Privacy Policy

1. Scope of this policy

This Privacy Policy explains how BASERH handles personal data collected through its website at baserh.net (the “Website”), including the Early Access request form and the Early Access List.

It does not cover the BASERH mobile app. The app will have its own App Privacy Policy, published before broader access. Information processed inside the app, such as session details, clinical or treatment information, treatment plans, prescriptions, messages with specialists, audio or video calls and in-app payments, is not covered by this policy.

2. Who operates the Website

The Website is operated by شركة بصيرة للإرشاد الأسري (National Number 7028008576), the company that operates under the BASERH (بصيرة) brand. It is the controller of the personal data collected through the Website. In this policy, “BASERH”, “we” and “us” mean that company. For any question about this policy or your personal data, email privacy@baserh.net.

3. Information we collect

Early Access requests

• Who the request is for: yourself (18 or over), your teenager (13 to 17), or someone you care about. If you register as a licensed specialist, we record that instead.
• The type of support you’re interested in: therapy, psychiatry (including medication management), family or teen support, or exploring options. Specialists aren’t asked this.
• Preferred language: Arabic, English or both.
• Contact details: your name and email address and, if you choose to give them, your mobile number and phone type (iPhone or Android).
• Consent records: the version of the privacy consent you gave and when; whether you opted in to product and launch emails, and when; and, for a teenager, when you confirmed you are the parent or legal guardian.
• Request details: when you submitted the request and confirmed your email, the language of the page, and the page or campaign link you came from.

Required and optional information: to submit a request, you must say who it’s for, the type of support (unless you’re a specialist), your preferred language, your name and email, and give the privacy consent. For a teenager, a parent or legal guardian must also confirm their role. Your mobile number, phone type and product and launch emails are optional.

Why we treat the type of support as sensitive: it may show an interest in a particular kind of mental health service. We use it only for the purposes in this policy, limit who can see it to the authorised team, and never include it in emails we send you.

Contact form

If you write to us through the contact form, we receive your name, email address, mobile number if you give it, the reason you’re contacting us and your message. The message reaches our team by email.

Analytics, only if you accept

If you accept analytics cookies, Google Analytics may process information such as the pages you visit and how you use them, the website that referred you, your approximate location derived from your IP address, your device, browser and operating system, the date and time of your visit, and cookie identifiers. We do not describe this information as anonymous.

Technical and security information

Delivering the Website involves standard technical processing by our hosting provider, such as the connection information, including your IP address, needed to send pages to your device. To prevent abuse of the Early Access form, we keep a short-lived, one-way code derived from your connection. It cannot be turned back into your IP address.

4. Information we do not request

• The Early Access form doesn’t ask for diagnoses, symptoms, medical history, medications or clinical records. Please don’t include them in any form.
• If you submit a request for someone you care about, we collect information only about you. We don’t ask for their name, contact details or any health information.
• For a teenager, we don’t collect the teenager’s name, contact details or any other information about them at this stage.

5. Why we use your information

• To receive, review and manage your Early Access request.
• To confirm your email address and communicate with you about your request.
• To select people for private Early Access and send them access and setup instructions.
• To provide support related to your request, including by phone if you gave a mobile number.
• To contact you about joining BASERH if you registered as a specialist.
• To understand demand for types of support, languages and devices (iPhone or Android), and to improve the product and the Early Access experience.
• To measure website traffic and usage, if you accept analytics cookies.
• To send product and launch emails, only if you opt in separately.
• To keep the Website secure and prevent misuse, such as spam and repeated submissions.
• To meet legal obligations that apply to us.

We use your mobile number only to contact you about your Early Access request or related support. We don’t use it for marketing calls or marketing text messages. We use your phone type to send the right access instructions for your device and to understand demand for iPhone and Android, not for advertising.

6. Legal basis

We process your personal data under Saudi Arabia’s Personal Data Protection Law and its Implementing Regulations:

• Your Early Access request, including the type of support: your explicit consent, given with the privacy consent checkbox.
• Requests for a teenager: the consent of the parent or legal guardian who submits the request on the teenager’s behalf and confirms their role.
• Product and launch emails: your separate consent.
• Analytics cookies: your consent through the cookie choice.
• Contact form messages: your consent when you send your message.
• Website security and misuse prevention: our legitimate interest in protecting the Website, to the extent permitted by law and using as little data as possible.
• Legal obligations: where the law requires the processing.

You can withdraw your consent at any time (section 14). Withdrawal doesn’t affect processing carried out before you withdrew. If you withdraw consent to the processing of your Early Access request, we can no longer consider it.

7. Early Access review

A small, authorised BASERH team reviews Early Access requests manually. No automated system or AI decides who is selected, and we don’t use your information for automated profiling. Access to requests is limited to the team members who handle Early Access, admissions and support. Being on the list doesn’t guarantee access.

If you’re selected, we send you a private invitation by email. It contains only what you need to get started, such as confirmation that you’ve been selected, an access link and setup instructions. It doesn’t mention the type of support you chose.

8. Analytics and cookies

Necessary cookies

• BASERH_LOCALE remembers your language choice, for up to one year.
• baserh_contact_throttle is kept for 30 seconds after you send a contact message, to prevent repeated submissions.
• baserh_analytics remembers your analytics choice, for 180 days.

Analytics cookies, only if you accept

Google Analytics loads only after you choose “Accept analytics”. It may then set cookies such as _ga and _ga_*, which by default last up to two years. We load it with Google signals and ad personalisation turned off, and we don’t use it for advertising, remarketing or ad profiling. Google Analytics keeps analytics data according to the retention setting of our Google Analytics account.

On your first visit you can accept or reject analytics, and you can change your choice at any time from “Cookie settings” at the bottom of the Website. Rejecting analytics doesn’t stop you using the Website or the Early Access form. If you withdraw your consent, we stop Google Analytics on the Website and remove its cookies from your browser as far as the browser allows.

9. Optional communications

Joining the Early Access List doesn’t subscribe you to marketing. We send product and launch emails only if you tick the separate, optional box. You can stop them at any time with the link in our emails or by writing to privacy@baserh.net. Stopping them doesn’t cancel, reject or otherwise affect your Early Access request.

We’ll still send the emails your request needs, such as the email confirmation and, if you’re selected, your invitation. Our emails to you never mention the type of support you chose.

We don’t send marketing text messages (SMS) or make marketing calls based on this form. If we introduce text message updates in the future, we’ll ask for separate consent first.

10. Service providers and disclosure

We don’t sell your personal data. We share the minimum personal data needed with service providers that help us run the Website, only so they can provide those services to us. They may not use it for their own purposes. Not every provider receives every type of information:

• Website hosting and infrastructure: Vercel.
• Database for Early Access requests: a managed PostgreSQL database service.
• Transactional emails (email confirmation, emails about your request, notifications to our team about new requests, and contact form messages): Mailgun.
• Website analytics, only if you accept: Google Analytics, from Google.
• Product and launch emails, only if you opt in: an email communications provider.

We may disclose personal data where applicable law requires or permits it, for example to meet a legal obligation, comply with a court order or respond to a request from an authorised government authority.

11. Processing outside Saudi Arabia

Some of our service providers may process or store personal data outside Saudi Arabia, so your information may be transferred to, or accessed from, other countries. For questions about this, email privacy@baserh.net.

12. Data retention

We keep Early Access personal data while the Early Access programme is active, or while we still have a legitimate and lawful reason to keep it. When we no longer need it for the purpose we collected it for, we delete it securely, unless the law requires us to keep it longer.

• If you don’t confirm your email address, we delete your request automatically after 30 days.
• You can leave the Early Access List at any time with the link in our emails, and we then delete your request.
• We keep your product and launch email consent until you withdraw it, and we keep a record of the withdrawal.
• We keep contact messages only as long as needed to respond, unless the law requires otherwise.
• We keep complaints and records of how we handled them only as long as reasonably necessary to handle and respond to the complaint, carry out any second review you ask for, meet legal or compliance obligations and improve how we handle complaints, subject to applicable law.
• Analytics data is kept according to the retention setting of our Google Analytics account.

13. Security

We use reasonable technical and organisational measures intended to protect the personal data we collect through the Website, including limiting access to authorised team members. No website or internet transmission is completely secure, so we can’t guarantee absolute security. If a personal data incident occurs, we’ll take appropriate action and notify affected individuals and the relevant authorities where applicable law requires it.

14. Your rights and choices

Subject to applicable law, you have the right to:

• be informed about how we process your personal data, as this policy explains;
• access your personal data and obtain a copy of it;
• ask us to correct or update it;
• ask us to destroy it where the law allows;
• withdraw your consent at any time.

To use these rights, email privacy@baserh.net from the address you registered with. We may need to verify your identity, and we’ll respond within the period set by law. Some requests may be limited by legal exceptions.

You can also leave the Early Access List with the link in our emails, stop product and launch emails with the link in those emails, and change your analytics choice from “Cookie settings” at the bottom of the Website.

If you believe your personal data has been processed in breach of the law, you may also have the right to complain to the competent authority in Saudi Arabia.

15. Teenagers and guardian requests

The Early Access form isn’t designed for teenagers to use themselves. A request for a teenager aged 13 to 17 must be submitted by a parent or legal guardian, who confirms their role first. At this stage we collect information only about the person submitting the request. The BASERH app will have its own framework for teenagers and guardians, set out in the App Privacy Policy. If you believe a teenager or child has sent us personal data through the Website, email privacy@baserh.net and we’ll delete it.

16. Changes to this policy

We may update this policy from time to time. “Last updated” shows the date of the latest substantive change. For material changes, we may also tell affected users by email where appropriate.

17. Language

This policy is available in Arabic and English. If there is any inconsistency or conflict between the two versions, the Arabic version prevails.

18. Contact us

For any privacy question or request, email privacy@baserh.net. See also our Terms of Use.