Privacy Policy – Blue Angel Poly Clinic

1. Purpose and Scope

Blue Angel Poly Clinic (“we”, “our”, “us”) is committed to protecting the privacy of all users of our website and services. The UAE’s Personal Data Protection Law (Federal Decree Law No. 45 of 2021) applies to the processing of personal data both inside and outside the country and requires organisations to secure data, maintain confidentiality and obtain the data subject’s consent before processing. This policy explains how we collect, use, store and disclose personal data when you visit blueangelpolyclinic.com or contact us.

2. Information We Collect

Our website collects a limited amount of personal data—specifically your full name, contact phone number, age and email address—so we can schedule appointments, communicate with you and improve our services. We do not collect Emirates ID numbers, passport information, financial data or insurance details through our online forms. The website also uses cookies to ensure proper functionality and analyse web traffic (see Section 6).

If you receive medical services from us, we may collect health‑related information as part of your medical record. Federal Law No. 2 of 2019 on the use of information and communication technology in the health sector requires that such health data be stored in the UAE and not transferred abroad unless authorised by the health authority. We treat all patient information as confidential and only use it for health‑related purposes.

3. How We Use Your Information

We use your personal data to:

• schedule and confirm appointments and respond to your enquiries;

• contact you with important information about your care;

• improve our website and services (for example, analysing traffic through cookies); and

• comply with our legal obligations under UAE health and data‑protection laws.

We will not process your personal data without your consent unless the law permits processing to protect public health or to comply with legal procedures.

4. Legal Basis for Processing

Under the UAE Personal Data Protection Law, we process personal data fairly and lawfully, ensuring confidentiality and privacy. We rely on your explicit consent when you submit your information through our contact or appointment forms. In limited cases, we may process personal data without consent if necessary to protect public health or to meet legal requirements. Article 16 of Federal Law No. 2 of 2019 allows disclosure of patient information only for specific purposes—for example, to insurance companies to verify financial entitlements, for scientific research in anonymised form, to carry out preventive or curative procedures, or when requested by judicial authorities.

5. Data Storage and Security

All personal data collected via our website is stored on secure servers located within the United Arab Emirates. We employ administrative, technical and physical safeguards to protect your information from unauthorised access, alteration or disclosure. We do not transfer or store health data outside the UAE unless authorised by the competent health authority. We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy and as required by applicable laws.

6. Cookies and Similar Technologies

Our website uses cookies to ensure proper functionality and analyse web traffic. By continuing to browse or use the website, you consent to our use of cookies. You can disable cookies in your browser settings, but some features of the site may not function properly.

7. Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share information:

• with our medical staff and administrative personnel who need the information to provide services;

• with insurance companies or other funders for billing and verification purposes;

• for scientific or clinical research, provided that the data is anonymised and research ethics are observed;

• when necessary to protect public health or the safety of you or others; or

• when required by law or by a court order.

8. Your Rights

The Personal Data Protection Law gives you several rights, including the right to request access to your personal data, to request correction of inaccurate data and to restrict or stop processing. You also have the right to request deletion of your data, subject to our legal obligations to retain certain health records. To exercise these rights, please contact us using the details below.

9. Cross‑Border Data Transfers

We do not transfer personal health data outside the UAE unless a resolution from the health authority authorises such transfer. Non‑health data may be transferred to other jurisdictions only if adequate protections are in place and as permitted by law.

10. Links to Other Websites

Our website may contain links to third‑party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of every website you visit.

11. Children’s Privacy

Our website is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors through our online forms.

12. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will post the updated version on our website. The clinic reserves the right to amend the policy, and changes take effect immediately upon publication.

13. Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

• Telephone: +971 55 182 4518

• Address: 181a Al Wasl Rd, Al Bada’a, Dubai, United Arab Emirates

• Website: blueangelpolyclinic.com – you can submit a request through our contact form.

We will respond to your request as soon as possible and within the time frames required by UAE law.