Privacy Policy
This Privacy Policy explains how the Saudi Health Tourism Association (“the Association”, “we”, “us”) collects, uses, shares and protects personal data through the Health Tourism Future Forum 2026 website at saudihtf.com and the related event registration and communications. It applies to visitors, registrants, delegates, speakers, sponsors and partners.
Because the Forum attracts an international audience, this policy is designed to meet the Personal Data Protection Law of the Kingdom of Saudi Arabia (“PDPL”), administered by the Saudi Data and Artificial Intelligence Authority (SDAIA), and, where it applies to visitors in the European Union and United Kingdom, the EU and UK General Data Protection Regulation (“GDPR”).
1. The personal data we collect
Information you provide
- Registration and contact data: full name, job title, organisation, work email address, telephone number, country and professional sector.
- Event participation data: session or track selections, attendance status, and any speaker, sponsor or partner details you submit.
- Optional information: dietary requirements, accessibility needs or other details you choose to provide.
- Correspondence: the content of messages you send us.
Information collected automatically
- Technical and usage data: IP address, approximate location, browser and device information, referring pages and how you interact with the site.
- Cookies and similar technologies: as described in our Cookie Policy.
2. How we use personal data and our legal bases
We process personal data for the purposes below. Under the GDPR each relies on a legal basis (shown in brackets); under the PDPL we rely on your consent and on legitimate interests permitted by the law.
- To manage your registration and provide your access pass, confirmations and event information (performance of our arrangement with you; legitimate interests).
- To send essential event communications such as confirmations, joining instructions and logistical updates (performance of our arrangement with you).
- To send marketing communications about the Forum and future editions, where you have consented or where permitted by law (consent; legitimate interests).
- To measure and improve the website and our campaigns using analytics and advertising tools (consent for non-essential cookies; legitimate interests).
- To maintain security and prevent abuse of the website and registration system (legitimate interests; legal obligation).
- To comply with legal and regulatory obligations (legal obligation).
3. Marketing communications
Where required, we send marketing by email only with your consent. You can withdraw consent or opt out at any time using the unsubscribe link in any marketing email or by contacting info@saudihtf.com. Opting out of marketing does not stop essential messages about an event you have registered for.
4. Who we share personal data with
We do not sell personal data. We share it only with service providers acting on our instructions, and with third parties where required by law. Our principal providers are:
| Provider | Role | Location of processing |
|---|---|---|
| Supabase | Registration database and backend functions | European Union (Frankfurt) |
| Resend | Confirmation and transactional email | United States / global |
| Cloudflare | Website hosting, delivery and security | Global edge network |
| Analytics and tag management (GA4, Google Tag Manager) | United States / global | |
| Meta Platforms | Advertising measurement (Meta Pixel) | United States / global |
| Advertising measurement (Insight Tag) | United States / global |
5. International transfers
Some providers are located outside the Kingdom of Saudi Arabia, and registration data is hosted in the European Union. Where personal data is transferred across borders, we rely on transfers to jurisdictions recognised as providing adequate protection, on appropriate safeguards such as standard contractual clauses, and on the conditions permitted for cross-border transfers under the PDPL.
6. How long we keep personal data
We keep personal data only as long as necessary for the purposes in this policy. We retain event registration records for up to 24 months after the Forum, and marketing contact details until you withdraw consent, after which data is deleted or anonymised.
7. How we protect personal data
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls on the registration system, and limiting access to those who need it. No method of transmission or storage is completely secure, but we work to protect personal data against unauthorised access, loss or misuse.
8. Your rights
Subject to the conditions of the applicable law, you have rights over your personal data. Under the PDPL these include the right to be informed, to access, to request correction and to request destruction of your data. If the GDPR applies to you, you also have rights to erasure, restriction, data portability, objection to certain processing, and not to be subject to solely automated decisions with legal effects.
To exercise any right, contact info@saudihtf.com. We respond within the timeframe required by the applicable law. There is normally no charge, and we may need to verify your identity.
9. Complaints
Please contact us first so we can try to resolve any concern. You also have the right to complain to a supervisory authority: in the Kingdom of Saudi Arabia, SDAIA; in the United Kingdom, the Information Commissioner’s Office (ICO); and in the European Union, your local data protection authority.
10. Children
The Forum and this website are intended for professionals and are not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The current version, with its effective date, will always appear on this page.
12. Contact us
For any question about this policy or your personal data, contact the Saudi Health Tourism Association at info@saudihtf.com.