Privacy Policy

Privacy Policy

Privacy Policy

Last updated: August 2026

MedicalHup respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal data when you visit our website, use our applications, create an account, place an order, communicate with us or otherwise use our services.

By using MedicalHup, you acknowledge the practices described in this policy.

1. Who We Are

MedicalHup is an online platform offering medical equipment, healthcare supplies, laboratory and diagnostic products, dental products, medicines, supplements and other health-related products.

For applicable personal data protection laws, MedicalHup acts as the controller of the personal data collected through its platform, except where another party is separately identified as the controller.

2. Personal Data We Collect

Depending on how you use MedicalHup, we may collect the following categories of personal data:

Identity and Contact Information

  • Full name
  • Mobile number
  • Email address
  • Billing and delivery addresses
  • Account username or identifier

Account Information

  • Login details
  • Account preferences
  • Saved addresses
  • Communication and marketing preferences
  • Account activity

Order and Transaction Information

  • Products purchased or returned
  • Order history
  • Invoice details
  • Payment status and transaction references
  • Refund and exchange records

Payment-card information may be processed directly by authorized payment-service providers. MedicalHup may receive payment confirmation and transaction details without receiving or storing complete card information.

Delivery Information

  • Recipient’s name and contact details
  • Delivery address and instructions
  • Shipment status
  • Proof of delivery

If you provide another person’s information for delivery, you confirm that you are authorized to provide it.

Customer Support Information

  • Messages, enquiries and complaints
  • Call or chat records where applicable
  • Photographs, videos or documents submitted regarding an order
  • Survey and feedback responses

Technical and Usage Information

  • Internet Protocol address
  • Browser and device type
  • Operating system
  • Login and activity records
  • Pages viewed and features used
  • Cookie and similar-technology identifiers
  • Approximate location derived from technical information

Health or Prescription Information

Where required to supply a regulated product, we may collect prescription details, healthcare-professional information or limited health-related information.

Such information may be considered sensitive personal data and will only be collected and processed when necessary and permitted by applicable law.

Seller and Business Information

If you register as a seller, supplier or business customer, we may collect:

  • Business and authorized-representative information
  • Commercial-registration and licensing details
  • Tax and banking information
  • Product and fulfilment records
  • Regulatory documents and certificates

3. How We Collect Personal Data

We may collect personal data:

  • Directly from you when you register, order or contact us
  • Automatically when you use our website or applications
  • From approved sellers, payment providers and delivery companies
  • From healthcare professionals or authorized representatives where applicable
  • From fraud-prevention, identity-verification or regulatory sources
  • From publicly available sources where permitted by law

4. Why We Use Your Personal Data

We may process personal data to:

  • Create and manage your account
  • Process payments, orders, deliveries, returns and refunds
  • Verify prescriptions and regulatory eligibility where required
  • Communicate order and service updates
  • Respond to questions, complaints and support requests
  • Personalize your shopping experience
  • Maintain and improve our website, applications and services
  • Detect and prevent fraud, misuse and security incidents
  • Maintain business, tax and transaction records
  • Comply with legal and regulatory obligations
  • Enforce our Terms of Use and protect our legal rights
  • Send offers and marketing communications where permitted

We will not use your personal data for a purpose that is incompatible with the purpose for which it was collected unless permitted by law or after providing an appropriate notice.

5. Legal Basis for Processing

Depending on the circumstances, we process personal data based on one or more of the following:

  • Your consent
  • The need to enter into or perform a contract with you
  • Compliance with legal or regulatory obligations
  • Protection of your vital interests
  • Our legitimate interests where permitted and where your rights are not unfairly affected
  • Another lawful basis recognized under applicable Saudi laws

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing lawfully completed before the withdrawal.

6. Mandatory and Optional Information

Some information is required to create an account, complete a purchase, deliver an order or comply with regulatory requirements.

If you do not provide required information, we may be unable to create your account, process your order or provide the requested service.

Information marked as optional may be provided at your discretion.

7. Cookies and Similar Technologies

MedicalHup may use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences and shopping cart
  • Maintain platform security
  • Understand website performance and usage
  • Improve services and user experience
  • Measure advertising effectiveness where permitted

You can manage cookies through your browser or available cookie settings. Disabling certain cookies may affect the operation of some platform features.

Where consent is required for non-essential cookies, we will request it through the appropriate consent mechanism.

8. When We Share Personal Data

We may disclose personal data only when necessary and permitted by law, including to:

  • Approved sellers and suppliers involved in fulfilling an order
  • Payment gateways, banks and fraud-prevention providers
  • Delivery, courier and logistics companies
  • Website-hosting, cloud, IT and cybersecurity providers
  • Customer-support and communication-service providers
  • Analytics and marketing providers, subject to applicable consent requirements
  • Professional advisers, auditors and insurers
  • Government, judicial, regulatory or law-enforcement authorities
  • A purchaser or successor in connection with a lawful merger, acquisition or business transfer

These parties may only receive the information reasonably necessary for their services and must protect it according to applicable contractual and legal requirements.

9. We Do Not Sell Personal Data

MedicalHup does not sell or rent your personal data to third parties.

We do not disclose personal data for unrelated third-party marketing without your consent or another lawful basis.

10. International Data Transfers

Some service providers may process or store personal data outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside the Kingdom, MedicalHup will apply the required safeguards and comply with applicable Saudi requirements governing international transfers of personal data.

11. Data Retention and Destruction

We retain personal data only for as long as necessary to:

  • Fulfil the purposes described in this policy
  • Maintain transaction, warranty and customer-service records
  • Meet legal, accounting, tax and regulatory requirements
  • Resolve disputes and enforce agreements
  • Prevent fraud and protect platform security

Retention periods vary according to the type of information and the applicable requirements.

When personal data is no longer required, it will be securely deleted, destroyed or anonymized unless continued retention is required or permitted by law.

12. Data Security

MedicalHup uses appropriate administrative, organizational and technical safeguards designed to protect personal data from:

  • Unauthorized access or disclosure
  • Accidental loss
  • Misuse or alteration
  • Unlawful processing
  • Destruction or damage

These measures may include access controls, encryption, monitoring, secure systems and staff confidentiality requirements.

No electronic system is completely secure. Customers are also responsible for protecting their passwords and notifying us of any suspected unauthorized account access.

13. Your Personal-Data Rights

Subject to applicable law, you may have the right to:

  • Be informed about how your personal data is collected and used
  • Access your personal data
  • Request a clear and readable copy of your personal data
  • Correct, update or complete inaccurate information
  • Request the destruction of personal data when legally applicable
  • Withdraw consent where processing depends on consent
  • Submit a complaint regarding the processing of your personal data

Certain requests may be restricted where necessary to comply with legal obligations or protect the rights of another person.

We may request information to verify your identity before completing a request. You may exercise your rights by contacting us through the Contact Us page.

14. Marketing Communications

Where permitted, MedicalHup may send information about products, services and promotional offers.

You may unsubscribe from marketing communications at any time by:

  • Selecting the unsubscribe option in the message
  • Updating your account preferences
  • Contacting customer support

You may continue to receive necessary transactional communications regarding orders, payments, security and account administration.

15. Children’s Privacy

MedicalHup is not intended for independent use by children under 18.

Orders for children’s products must be placed by a parent, guardian or legally authorized adult. We do not knowingly collect children’s personal data without the required authorization.

If you believe that a child has provided personal data without proper authorization, please contact us.

16. Third-Party Websites and Services

Our platform may contain links to third-party websites, applications, payment services or social-media platforms.

Those parties have their own privacy policies and practices. MedicalHup is not responsible for how independent third parties process personal data.

We recommend reviewing their privacy policies before providing information.

17. Changes to This Privacy Policy

MedicalHup may update this policy to reflect changes in our services, technology, business practices or legal requirements.

The updated version will be published on this page with a revised last-updated date. Where required, we will provide additional notice or request renewed consent.

18. Contact Us

If you have questions, complaints, or requests concerning this Privacy Policy or your personal data, please contact the MedicalHup customer-support team through our Contact Us page.