Privacy Policy

1 Scope

This policy applies to data collected at the clinic and via phone, WhatsApp, email, and website forms.

2 Data We Collect

Identity & Contact: name, ID/passport (when required), phone, email.
Health: medical history, medications, images, scans, lab results, treatment plans.
Insurance & Billing: insurer, policy number, approvals, payments.
Technical: IP address, cookies, analytics (e.g., Google Analytics), and marketing pixels (e.g., Meta Pixel) if enabled.

3 Why We Use Your Data

Provide healthcare (diagnosis, treatment, follow-up).
Manage appointments and communicate reminders (phone/SMS/WhatsApp/email).
Process insurance claims and comply with regulatory requirements.
Quality improvement, safety, and—with your opt-in—marketing you can opt out of anytime.

4 Legal Bases

Explicit consent for health data.
Contract performance to deliver care.
Legal/regulatory obligations.
Legitimate interests (quality, security, fraud prevention) without overriding your rights.

5 Sharing Your Data

We share the minimum necessary with:

Medical staff within the Center, partner labs/radiology.
Insurers and claims processors.
Technology providers (hosting, messaging, booking) under confidentiality/data-processing agreements.

6 Cross-Border Transfers

Data may be stored/processed on servers outside the UAE when required by our systems, with appropriate safeguards.

7 Retention

We retain records for the period required to provide care and to meet legal/health-regulation requirements, then securely delete or anonymize.

8 Security

We implement technical and organizational measures (access controls, encryption, backups). No method is 100% secure.

Note: Security practices may evolve over time to match operational needs and regulatory requirements.

You may request access, correction, restriction, portability where applicable, withdraw consent, object to marketing, and request deletion of non-mandatory records. We will respond within a reasonable timeframe.