Privacy Policy

Your privacy is fundamental to our practice. This policy explains how we collect, use, protect, and respect your personal and medical information at Healers Clinic.

Your Data is Protected

We comply with UAE data protection laws and international best practices to ensure your information remains secure and confidential.

256-bit
SSL Encryption
GDPR
Compliant
ISO 27001
Certified
24/7
Security Monitoring
Last Updated: January 30, 2025 | Version 3.2 | Effective Date: January 1, 2025

Our Commitment to Your Privacy

At Healers Clinic, we understand that your personal and medical information is highly sensitive. We are committed to protecting your privacy and ensuring that your data is handled with the utmost care and in compliance with all applicable laws and regulations.

This Privacy Policy applies to all information collected through our website, mobile applications, in-person at our clinic, and through any other means of communication.

Information We Collect

Personal Information

  • Full name, date of birth, gender, and nationality
  • Contact details including phone numbers, email addresses, and physical addresses
  • Emirates ID, passport details, and visa information as required by UAE regulations
  • Insurance information and policy details
  • Emergency contact information

Medical Information

  • Medical history, current medications, and allergies
  • Test results, diagnostic reports, and imaging studies
  • Treatment plans, clinical notes, and progress reports
  • Consultation recordings (with your explicit consent)
  • Lifestyle information relevant to your healthcare

Technical Information

  • IP address, browser type, and operating system
  • Pages visited, time spent, and interaction data
  • Referral sources and search terms used
  • Device information and unique identifiers
  • Location data (with your permission)

How We Use Your Information

Healthcare Services

  • Providing medical consultations, diagnoses, and treatments
  • Managing appointments and sending reminders
  • Coordinating care between different healthcare providers
  • Processing insurance claims and billing
  • Maintaining accurate medical records as required by law

Communication

  • Responding to your inquiries and requests
  • Sending appointment confirmations and follow-up care instructions
  • Providing health education materials and wellness tips
  • Notifying you about changes to our services or policies
  • Sending marketing communications (with your consent)

Legal and Regulatory

  • Complying with Dubai Health Authority (DHA) regulations
  • Meeting our legal obligations under UAE healthcare laws
  • Responding to legal requests and court orders
  • Protecting against fraud and unauthorized access
  • Conducting internal audits and quality assurance

How We Protect Your Information

Technical Safeguards

  • 256-bit SSL encryption for all data transmissions
  • Secure servers with firewall protection and intrusion detection
  • Regular security audits and vulnerability assessments
  • Multi-factor authentication for system access
  • Automated backup systems with encrypted storage

Administrative Safeguards

  • Strict access controls based on role and necessity
  • Comprehensive staff training on data protection
  • Confidentiality agreements for all employees
  • Regular review of access permissions
  • Incident response procedures for data breaches

Physical Safeguards

  • Secured facilities with controlled access
  • Locked storage for physical medical records
  • CCTV monitoring of sensitive areas
  • Secure disposal of paper documents
  • Clean desk policy for patient information

Information Sharing and Disclosure

Healthcare Providers

  • Other doctors involved in your care (with your consent)
  • Laboratories for test processing
  • Pharmacies for prescription fulfillment
  • Hospitals for referrals or emergency care
  • Insurance companies for claim processing

Legal Requirements

  • Dubai Health Authority for regulatory compliance
  • Public health authorities for disease reporting
  • Law enforcement agencies when legally required
  • Courts in response to valid legal orders
  • Government agencies for healthcare statistics

Business Partners

  • IT service providers for system maintenance
  • Payment processors for billing services
  • Professional advisors (lawyers, accountants)
  • Quality assurance and accreditation bodies
  • Marketing agencies (anonymized data only)

Your Rights and Choices

Access Your Information

Request a copy of your personal and medical information we hold

Correct Your Information

Update or correct any inaccurate information in your records

Delete Your Information

Request deletion of your data (subject to legal retention requirements)

Restrict Processing

Limit how we use your information in certain circumstances

Data Portability

Receive your data in a structured, machine-readable format

Withdraw Consent

Withdraw consent for specific uses of your information

Object to Processing

Object to certain types of processing, including marketing

Lodge a Complaint

File a complaint with the relevant data protection authority

Cookies and Tracking Technologies

  • We use essential cookies to enable basic website functionality
  • Analytics cookies help us understand how visitors use our website
  • Preference cookies remember your settings and choices
  • Marketing cookies may be used to show relevant advertisements
  • You can control cookie settings through your browser preferences
  • Third-party services may set their own cookies subject to their policies

International Data Transfers

  • Your data is primarily stored within the UAE
  • Some services may involve data transfer to other countries
  • We ensure appropriate safeguards for international transfers
  • Countries receiving data must have adequate protection levels
  • You will be informed of significant international transfers
  • Special provisions apply for transfers outside the GCC region

Data Retention

  • Medical records: Retained for minimum 10 years as per DHA requirements
  • Financial records: Kept for 7 years for tax and audit purposes
  • Marketing data: Retained until you withdraw consent
  • Website analytics: Anonymized after 26 months
  • CCTV footage: Overwritten after 30 days unless needed for investigation
  • We regularly review and securely delete outdated information

Children's Privacy

  • We provide pediatric services and collect children's information with parental consent
  • Parents/guardians have full access rights to their children's information
  • Special protections apply to children's data under UAE law
  • Marketing communications are never sent directly to children
  • Children's data is shared only for healthcare purposes
  • Additional consent required for any non-medical use of children's data

Questions About Your Privacy?

If you have any questions about this Privacy Policy or how we handle your data, please don't hesitate to contact our Data Protection Officer.

Data Protection Officer

Available Monday-Friday, 9 AM - 6 PM GST

Your Privacy Rights

To exercise any of your privacy rights, including access, correction, or deletion of your personal data, please submit a request through our secure portal.

Submit Privacy Request