Privacy Policy

Last updated: May 2026

1 Introduction

CareMart is operated by HMC Group (Al-Hamaed Medical & Trading Co.) and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL). This policy explains how we collect, use, and protect your information.

2 Data We Collect

We collect: account information (name, mobile, email), order information (address, payment method, purchase history), technical data (IP, browser, device), and communication data (support messages).

3 How We Use Your Data

We use your data to process orders, send confirmations and updates, provide customer support, improve our platform, and comply with legal obligations. Promotional communications require your consent.

4 Data Sharing

We do not sell your personal data. We share only with payment processors (PayTabs), shipping partners, and technology providers — all under strict data processing agreements.

5 Your Rights (PDPL)

You have the right to access, correct, delete, and port your data, and to withdraw consent at any time. Contact us at privacy@caremart.sa to exercise these rights.

6 Data Retention

Order data is retained for 5 years to comply with ZATCA regulations. Account data is retained while your account is active. You may request deletion at any time.

7 Security

We implement SSL/TLS encryption, secure password hashing, rate limiting, and security headers. Payment data is processed by PayTabs and never stored on our servers.

8 Contact

Privacy inquiries: privacy@caremart.sa | Support: support@caremart.sa. We respond within 5 business days.