Privacy Policy
Last Updated: August 2026
MRAYA respects the privacy of visitors to its website and is committed to protecting personal data collected and processed through the website in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its applicable regulations.
This Privacy Policy explains what personal data we may collect, how we collect and use it, how we protect it, and the rights available to you regarding your personal data.
1. Personal Data We Collect
Depending on how you interact with our website, we may collect personal data such as:
- Name.
- Email address.
- Phone number.
- Company or organization name.
- Job title, where provided.
- Information submitted through contact forms or demo requests.
- Communications and inquiries sent to us.
- Technical information such as IP address, browser type, device type, operating system, and website usage information, depending on the technologies used on our website.
We aim to collect only the personal data reasonably necessary for the purposes described in this Privacy Policy.
2. How We Collect Personal Data
We may collect personal data when you:
- Contact us through the website.
- Complete a "Contact Us" form.
- Request a demo or information about our solutions.
- Submit a business or technical inquiry.
- Subscribe to content or services available through the website, where applicable.
- Browse or interact with the website through cookies and similar technologies, where used.
3. How We Use Your Personal Data
We may process personal data collected through the website to:
- Respond to inquiries and contact requests.
- Arrange demonstrations, meetings, or consultations.
- Provide information about MRAYA products and services.
- Manage relationships with prospective and existing customers.
- Improve our website and user experience.
- Analyze website performance and usage.
- Maintain website security and detect unauthorized or potentially harmful activities.
- Comply with applicable legal and regulatory obligations.
- Send marketing communications where there is an appropriate legal basis, with the ability to opt out where applicable.
4. Legal Basis for Processing
We process personal data based on the appropriate legal basis applicable to the relevant processing activity.
Depending on the circumstances, this may include:
- Your consent, where required.
- Taking steps at your request before entering into a contractual relationship.
- Performing contractual obligations.
- Complying with legal or regulatory requirements.
- Other lawful grounds permitted under applicable laws and regulations.
Where consent is the legal basis for processing, you may withdraw your consent in accordance with applicable requirements.
5. Sharing Personal Data
MRAYA does not sell your personal data.
Where necessary, we may share personal data with trusted service providers that support the operation of our website and services, including providers of:
- Website hosting and technology infrastructure.
- Email and communication services.
- Cybersecurity services.
- Website analytics, where applicable.
- Customer relationship management services, where applicable.
We may also disclose personal data to competent governmental, regulatory, judicial, or law enforcement authorities where required or permitted by applicable law.
We take appropriate measures to require service providers processing personal data on our behalf to maintain suitable privacy and security protections.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate the website, remember preferences, improve performance, and understand how visitors interact with our services.
Cookies may include:
- Strictly necessary cookies.
- Performance and analytics cookies.
- Functional cookies.
- Marketing cookies, where applicable.
Where applicable law requires your consent for certain cookies or similar technologies, they will only be activated after the required consent has been obtained.
You may also manage certain cookie preferences through your browser settings or through a cookie preference tool provided on the website, where available.
7. Third-Party Websites and Links
Our website may contain links to third-party websites, platforms, or services.
MRAYA does not control the privacy practices of third parties. We encourage you to review the privacy policies of external websites and services before providing personal data to them.
8. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, use, disclosure, alteration, loss, or destruction.
Depending on the nature of the website and services, these measures may include:
- Access controls.
- Secure system and account management.
- Encryption of communications.
- Security monitoring.
- Vulnerability and patch management.
- Backup measures where appropriate.
- Security event monitoring and management.
However, no electronic system or transmission of information over the Internet can be guaranteed to be completely secure.
9. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected or as required by applicable legal, regulatory, contractual, or legitimate operational requirements.
When personal data is no longer required, it will be securely deleted, destroyed, or anonymized in accordance with applicable requirements, unless its continued retention is required by law.
10. International Data Transfers
Where the operation of our website or provision of our services requires personal data to be transferred outside the Kingdom of Saudi Arabia, such transfers will be conducted in accordance with applicable requirements governing the transfer of personal data outside the Kingdom.
Appropriate safeguards will be implemented where required.
11. Your Personal Data Rights
Subject to applicable laws, regulations, conditions, and exceptions, you may have rights regarding your personal data, including:
- The right to be informed about the processing of your personal data.
- The right to access your personal data.
- The right to request a copy of your personal data where applicable.
- The right to request correction, completion, or updating of inaccurate personal data.
- The right to request destruction of your personal data where the applicable legal conditions are met.
- The right to withdraw consent where consent is the legal basis for processing.
Requests relating to these rights may be submitted using the contact details provided below.
12. Children's Privacy
The MRAYA website is primarily intended for healthcare organizations, professionals, businesses, customers, and individuals interested in MRAYA's services and is not designed to directly collect personal data from children.
If we become aware that children's personal data has been collected unintentionally through the website, we will handle such data in accordance with applicable legal requirements.
13. Health and Medical Information
The public MRAYA website is not intended for submitting medical records, patient information, or sensitive health data through general contact forms.
Please do not submit patient records, medical information, or other sensitive health data through general website contact forms unless MRAYA provides a specifically designated, secure, and authorized channel for that purpose.
Processing of health and patient data through MRAYA healthcare products and platforms is subject to the applicable contractual terms, data processing arrangements, security controls, and privacy requirements governing those services.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technologies, business practices, or applicable legal and regulatory requirements.
When material changes are made, the updated version will be published on this page and the "Last Updated" date will be revised accordingly.
15. Contact Us
For questions regarding this Privacy Policy or requests concerning your personal data, please contact:
MRAYA
Website: mraya.com
Privacy Email: mraya@info.com
General Email: mraya@info.com
Registered Address: Riyadh
By using the MRAYA website, you acknowledge that you have reviewed this Privacy Policy, subject to any circumstances where applicable law requires separate and specific consent for a particular processing activity.