1. Information we collect
We collect information you provide directly (such as name, email, phone number, date of birth, and medical history when booking an appointment), information collected automatically (IP address, browser type, pages visited, device identifiers), and information from third parties (insurance providers, referring clinics) where required to provide care.
2. How we use your information
We use personal information to: schedule and deliver healthcare services; process billing and insurance claims; respond to enquiries; send appointment reminders and clinical follow-up; improve our website and services; comply with regulatory and legal obligations under UAE law.
3. Sharing your information
We share information only with authorised personnel and partners involved in your care, including referring physicians, laboratories, insurance providers, and regulators (DHA, MOHAP). We do not sell personal data. Where transferred to vendors processing data on our behalf (e.g. payment processors, communication tools), we require contractual confidentiality and security commitments.
4. Data security
We employ administrative, technical, and physical safeguards including encrypted storage, role-based access controls, regular audits, and staff training to protect your information. No system is perfectly secure; we will notify you of material breaches as required by applicable law.
5. Retention
Medical records are retained in accordance with UAE health-data retention requirements (typically a minimum of 25 years for adult records). Marketing and website analytics data is retained no longer than necessary for the purpose collected.
6. Your rights
You may request access to, correction of, or deletion of your personal information; withdraw consent for marketing communications; lodge a complaint with the relevant UAE data protection authority. Contact us using the details below to exercise any of these rights.
8. Children
Paediatric records are handled with the express consent of the parent or legal guardian. We do not knowingly collect data online from children under 13 without that consent.
9. Updates to this policy
We may update this policy from time to time. Material changes will be highlighted on this page; the "Last updated" date above is changed each time.
Questions about this policy?
Contact our data protection officer with any questions or to exercise your rights under this policy.
privacy@chughtaiclinic.ae