Privacy Policy
This Privacy Policy complies with UAE Federal Law No. 45 of 2021 on Personal Data Protection (PDPL) and Dubai Health Authority (DHA) regulations. We may update this policy; changes will be posted here. Continued use of our services constitutes acceptance of the updated policy.
Privacy Policy
AL TADAWI SPECIALTY HOSPITAL / CLINICS , a specialized healthcare provider in Dubai, UAE, acts as the data controller for personal data processed via our Platforms, including the Website/Patient Mobile Application for accessing Electronic Medical Records (EMR). This policy describes how ATSH collects, processes, uses, and discloses your personal information when you contact us, use our services, or interact with our Platforms, including websites and mobile apps.
The ATSH Website/Patient Mobile Application enables patients to access their personal medical records and other functionalities for ATSH visits. Currently, the application is free of charge.
By choosing to use the ATSH Website/Patient Mobile Application, you agree to the collection and use of information in accordance with this policy. Personal information is used for:
- Developing new services and improving existing services;
- Sending users emails about special offers, new services, or other information;
- Personalizing sessions in the app to better fit your interests, such as offering relevant, individually tailored content.
The personal information you share will not be disclosed to anyone except as described in this Privacy Policy. The terms used here have the same meanings as in our Terms and Conditions unless otherwise defined in this Privacy Policy.
TYPE OF INFORMATION, SOURCE OF COLLECTION, USE, AND RETENTION
When you use our website/application, you provide certain personally identifiable information, including but not limited to:
- Patient Name
- Mobile Number
- Insurance Details
- Email ID
- Limited EMR data (e.g., test results, appointments)
Sensitive health data is processed only with your explicit consent. We do not collect bank or credit card information.
We collect, retain, and use this information as described in this Privacy Policy. We will not disclose it to any third party unless required for providing the requested services, required under the law, or if the information is already publicly available.
Data Retention Period: We retain personal data only as long as necessary for the purposes described (e.g., 7 years for medical records per DHA guidelines). After this period, data is securely deleted or anonymized. You may request details regarding your data retention via (Email address).
Log Data
When you use our Service, in case of an error, we collect data (through third-party products) on your device called Log Data. This may include:
- Device IP address
- Device name
- Operating system version
- App configuration at the time of use
- Time and date of use
- Other usage statistics
This data is used solely for error resolution and service improvement, anonymized where possible, and retained for 90 days.
COOKIES AND SIMILAR TECHNOLOGIES
Our Service uses essential cookies for functionality and analytics (e.g., Google Analytics). Third-party cookies may collect usage data. You can manage cookie preferences in your browser or app settings. Refusal may limit certain features.
SERVICE PROVIDERS
We may employ third-party companies and individuals to:
- Facilitate our Service;
- Provide the Service on our behalf;
- Perform Service-related tasks; or
- Assist us in analyzing how our Service is used.
These third parties have access to your personal information via ATSH IT Department only to perform assigned tasks. They are obligated not to disclose or use the information for any other purpose.
DATA SECURITY AND ELECTRONIC DATA ENCRYPTION
Information collected is secured and accessible only by authorized ATSH personnel. We have implemented security practices and standards appropriate to the sensitivity of the data.
We use:
- AES-256 encryption for data in transit and at rest
- Regular security audits
- Breach notification within 72 hours to affected users and the TRA if required
Report suspected breaches to (email address) .
Note: No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
LINKS TO OTHER SITES
Our Service may contain links to third-party websites. We do not operate these sites and are not responsible for their content, privacy policies, or practices. We strongly recommend reviewing their privacy policies.
AUTOMATED DECISIONS AND PROFILING
We do not use automated processing (e.g., AI for diagnoses) that significantly affects you without human review. If introduced, we will notify users and provide an opt-out option.
CHILDREN’S PRIVACY
These Services are not intended for anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we discover such data, it is immediately deleted. Parents or guardians aware that a child has provided information should contact us for corrective action.
DISCLOSURE / SHARING OF INFORMATION
We may share your information where required by Dubai Health Authority (DHA) or applicable law.
CONTACT AND COMPLAINTS
For any queries: info@tadawi.ae
For DHA-related compliance issues: We aim to respond within 30 days. Unsatisfied users may escalate to the UAE TRA.
GENERAL CONTACT:
Email: info@tadawi.ae
Phone: +971 4 230 9999