Privacy Policy

Nawat Altakwin Company — Limited Liability Company
Head office: Al Arid, Riyadh, Kingdom of Saudi Arabia
CR: 7053936733 · VAT: 314703130800003
Email: contact@nawa.com.sa · Phone: +966 55 061 3902

• Identity and contact details (name, phone, email, city).
• Booking information (service selected, wedding timeline, preferred contact method).
• Medical and family history you provide in connection with the test.
• Biological samples you provide (e.g. saliva or blood) and the genetic data derived from them.
• Payment metadata processed through licensed payment providers (we do not store card numbers).
• Technical data: device, browser, IP address, cookies, and site analytics events.
• Communications you exchange with our support and counselling teams.

We rely on one or more of the following legal bases under the Personal Data Protection Law:

• Your explicit consent, in particular for processing health and genetic data.
• Performance of the service contract you enter into when you book a test.
• Compliance with legal, regulatory, or professional obligations (e.g. MoH, SFDA, tax law).
• Legitimate interests in operating, securing, and improving our services.

Genetic data and health information are treated as sensitive personal data. We collect and process such data only after you give informed, explicit consent through our Informed Consent for Genetic Testing. Access to genetic data is restricted to authorised laboratory, medical, and counselling personnel bound by confidentiality obligations.

• Provide, schedule, and deliver the genetic tests and related counselling you request.
• Communicate with you about your booking, results, and follow-up.
• Issue tax-compliant invoices and manage payments.
• Improve our services, quality, and security using aggregated or de-identified data.
• Comply with applicable laws and respond to lawful requests from competent authorities.

We share personal, health, and genetic data only with parties who need it to deliver the service or as required by law:

• Accredited laboratory partners performing the genetic analysis.
• Licensed genetic counsellors and physicians involved in your case.
• Payment processors, cloud, hosting, and communications providers acting on our instructions.
• Regulators, auditors, or courts where required by applicable law.

We do not sell your data and do not share it with employers, insurers, or marketers.

Where a laboratory partner or service provider is located outside the Kingdom of Saudi Arabia, we transfer data only under safeguards permitted by Saudi PDPL, including contractual data-protection commitments and appropriate security measures.

We retain identifying and health records for the period required by applicable Saudi healthcare, laboratory, tax, and record-keeping regulations. Biological samples are retained only for as long as necessary to complete the test and any required re-analysis, after which they are destroyed in accordance with laboratory protocols. You may request deletion of data not subject to a legal retention obligation.

We apply administrative, technical, and physical safeguards including encryption in transit and at rest, role-based access controls, audit logging, and confidentiality obligations on personnel and partners. No system is perfectly secure; we work continuously to reduce risk.

Subject to Saudi PDPL and applicable law, you have the right to:

• Be informed about how we process your data.
• Access your data and request a copy.
• Correct inaccurate or incomplete data.
• Request deletion or destruction of data no longer required by law.
• Withdraw consent, without affecting processing carried out before the withdrawal.
• File a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).

To exercise these rights, contact us at contact@nawa.com.sa. We may verify your identity before responding.

Our site uses strictly necessary cookies and privacy-respecting analytics to measure how visitors use the site so we can improve it. You can control cookies through your browser settings.

Our services are directed at adults who are legally able to consent. We do not knowingly collect data from minors. If you believe a minor has provided data to us, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the policy was last revised. Material changes will be communicated where required.

Questions or requests regarding this policy: email contact@nawa.com.sa or call +966 55 061 3902.