Social Health Insurance Authority
Privacy notice
What we collect, why, who can see it, and how to ask us to delete it. We keep it short.
What we collect
Your name, email, phone number, ID document type, number and image, date of birth, sex, category and government branch where relevant; your package and insurer; the health claims recorded for you and your confirmations; payment records (amount, date, reference) — never card or wallet details.
Why
To verify who you are, to confirm your eligibility at the clinic, to check that the services delivered are covered by your package, and to order payment to facilities. We also use it to send you notices (SMS/email) about your card and your claims.
Who can see it
Your insurer (your status and claims); the facility treating you (only your number, name, eligibility and package — not your full history); and authorised Authority staff. Facilities cannot browse the member register; the system limits every person to the data they need (row-level security).
Where it lives and for how long
Data is stored on encrypted servers under the Authority’s control; every change is logged (audit). Claim records are kept as long as payment and audit rules require; your account and personal data are deleted on request once no claim is open.
Your rights
You can see your data, correct it, or ask for deletion; and you can complain to the Authority or to the data-protection regulator. Email info@shia.gov.so.
Last updated 2 September 2026. Questions: info@shia.gov.so