NEOM Hospital Website Privacy Notice
At NEOM, we want you to understand what information we collect and how we use it when you visit the NEOM Hospital website.
In the Privacy Notice, we explain how we collect, use, share, retain and transfer information. We also let you know your rights. Each section of this Notice includes helpful examples and simple language to make our practices easier to understand. We’ve broken our Notice into sections for ease, and we’ll continue to make improvements like adding links to resources.
We are committed to protecting the personal information of all NEOM Hospital website visitors.
This Notice, governed by the Personal Data Protection Law of Saudi Arabia (PDPL), explains how we responsibly and lawfully collect and use your information, and how we protect your privacy.
Who We Are
We are NEOM. This is the NEOM Hospital website.
NEOM is a company incorporated in the Kingdom of Saudi Arabia with commercial registration number 3550134238 and having its registered address at:
NEOM Community, Building 4758
Unit 2, 9136, Al Khuraybah
Tabuk, 49643
Kingdom of Saudi Arabia
As a business entity in the Saudi Arabia, we comply with the laws of the Kingdom as well as other applicable global laws and regulations.
If you have any concerns or questions about how we look after your personal data, contact our Personal Data Protection Office at the following email address:
Email: data.privacy@neom.com
What Personal Data Do We Collect?
When you visit the NEOM Hospital website, we may collect:
• Browser and device information, such as your IP address, browser type, operating system, and website activity.
• Cookie and tracking information, subject to your cookie preferences.
• Contact information that you voluntarily provide through website forms, such as your name, email address, or telephone number.
• Information contained in enquiries, feedback, or other communications submitted through the website.
The NEOM Hospital website is intended to provide information about our services and facilities. This website notice does not apply to patient care, medical treatment, medical records, or other healthcare services, which are subject to separate privacy notices.
Source of Personal Data
We collect personal data:
• Directly from you when you submit information through the website.
• Automatically through cookies and similar technologies when you interact with the website.
The Purposes for Processing your Personal Data and Legal Basis
We only use personal data for the purpose it was collected for.
We process your personal data for the following reasons and have established a legal basis in law for doing so as follows. We rely on consent for the following activities:
• Quality Review: Such as when we review data about how users interact with NEOM Hospital website services, including access dates and times, website features or pages viewed, browser type, website crashes, and other system activity to monitor and improve performance.
And legitimate interest to ensure site security, such as when we monitor traffic to identify whether the site is being used as expected.
Providing Personal Data
In the event that any activity has relied on your consent, you may withdraw that consent at any time. There may be another legal basis which requires us to process your personal data.
If you decline to provide personal information, we may be unable to provide a service or offering as described earlier such as providing you with additional information about NEOM or responding to your enquiries.
Storage and Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected and in accordance with applicable laws, regulations, and NEOM policies.
Sharing Personal Data
We may share personal data with service providers who support the operation, hosting, maintenance, and security of the website. We require these providers to protect personal data and process it only on our instructions.
We do not sell personal data or disclose it to third parties for their own marketing purposes.
Your Privacy Rights
You can exercise your privacy rights, under certain circumstances, pursuant to the Kingdom’s Privacy Laws and Regulations. These rights are not absolute and are subject to qualifications.
Right to be Informed: You have the right to be provided with information about how we use your personal data, and about your rights.
Right of Access: You have the right to access your personal data.
Right of Request: You have the right to request a copy of your personal data in a readable and clear format.
Right to Correction: You have the right to request the correction of your personal data.
Right to Destruction: You have the right to request the destruction of your personal data.
Unless otherwise stipulated by the law, you will not be required to pay any fees in return for exercising this right. You will receive a response within 30 days from receipt of the request.
You can exercise any of these rights, ask questions about how we use personal data, or complain by contacting us at:
Email: data.privacy@neom.com
Complaint and Appeal
If you have any concerns, or should you feel we have failed to comply with our obligations, you can file a complaint to the NEOM Personal Data Protection Office: data.privacy@neom.com
If you are not satisfied with how we process your data protection complaint, or if we fail to respond within 30 days, you can file a complaint to the Competent Authority, namely, the Saudi Data & AI Authority (SDAIA):
SDAIA
Digital City
Riyadh, 12382
Kingdom of Saudi Arabia
Website: sdaia.gov.sa
Call: 8001221111
National Data Governance Platform: dgp.sdaia.gov.sa
Version
Version 3.0
Published: August 2026
