Cookie Policy
AKDITAL INTERNATIONAL
1. Introduction
AKDITAL International (“we,” “us,” “our”) operates alolayahospital.com and associated digital healthcare services and portals. This Cookie Policy explains how we use cookies and tracking technologies to recognize you, understand Website usage, enhance your experience, and improve our healthcare services.
This Cookie Policy should be read with our Privacy Policy. For personal data processing questions, contact privacy@akdital.sa.
2. What are Cookies?
Cookies are small text files stored on your device when you visit our Website. They enable efficient website functionality, remember preferences, and help us understand user behavior and service performance.
Cookies can be:
- First-party: set by our domain (alolayahospital.com)
- Third-party: set by external providers (Google, Microsoft)
3. Cookie Categories & Inventory
We use analytics and behavioral cookies to measure Website performance and understand user interaction patterns. These are non-essential cookies requiring your prior explicit consent. In addition, we deploy strictly necessary cookies to maintain session state and remember user preferences for our Cookie Management Platform.
| Category | Provider | Purpose |
|---|---|---|
| Strictly Necessary (Session) | AKDITAL / CMP | Session state, consent memory, basic functionality |
| Analytics | Google Analytics 4 | Measure audience, track sessions, analyze navigation |
| Behavioral Analysis | Microsoft Clarity | Heatmaps, session recordings, user journey analysis |
4. Google Analytics 4 (GA4)
Purpose: Measure Website audience, distinguish unique users and sessions, analyze navigation behavior.
Cookie Type: First-party (set by our domain)
GA4 Cookie Details:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
_ga |
Distinguishes unique users; stores Client ID (pseudonymous) | 2 years* | 1st |
ga |
Maintains session state for GA4 property | 2 years* | 1st |
_gid |
Distinguishes users on short-term basis (if configured) | 24 hours | 1st |
_gat / dc_gtm |
Rate-limits data collection requests (if Google Tag Manager deployed) | 1 minute | 1st |
_gcl_au |
Ad conversion attribution (if GA4 linked to Google Ads) | ~90 days | 1st |
* Browser limitations: Chrome, Safari, and Firefox plafond first-party cookies to approximately 400 days (~13 months), regardless of the declared expiration. Actual cookie persistence may be shorter than the nominal 2-year duration.
Data Protection (GA4):
- GA4 does not record IP addresses by default
- No direct personally identifiable information (PII) collected
- Data retention: configurable (2 or 14 months)
- All identifiers are pseudonymous
5. Microsoft Clarity
Purpose: Behavioral analysis including heatmaps, session recordings, and user journey mapping.
Cookie Type: First-party and Third-party
First-Party Cookies (set by our domain):
| Cookie Name | Purpose | Duration |
|---|---|---|
_clck |
Stores Clarity User ID; recognizes returning visitors and preferences | 1 year |
_clsk |
Links multiple pages viewed by same user within a single session | 1 day |
Third-Party Cookies (set by Microsoft domains):
| Cookie Name | Purpose | Duration | Note |
|---|---|---|---|
CLID |
Identifies first Clarity encounter with user across any Clarity-enabled site | 1 year | MS |
MUID |
Identifies unique browsers; used for analytics, operations | 1 year | MS |
ANONCHK |
Indicates transfer status; always set to 0 (Clarity does not use ANID) | 10 min | MS |
MR |
Signals whether to refresh MUID | 7 days | MS |
SM |
Synchronizes MUID across Microsoft domains | Session | MS |
Data Protection (Clarity):
- Automatically masks sensitive data (names, passwords, card numbers)
- Anonymizes IP addresses
- Does not use fingerprinting
- No direct personally identifiable information stored
- Consent requirement: As of October 31, 2025, Clarity requires explicit consent signal for visitors in the European Economic Area (EEA), United Kingdom, and Switzerland
6. Cookies Strictly Necessary
In addition to analytics and behavioral cookies, our Website requires certain cookies to function properly and remember your choices. These are not dependent on user consent but are recorded in this policy for full transparency.
Strictly necessary cookies include:
- Cookie Management Platform (CMP) cookie: Remembers and persists your cookie consent choices, ensuring preferences are honored across visits. Duration: typically 1 year; if you withdraw consent, this cookie may be cleared.
- Session cookies: Maintain your logged-in status and session state during your visit. Duration: session (cleared when browser closes).
These cookies do not transmit personal data and are essential for the Website to operate; they are exempted from consent requirements under most privacy regulations, including the PDPL.
7. Consent & User Control
Legal Basis:
Analytics and behavioral cookies are non-essential and require your prior, explicit consent under the Saudi Personal Data Protection Law (PDPL).
Cookie Consent Banner (CMP):
- ✓ Appears on first visit to the Website
- ✓ Non-essential cookies blocked by default
- ✓ You must actively accept to enable analytics/behavioral tracking
- ✓ Withdraw consent anytime via banner settings
[NOTE: CMP platform name to be completed once selection is finalized. Contact Sami Bennani (legal) for confirmation.]
Browser Controls:
Manage cookies in your browser settings:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Preferences > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
8. Data Rights & PDPL Compliance
Cookie data collected by our Website is limited to pseudonymous identifiers and behavioral data, as detailed in Sections 4–6 above. You have full rights under the Saudi PDPL, including the right to withdraw your consent at any time. For full details on your data rights, data retention, and filing complaints with the Saudi Data and Artificial Intelligence Authority (SDAIA), please see our Privacy Statement. To exercise your rights or for questions, contact privacy@akdital.sa.
9. International Data Transfers
Analytics data collected through Google Analytics 4 (GA4) and behavioral data collected through Microsoft Clarity may be processed on servers located outside the Kingdom of Saudi Arabia. For full details on international data transfer safeguards and the applicable legal basis, please see our Privacy Statement.
10. Third-Party Services
Our Website may embed or link to third-party services
- Google Fonts: typography and web fonts
- Google Maps: location and venue display
- Social media links: Facebook, Instagram, LinkedIn, Twitter, Snapchat
These third parties may set their own cookies. AKDITAL International is not responsible for their policies. We recommend that you review their privacy and cookies policies independently.
External links and resources:
11. Contact Information
Privacy Officer (Cookies & Data Processing): privacy@akdital.sa
Policy Updates:
We may update this policy to reflect changes in our practices or applicable law. Material changes will be notified by updating the Effective Date on this page. If material changes affect the purposes, categories, or scope of cookie collection, we will inform you and request renewed consent as required by the PDPL.