Privacy Policy

Boston Oncology respects your privacy and is committed to protecting personal data responsibly, securely, and in accordance with applicable data-protection requirements, including the Saudi Personal Data Protection Law and its Implementing Regulations.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data obtained through this website and related interactions with Boston Oncology.

 

1. Who We Are

Boston Oncology is an integrated pharmaceutical company operating across the selection, registration, localization, supply, and commercialization of medicines.

Our Saudi operating entity can be contacted at:

Boston Oncology Arabia
Roshn Front, Gate 8
Building N8, 1st Floor
Airport Street, Sedra District
Riyadh 13413
Saudi Arabia

Telephone: +966 11 438 1997
Online: Contact Boston Oncology

References to “Boston Oncology,” “we,” “our,” or “us” in this policy include the Boston Oncology entity responsible for the relevant interaction or processing activity.

 

2. Scope of This Policy

This policy applies to personal data collected through:

  • This website
  • General inquiries and contact forms
  • Partnership and business-development inquiries
  • Medical-information inquiries
  • Adverse-event and product-quality reports
  • Employment applications and CV submissions
  • Other direct communications with Boston Oncology


Our use of cookies and similar technologies is described separately in our
Cookie Policy. The rules governing use of this website are set out separately in our Terms of Use.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Contact and identity information

Your name, organization, professional title, email address, telephone number, country, mailing address, and other contact information you provide.

Professional and business information

Your employer, professional qualifications, areas of interest, partnership requirements, business correspondence, and information relevant to a prospective or existing business relationship.

Medical-information and safety-reporting data

Information submitted in connection with an adverse event, product-quality concern, medical-information inquiry, or other safety matter. This may include:

  • Patient age, sex, initials, or other identifiers
  • Health and medical information
  • Details about a medicine, treatment, or reported event
  • Information about the person submitting the report
  • Healthcare-professional contact information
  • Follow-up information required for safety assessment or regulatory reporting 

Where possible, only the information necessary to evaluate and follow up on the report should be provided.

Recruitment information

CVs, contact information, employment history, education, qualifications, professional references, and other information submitted in connection with employment opportunities.

Website and technical information

Internet Protocol address, browser and device information, pages visited, approximate location, referral source, and other technical information generated when you use the website. Further information is provided in our separate Cookie Policy.

Correspondence

Information contained in website forms, emails, telephone calls, and other communications with Boston Oncology.

We may also receive relevant information from healthcare professionals, business partners, recruitment sources, public records, regulatory authorities, or other lawful sources.

 

4. How We Use Personal Data

We may process personal data to:

  • Respond to questions, requests, and general inquiries
  • Evaluate and develop prospective partnerships
  • Manage business and professional relationships
  • Provide medical information
  • Receive, assess, investigate, follow up on, retain, and report adverse events, product-quality concerns, and other safety information
  • Meet pharmacovigilance, regulatory, quality, and legal obligations
  • Evaluate employment applications and communicate with candidates
  • Operate, secure, maintain, and improve the website
  • Prevent misuse, fraud, or security threats
  • Establish, exercise, or defend legal claims
  • Maintain appropriate business, regulatory, and compliance records 

We process personal data only when supported by an applicable legal basis. Depending on the circumstances, this may include your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal or regulatory obligation, or another basis permitted by applicable law.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing already performed lawfully and may not apply where continued processing or retention is required by law.

 

5. Adverse Events and Other Safety Information

Boston Oncology is required to collect and evaluate certain information concerning the safety, quality, and performance of its medicines.

Information submitted through an adverse-event or product-quality reporting channel may be used to:

  • Assess and investigate the report
  • Contact the reporter for relevant follow-up information
  • Identify and evaluate potential safety signals
  • Maintain legally required pharmacovigilance records
  • Submit information to health authorities or regulatory agencies
  • Share relevant information with product partners, manufacturers, license holders, or authorized pharmacovigilance providers 

Because pharmacovigilance records may be required by law, we may need to retain and process this information even if consent is later withdrawn. Wherever practicable, information reported to third parties will be limited, coded, de-identified, or otherwise protected.

To report an adverse event or product-quality concern, use our Adverse-Event Reporting Form.

If you need assistance submitting a report, contact the Boston Oncology Pharmacovigilance Department at +966 54 764 3672.

Adverse events may also be reported directly through the Saudi Food and Drug Authority’s Saudi Vigilance system.

 

6. How We Share Personal Data

Where necessary and legally permitted, we may disclose personal data to:

  • Boston Oncology affiliated companies
  • Website, hosting, information-technology, security, and communications providers
  • Professional advisers, auditors, and insurers
  • Recruitment and human-resources service providers
  • Authorized pharmacovigilance and medical-information providers
  • Manufacturers, licensors, marketing-authorization holders, and product partners
  • Hospitals, healthcare professionals, and healthcare organizations
  • Government bodies, health authorities, courts, law-enforcement agencies, and regulatory authorities
  • Parties involved in a corporate transaction, subject to appropriate safeguards 

Service providers acting on our behalf are required to process personal data only for authorized purposes and to apply appropriate protections.

Boston Oncology does not sell personal data.

 

7. International Transfers

Some Boston Oncology affiliates, service providers, product partners, manufacturers, or regulatory recipients may be located outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside the Kingdom, we take steps intended to ensure that the transfer is legally permitted and that appropriate safeguards are applied in accordance with applicable data-protection requirements.

Sensitive personal data, including health information, is transferred only where necessary and subject to the additional requirements applicable to that information.

 

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal, regulatory, contractual, and recordkeeping requirements.

The appropriate retention period depends on factors including:

  • The nature and sensitivity of the information
  • The purpose for which it was collected
  • The duration of the relevant business or professional relationship
  • Applicable pharmaceutical, pharmacovigilance, employment, and regulatory requirements
  • The need to establish, exercise, or defend legal claims


When personal data is no longer required, it is securely deleted, destroyed, or anonymized in accordance with applicable requirements.

 

9. Security

We apply reasonable organizational, administrative, and technical measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorized access, disclosure, or destruction.

No electronic transmission or storage method is completely secure. We therefore cannot guarantee absolute security, but we assess and update our safeguards in light of the nature and sensitivity of the information we process.


10. Your Rights

Subject to applicable law and any relevant exceptions, you may have the right to:

  • Be informed about how your personal data is processed
  • Access the personal data we hold about you
  • Obtain a copy of your personal data in a clear and readable format
  • Request correction, completion, or updating of inaccurate data
  • Request destruction of personal data when permitted
  • Withdraw consent where consent is the basis for processing
  • Submit a complaint to the competent authority
  • Seek compensation where provided by applicable law 

To submit a request concerning your personal data, use our Contact Form and select Privacy or Personal Data Request as the inquiry type.

We may need to verify your identity before acting on a request. Certain rights may be limited where continued processing or retention is necessary to comply with pharmacovigilance, regulatory, legal, public-health, or recordkeeping obligations.

 

11. Children’s Personal Data

This website is not directed toward children, and we do not knowingly collect personal data from children through general website interactions.

Information concerning a child may nevertheless be reported when necessary for medical-information, adverse-event, or product-safety purposes. Such information will be processed only as necessary for those purposes and in accordance with applicable requirements.

 

12. Third-Party Websites

This website may contain links to websites operated by other organizations. Boston Oncology is not responsible for the privacy practices or content of those websites. We encourage visitors to review the privacy policy of each external website they use.

 

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our activities, the website, regulatory requirements, or data-protection practices.

The date of the latest update will appear at the top of this page. Material changes may also be communicated through an appropriate notice on the website.

 

14. Contact Us

For general inquiries, partnership inquiries, medical-information questions, or requests concerning your personal data, please use our Contact Form and select the appropriate inquiry type.

Adverse-Event and Product-Safety Reporting

Submit a report through our Adverse-Event Reporting Form.

Pharmacovigilance assistance: +966 54 764 3672

You may also report directly through the Saudi Food and Drug Authority’s Saudi Vigilance system.

If you believe your personal data has not been handled appropriately, you may also have the right to submit a complaint to the competent data-protection authority in the Kingdom of Saudi Arabia in accordance with its applicable procedures.