Privacy policy
This privacy policy describes how Wdhoh collects, uses and protects your data when you use our services. We are committed to your privacy and data security in accordance with Saudi Arabian regulations, including the Personal Data Protection Law (PDPL).
Saudi hosting: the database, its backups and the platform’s files are hosted inside the Kingdom of Saudi Arabia on certified cloud infrastructure. Nothing leaves the Kingdom except what the email and WhatsApp services require, as set out under “Data sharing”.
1Data we collect
We collect the following data when you register and use the platform:
- Identity data: name, email address, phone number
- Centre data: therapy centre name, commercial registration details
- Patient data: medical information and patient files you enter into the system
- Usage data: login records, usage time, and features accessed
- Billing data: payment information and subscription invoices
2How we use your data
We use your data only for the following purposes:
- Providing and operating Wdhoh platform services
- Managing your account and activating your subscription
- Providing technical support and responding to your inquiries
- Issuing e-invoices compliant with ZATCA (Zakat, Tax and Customs Authority) requirements
- Improving the platform and developing features based on anonymised usage patterns
- Complying with legal and regulatory requirements in Saudi Arabia
3Hosting and infrastructure
Your data is hosted in the Kingdom: Wdhoh is a fully cloud-based (SaaS) platform operating on infrastructure hosted inside Saudi Arabia. No local servers are needed — your centre requires no hardware or software installations.
Our security measures include:
- Data encryption in transit using TLS/SSL
- Encryption of stored data (encryption at rest)
- Daily automatic backups with recovery capability
- Role-based access control ensuring employees access only their authorised data
- 24/7 security monitoring
4Data sharing
We do not sell your data to third parties. We may share your data only in these cases:
- ZATCA: sharing e-invoice data with the Zakat, Tax and Customs Authority per regulatory requirements
- Cloud infrastructure: cloud hosting providers inside the Kingdom for technical service operation
- Judicial authorities: upon official legal request from Saudi regulatory or judicial authorities
- WhatsApp (Meta): only if the centre turns WhatsApp messages on. The client’s name, mobile number and the message text (appointment confirmation, reminder, invoice) are sent through Meta’s platform, and may be processed outside the Kingdom. Each message type has its own on/off switch in the centre’s settings.
- Email provider (Resend): to send the platform’s emails, such as account activation, password recovery and notifications. It receives the recipient’s email address and the message content.
- NPHIES (the national health information exchange): only for centres subscribed to the integration once it launches. The client’s details, insurance and sessions needed for eligibility, approvals and claims are sent, within the Kingdom.
5Patient data and medical confidentiality
Patient data you enter into Wdhoh remains the exclusive property of your centre and cannot be accessed by any other centre. We treat patient data with the highest level of confidentiality in accordance with Saudi medical records requirements. Each centre is completely isolated from other centres' data.
6Data retention
We retain your data throughout your active subscription. Upon subscription termination, you may request a data export within 30 days of the termination date. Afterwards, data is permanently deleted from our systems following our secure deletion policy, except where the law requires us to retain it (such as tax invoice data).
7Your rights
Under Saudi Arabia's Personal Data Protection Law (PDPL), you have the following rights:
- Access: request a copy of your personal data
- Correction: request correction of inaccurate data
- Deletion: request deletion of your data, subject to regulatory constraints
- Export: request export of your data in a usable format
- Objection: object to certain processing of your data
To exercise any of these rights, contact us at: info@wdhoh.com
8Cookies
We use necessary cookies to operate the platform and maintain your login session. We do not use tracking cookies for advertising purposes. You can configure your browser to reject cookies, though this may affect the functionality of some platform features.
9ZATCA compliance
Wdhoh is compliant with the e-invoicing requirements issued by ZATCA (Zakat, Tax and Customs Authority). Required e-invoice data is transmitted to the authority securely in accordance with approved regulatory requirements.
10Policy updates
We may update this policy from time to time. When making material changes, we will notify you via your registered email or through an in-platform notification. Your continued use of the platform after updates are published constitutes acceptance of the updated terms.
11Contact us
For any inquiry or request related to this policy or your personal data:
- Email: info@wdhoh.com
- Website: wdhoh.com
- Kingdom of Saudi Arabia
Ready to see your centre clearly?
Book a walkthrough on cases like your own centre's; our team calls you within 24 hours to set up your trial account.