1. Data Controller & Scope
Green Path Medica acts as the data controller for personal information processed through this website, our corporate communications, partner onboarding workflows, and investor relations channels.
This Policy applies to all visitors, partners, investors, suppliers, candidates, and any other natural person whose personal data we may process in connection with our healthcare and consumer wellness operations across Saudi Arabia, the GCC, and the European Union.
2. Categories of Personal Data
We may collect and process the following categories of personal data: identification and contact details (name, email, phone, professional title, organization); commercial and investment information (areas of interest, investment mandate, regulatory standing); technical data (IP address, device identifiers, browser type, language preference); and any information you voluntarily provide through forms, communications, or partnership submissions.
Green Path Medica does not knowingly collect protected health information from patients through this corporate platform. Where clinical, pharmacovigilance, or product-quality data is processed by our brand partners, separate notices and consents are administered under the controllership of the relevant licensed entity.
3. Lawful Basis for Processing
We process personal data only where a lawful basis exists under Article 6 GDPR and equivalent provisions of the PDPL, including: (a) performance of a contract or pre-contractual measures; (b) compliance with a legal obligation; (c) the legitimate interests pursued by Green Path Medica as a regulated healthcare enterprise, balanced against the rights and freedoms of the data subject; and (d) your explicit, informed, and freely given consent where required.
4. Purposes of Processing
Personal data is processed to evaluate and administer commercial partnerships and investment relationships; to communicate corporate developments, media releases, and Vision 2030-aligned initiatives; to manage recruitment and career inquiries; to ensure information security, fraud prevention, and audit integrity; and to comply with anti-money-laundering, sanctions, healthcare licensing, and tax obligations across our operating jurisdictions.
5. International Data Transfers
As a platform operating across Saudi Arabia, the European Union, and the broader GCC, personal data may be transferred between Green Path Medica entities and approved processors located in these jurisdictions. All cross-border transfers are governed by appropriate safeguards, including Standard Contractual Clauses, intra-group data-transfer agreements, and adequacy determinations issued by the competent supervisory authority.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with statutory record-keeping obligations, and to defend our legitimate legal interests. Retention schedules are reviewed periodically and aligned with regulatory requirements applicable to healthcare, financial, and corporate records.
7. Security Safeguards
Green Path Medica implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, role-based access controls, network segmentation, structured incident-response procedures, and ongoing personnel training. Material data incidents are notified to supervisory authorities and affected individuals within the timeframes required by applicable law.
8. Your Rights
Subject to applicable law, you have the right to request access to your personal data, rectification of inaccurate information, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent where consent was the lawful basis. You also have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.
To exercise any of these rights, please contact our Data Protection Office at privacy@greenpathmedica.com. We will respond within the timeframes mandated by applicable law.
10. Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory landscape. The effective date above indicates the most recent revision. Material changes will be communicated through prominent notice on this website.
11. Contact
For any privacy-related inquiry, please contact: Data Protection Office, Green Path Medica Co., Ltd., King Abdullah Financial District, Riyadh, Kingdom of Saudi Arabia. Email: privacy@greenpathmedica.com.