1
Introduction
At Care and Cure Medical Center (“we”, “us”, “our”), we are committed to safeguarding your personal and medical data. This Privacy Policy outlines how we collect, use, share, and protect your data in accordance with Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL), as well as guidelines from the Dubai Health Authority (DHA) and Ministry of Health and Prevention (MOHAP).
2
Our Legal Basis for Processing Your Data
We process your data lawfully under the following grounds:
Your explicit consent
The performance of a medical or administrative service contract
Compliance with legal obligations
Public interest in the field of health
3
How We Collect Your Data
We collect data through:
Patient registration forms (online and in-person)
Clinical consultations and diagnostic tests
Health insurance submissions and claims
Telemedicine platforms and online chats
Phone calls, WhatsApp, and email communications
Health checks at home or corporate screenings
4
Types of Data We Collect
Identity Data
Name, Date of Birth, Gender, Nationality, Emirates ID, Passport
Contact Data
Phone number, Email address, Home/Office Address
Health Data
Medical history, Diagnosis, Clinical notes, Lab results, Imaging reports, Prescriptions
Insurance Data
Insurance card, Provider name, Policy number, Approvals, Claims history
Employment Data
Employer name, Designation, Work-related insurance details
Digital Interaction
IP address, Cookies, Online inquiry forms, Telemedicine logs
Emergency Contact
Name, Relationship, Contact number
5
Why We Use Your Data
Medical Care & Treatment
To deliver diagnosis, treatment, referrals, and follow-up services
Insurance Processing
To submit and manage claims with your insurance provider
Compliance & Legal Reporting
To comply with DHA, MOHAP, and DOH regulations
Appointment Management
To book, confirm, or reschedule visits
Customer Service & Feedback
To respond to your inquiries, complaints, or service improvements
Billing & Financial Transactions
To generate invoices, accept payments, or process refunds
Research & Public Health (with consent)
For anonymized internal audits, studies, and improving clinical protocols
Marketing & Health Campaigns (optional)
To share health awareness messages, newsletters, or offers with your consent
6
Sharing Your Data
We only share your data with:
Healthcare professionals within our network
Accredited laboratories and diagnostic centers
Your insurance provider and Third-Party Administrators (TPAs)
Government and regulatory authorities (e.g. DHA, MOHAP, DOH)
Accredited service providers under binding confidentiality agreements (e.g. IT, billing)
We do not disclose your personal or medical data to employers or unauthorized third parties without your explicit written consent.
7
Your Data Rights
You have the right to:
Access your medical records and personal data
Rectify inaccurate or incomplete data
Request deletion of non-essential data (when lawful)
Withdraw consent for marketing
Lodge complaints about data misuse
To exercise your rights, please contact us at the details below.
8
Data Retention
We retain your health and personal data for at least 25 years, in accordance with MOHAP and DHA regulations. After this period, data will be securely archived or deleted unless required for legal or public health reasons.
9
Security Measures
We employ:
Encrypted electronic medical records (EMRs)
Role-based access control
Firewall and antivirus protection
Secure cloud and local storage
Regular audits and staff confidentiality training
Despite these measures, no system is completely immune, and we encourage you to safeguard your own personal information, especially during digital interactions.
10
Cookies & Website Data
Our website uses cookies to:
Improve browsing experience
Store language preferences
Track analytics and security performance
You may adjust your cookie settings via your browser at any time.
11
Third-Party Websites
Our platforms may contain links to external services (labs, insurers, etc.). We are not responsible for their data practices. Always review their privacy statements.
12
Policy Updates
We may update this Privacy Policy from time to time. The most current version will always be available on careandcure.ae with a revision date.
13
Contact Us
For questions or concerns about your data, reach our team using the address and phone number below.