional.
• Purpose: to email you when GlucoState® launches or becomes available near you. We send one message for this purpose and no marketing lists.
• Legal basis: your consent.
• Kept for: 24 months, or until you ask us to remove you.

Job applications

• Data: name, email, phone (optional), area of interest, profile link (optional), CV (optional) and what you tell us about yourself.
• Purpose: to assess your application and contact you about roles.
• Legal basis: your consent, and steps taken at your request before a possible employment contract.
• Kept for: 12 months, then deleted with the CV. If you are hired, your data moves to your employee file under a separate notice.

Technical data

• Data: IP address, browser type, pages requested and the time of the request, recorded in server logs.
• Purpose: to run the website securely, prevent abuse (for example spam and repeated form submissions) and fix problems.
• Legal basis: our legitimate interest in a secure website, which does not apply to sensitive data.
• Kept for: [LOG RETENTION — TO CONFIRM WITH HOSTING PROVIDER, normally 30 days].

Cookies

We use one essential cookie to remember your cookie choice. Analytics cookies are used only if you choose “Accept all”. See the cookie policy.

Health information

Our forms do not ask for health information, and the “I am” choices are optional. Please do not include details about your health in messages. If you do, we will use them only to answer you and will delete them on the schedule above. Health data is sensitive data under the PDPL and is given extra protection.

Who receives your data

• NIT staff who need it to answer you or handle your request. Access to submissions and CVs is limited to signed-in staff accounts.
• Service providers who process data for us under contract and only on our instructions:
• website hosting: [HOSTING PROVIDER — TO CONFIRM]
• database: [DATABASE PROVIDER — TO CONFIRM]
• email delivery: [EMAIL PROVIDER, e.g. Resend — TO CONFIRM]
• website analytics, only with your consent: Google Analytics [IF ENABLED]
• Authorities, when the law requires us to disclose data.

We do not sell personal data or share it for advertising.

Transfers outside Saudi Arabia

Some of our service providers may store or process data outside the Kingdom [LIST COUNTRIES — TO CONFIRM AT DEPLOYMENT]. Where this happens, we transfer data only as permitted by the PDPL and its Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards such as contractual commitments, and only the minimum data needed.

How we protect your data

• Encrypted connections (HTTPS) for the whole website.
• Form submissions and CVs stored in a private area that only authorised staff can open; CVs are never published at a public address.
• Protection against spam and repeated submissions.
• Staff sign-in protected against repeated failed attempts.
• If a breach affects your data, we will notify the Saudi Data & AI Authority (SDAIA) and, where required, you, within the time limits set by law.

Your rights

Under the PDPL you have the right to:

• be informed about how your data is collected and used (this policy);
• access your personal data and receive a copy in a readable format;
• correct data that is inaccurate or incomplete;
• have your data destroyed when it is no longer needed;
• withdraw your consent at any time, without affecting what was done before.

To use these rights, email privacy@nit-med.com from the address you used on our forms, or tell us how to verify that the request is yours. We reply within 30 days. Using your rights is free.

Complaints

If you are not satisfied with our answer, you can complain to the Saudi Data & AI Authority (SDAIA), which supervises the PDPL.

Children

This website is meant for adults. We do not knowingly collect data from children under 18. A parent or guardian may contact us on behalf of a child.

Changes to this policy

We may update this policy, for example when our service providers change. The date at the top shows the latest version. Significant changes will also be announced on this website.

Contact

• Privacy: privacy@nit-med.com
• Post: NIT, Building 3398, Street No. 30, Al Yasmeen District, Riyadh 13322-7809, Kingdom of Saudi Arabia (national short address RAYE3398)
• Data protection officer: [NAME OR ROLE, IF APPOINTED — TO CONFIRM]