Privacy Policy

1. Introduction

Doctors Clinic Diagnostic Center (DCDC) is a DHA-licensed multi-specialty clinic and diagnostic facility located in Building 64, Block A, Dubai Healthcare City. We operate under DHA Facility Permit and are regulated by the Dubai Health Authority. This Privacy Policy sets out how we handle personal data collected through our clinic, our website at doctorsclinicdubai.ae, our WhatsApp booking line (+971 56 403 3528), and any other channel through which you interact with us. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the Dubai Health Authority Patient Rights Charter.

2. Information We Collect

2.1 Information You Provide

When you book an appointment, visit our clinic, or contact us through our website or WhatsApp, we collect:

• Full name, Emirates ID or passport number, date of birth, nationality, and gender
• Phone number, email address, and residential address
• Medical history, current symptoms, examination findings, diagnostic imaging results (MRI, CT, X-ray, ultrasound), and laboratory test results
• Insurance card details, policy number, and network information for direct billing with providers such as Daman, AXA, MetLife, and others
• Appointment dates, times, referring physician details, and service preferences
• Payment card details processed through our POS terminal (we do not store full card numbers)

2.2 Information Collected Through Our Website

When you browse doctorsclinicdubai.ae, our web hosting provider (Cloudflare) collects your IP address, browser type, device type, referring URL, and pages visited. We use Cloudflare Web Analytics and Google Tag Manager to understand how visitors use the site. If you submit a booking or contact form, the data you enter is transmitted to our appointment team via a secured webhook. We also use Meta Pixel and TikTok Pixel for advertising measurement; these tools record page views and form submissions but do not receive any medical or health information.

3. How We Use Your Information

We use the data we collect for the following specific purposes:

• Scheduling and confirming your appointments by phone, SMS, or WhatsApp
• Providing medical consultations, diagnostic imaging, laboratory testing, physiotherapy, and other clinical services at our facility
• Generating and delivering diagnostic reports (for example, MRI or blood test results) to you and, where applicable, to your referring physician
• Submitting insurance pre-authorization requests and processing direct billing claims with your insurer
• Sending appointment reminders and follow-up care instructions relevant to your visit
• Complying with mandatory reporting obligations to the DHA, including communicable disease notifications and clinical outcome data
• Improving our website content and services based on aggregated, non-identifying usage patterns

4. When We Share Your Information

We never sell patient data to third parties. We share personal information only in these circumstances:

• Referring Physicians and Specialists: When you are referred to or from another healthcare provider, we share relevant medical records and diagnostic reports with your written or verbal consent. In cases where you present a referral letter, consent to share results with the referring doctor is implied unless you instruct us otherwise
• Insurance Companies: We submit claims data (diagnosis codes, procedure codes, and patient identification) to your insurer for direct billing. The specific information shared depends on the insurer's pre-authorization and claims requirements
• Regulatory and Legal Obligations: We disclose information when required by UAE law, including requests from the Dubai Health Authority, Dubai Courts, or law enforcement agencies acting under a valid legal order
• Service Providers: Our website is hosted on Cloudflare Workers. Appointment form data is processed through secured webhooks. These providers process data on our behalf under contractual confidentiality obligations and do not use patient data for their own purposes
• Medical Emergencies: If you require emergency transfer to a hospital, we share relevant clinical information with the receiving facility to ensure continuity of care

5. Data Security

Patient records at DCDC are stored in our electronic medical records system, which is password-protected and accessible only to authorized clinical and administrative staff on a need-to-know basis. Our website uses HTTPS encryption for all data in transit. Diagnostic images (such as MRI and CT scans) are stored on PACS servers within our facility. Physical records, where they exist, are kept in locked storage areas with restricted access. Despite these measures, no system is entirely immune to breach, and we cannot guarantee absolute security of data transmitted over the internet.

6. Your Rights Under UAE Law

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), you have the right to:

• Request a copy of the personal data we hold about you, which we will provide within 14 working days
• Ask us to correct any inaccurate or outdated information in your records
• Request deletion of your personal data, subject to the mandatory medical record retention periods set by the DHA (currently a minimum of five years from the last patient encounter)
• Object to our use of your data for marketing purposes, including opting out of appointment reminders via WhatsApp or SMS
• Withdraw consent you previously gave for specific data uses, without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint with the UAE Data Office if you believe your data rights have not been respected

7. Medical Records and Retention

DCDC retains medical records for a minimum of five years following your last visit, in line with DHA regulations and UAE Ministry of Health guidelines. Diagnostic imaging studies are retained for the same period. After the retention period, records are securely destroyed. You may request copies of your medical records or diagnostic reports by contacting our reception desk in person with a valid Emirates ID or passport. Record requests are typically fulfilled within five working days.

8. Cookies and Tracking Technologies

Our website uses first-party cookies to remember your language preference and session state. We use Cloudflare Web Analytics (which does not use cookies and does not track individual users) for site performance data. Meta Pixel and TikTok Pixel place third-party cookies to measure the effectiveness of our online advertising campaigns; these pixels track page visits and form submissions on our site but are never provided with medical data. You can disable third-party cookies through your browser settings or by using a browser extension. Disabling cookies will not affect your ability to browse the website or book an appointment.

9. Links to External Websites

Our blog articles contain links to reputable medical sources such as the World Health Organization, PubMed, the NHS, and MedlinePlus. These external websites operate under their own privacy policies, and we have no control over how they handle your data. We link to these sources for informational and educational purposes only.

10. Paediatric Patients

DCDC provides paediatric services including vaccinations, developmental screening, and diagnostic imaging for children. For patients under 18, we collect personal and medical information with the consent of a parent or legal guardian. A parent or guardian must be present during the consultation and must authorize any diagnostic procedures. We do not knowingly collect data from minors through our website without parental involvement.

11. Changes to This Policy

We review this Privacy Policy at least once per year and update it when our data practices change or when UAE regulations require it. The "Last updated" date at the top of this page reflects the most recent revision. If we make a material change that affects how we handle existing patient data, we will post a notice on our website homepage for at least 30 days.

12. Contact Us

To exercise any of your data rights, request copies of your medical records, or ask questions about this Privacy Policy, contact us through any of the following channels: