Privacy Policy

1. Our Commitment

At Fémina Clinic, we understand that reproductive health information is deeply personal. This Privacy Policy explains what information we collect, why we collect it, how we protect it, and the choices and rights you have. It applies to patients, prospective patients, website visitors, and anyone who contacts us. It should be read with our Terms and Conditions.

2. Information We Collect

Personal and contact details

• Name, date of birth, gender, nationality, Emirates ID or passport number, address, phone number, email, and emergency contact.

Health information

• Medical, gynecologic, obstetric, and fertility history, including menstrual and pregnancy history.
• Symptoms, diagnoses, examination findings, and treatment plans.
• Test results, ultrasound and other imaging, biopsy and laboratory reports.
• Medications, allergies, surgical history, and relevant family history.
• Procedure and consent records, and clinical photographs or images where you have agreed.

Financial and insurance information

• Insurance provider, policy and member numbers, billing details, and payment records. We do not store full payment card details on our own systems [confirm with your payment provider].

Digital and communication information

• Appointment and booking history, messages and emails, and call records.
• For teleconsultations, technical details needed to run the session.
• Website data such as IP address, device and browser type, and pages visited (see Section 12).

Information about others

• If you give us details of a partner, guardian, or emergency contact, please make sure they are aware you have shared them.

3. How We Collect Information

• Directly from you, at registration, in consultations, on forms, by phone, email, or our website.
• From other healthcare providers, laboratories, imaging centers, or your insurer, where needed for your care and permitted by law.
• From our systems as you use our services, such as booking platforms and patient portals.

4. Why We Use Your Information

We use your information only for legitimate purposes:

We process your information where it is necessary to provide your care, to meet our legal obligations, for our legitimate operational interests, or where you have given consent. Where consent is the basis, you may withdraw it at any time.

5. Who We Share Information With

We do not sell your personal information. We share it only as needed and permitted by law:

• Healthcare professionals directly involved in your care, inside and outside the Clinic, such as laboratories, imaging centers, anesthesiologists, hospitals where procedures take place, and referred specialists.
• Your insurer, third-party administrator, or payer, to process claims and authorizations.
• Health authorities and regulators, such as the Dubai Health Authority and the Ministry of Health and Prevention, including participation in national or emirate-level health information systems where required. [Confirm with your lawyer the platforms your clinic must connect to, for example DHA's health information exchange.]
• Service providers who support our operations under confidentiality and data-protection commitments, such as IT, cloud hosting, and appointment or messaging systems.
• Courts, police, or other authorities, where the law requires it.
• Family members or others, only with your written consent or where the law allows, such as a parent or guardian for a minor.

6. Where Your Information Is Stored

Your health information is stored and processed within the United Arab Emirates. We do not transfer health information outside the UAE unless the law permits it and the required approvals are in place. Where a service provider handles your data, we require it to protect your information to the same standard and to keep it within the UAE unless approved.

7. How Long We Keep Your Information

• Medical records are kept for at least 25 years from the date of your last procedure or treatment, or longer if the law or your clinical needs require.
• Financial records are kept for the period required by UAE law [confirm period with your accountant or lawyer].
• Marketing preferences and website data are kept only as long as needed for their purpose, then deleted or anonymized.

Because of these legal retention rules, we may not be able to delete your medical records on request during the retention period.

8. How We Protect Your Information

We use administrative, technical, and physical safeguards to keep your information secure, including:

• restricted access, so only authorized staff can see your records, and only what they need;
• staff confidentiality obligations and privacy training;
• secure electronic record systems with access controls and audit trails [add encryption and backup measures used];
• secure storage for paper records and diagnostic images; and
• regular review of our security measures.

No system is completely risk-free. If a breach affects your information, we will act promptly to contain it and notify you and the relevant authorities as required by law.

9. Your Rights

Subject to UAE law and our legal obligations, you have the right to:

• Access your information and request a copy of your medical records;
• Correct information that is inaccurate or incomplete;
• Withdraw consent for uses that depend on your consent, such as marketing;
• Object to or restrict certain uses of your information, where the law allows;
• Request deletion of information we are not legally required to keep; and
• Ask how your information is used and who it has been shared with.

To exercise these rights, contact us using the details in Section 16. We may ask you to verify your identity first. We aim to respond within [X working days]. An administrative fee of [AED XXX] may apply to record copies.

Some requests, such as deleting medical records within the mandatory retention period, cannot be fulfilled. We will explain why if that is the case.

10. Patients Under 18

For patients under 18, a parent or legal guardian must give consent for treatment and will generally be able to access the patient's information. Where the law and good clinical practice allow, we will respect a young patient's need for privacy in a consultation and explain any limits on confidentiality.

11. Teleconsultations, Photos and Recordings

• Video and phone consultations are conducted over secure platforms that keep your data within approved systems. We do not record consultations without your consent.
• Clinical photographs or images are taken only with your consent, stored in your medical record, and used only for your care.
• We will not use your image, story, or testimonial for teaching, publications, or marketing without your separate written consent, and you can decline without any effect on your care.

12. Website, Cookies and Online Tools

Our website may use cookies and similar technologies to make the site work, understand how visitors use it, and improve your experience. You can manage cookies through your browser settings or our cookie banner [add if applicable]. Please do not send sensitive health details through website contact forms or social media messages. Use a phone call, or a secure channel we provide. Our website may link to other sites that have their own privacy practices, and we are not responsible for them.

13. Marketing Communications

With your consent, we may send you information about our services, health education, and events by email, SMS, or WhatsApp. Every message will include a simple way to opt out, and you can also opt out by contacting us at any time. Opting out of marketing will not affect your medical care or appointment reminders.

14. Data Breach Response

If a security incident affects your information, we will investigate and contain it, notify the relevant authorities as required, and inform affected patients where there is a risk to them, explaining what happened and the steps to take.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or the law. The current version will always be available on our website with its effective date. For significant changes, we will notify you where appropriate.

16. Contact Us and Complaints

Data Protection Contact: [Name / Data Protection Officer, if appointed]

Fémina Clinic by Prof. Wattiez

[Address, Dubai, UAE]

Phone: [+971 X XXX XXXX]

Email: [privacy@email]

If you are unhappy with how we handle your information, please contact us first and we will respond within [X working days]. You also have the right to raise your concern with the Dubai Health Authority or the relevant UAE data-protection authority.