Requires review before launch. This document is a working draft prepared as a starting point. It must be reviewed and adapted by a qualified legal adviser familiar with UAE law and with Abu Dhabi Department of Health requirements before the site goes live. Placeholders in square brackets must be completed.
This policy explains what personal information this website collects, why, how it is used, and what rights you have over it.
Who is responsible
[LEGAL ENTITY NAME], [ADDRESS], Abu Dhabi, United Arab Emirates. Contact for data protection matters: [EMAIL ADDRESS].
What is collected
Information you give us
- Contact form: name, email address, telephone number, and the content of your message
- Appointment request: name, contact details, reason for consultation, previous treatment history in outline, and contact preference
- Ask Dr Budak: a name or nickname, an email address, and your question
- Webinar registration and subscription: name, email address, country, language preference and any question submitted in advance
Information collected automatically
- Standard server log data, including IP address, browser and pages visited
- Cookies and similar technologies, described in the cookie policy
- Analytics data, only where you have consented to it
Health information
Please do not send detailed medical information, test results or scan images through the forms on this website. The forms are designed to collect only what is needed to respond to an enquiry or to arrange an appointment. Where you do provide health-related information, it is treated as sensitive personal data, access is restricted to those who need it in order to respond, and it is not used for any other purpose.
How the information is used
- To respond to your enquiry or arrange your appointment
- To register you for a webinar and to send you the recording and summary
- To send you announcements, where you have asked for them
- To answer submitted questions publicly in anonymised form, where you have consented
- To maintain and improve the website
- To comply with legal and regulatory obligations
What we do not do
- We do not sell your personal information
- We do not share it with third parties for their own marketing
- We do not use your enquiry to add you to a mailing list without your consent
Service providers
The website is hosted by [HOSTING PROVIDER]. Form submissions are stored in the website database and may be forwarded by email. Email announcements are sent using [EMAIL SERVICE]. Webinars are delivered through [WEBINAR PLATFORM]. Each of these processes data on our behalf under its own terms. [LEGAL REVIEW: list every processor actually used and where it stores data.]
How long it is kept
Enquiries and appointment requests are retained for [RETENTION PERIOD]. Subscription records are kept until you unsubscribe. Anonymised questions used for education are kept indefinitely, with all identifying details removed. [LEGAL REVIEW: retention periods must be consistent with UAE health record requirements.]
Your rights
- To ask what personal information is held about you
- To ask for it to be corrected
- To ask for it to be deleted, subject to any legal obligation to retain it
- To withdraw consent to marketing at any time, including by the unsubscribe link in any email
- To object to processing in certain circumstances
Clinical records
If you become a patient, your clinical records are held by the treating clinic and are governed by that clinic privacy notice and by UAE health record regulation, not by this website policy.
Children
This website is not intended for children and does not knowingly collect information from them.
Changes
Any change to this policy is published here with a new effective date. Effective date: [DATE].