LEGAL

Privacy & Terms

Privacy Policy

Last Updated: 15/10/2026

At Dr. Batoul Reffai Medical Center, we respect your privacy and are committed to protecting the personal and health information you share with us.

This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, contact us, request an appointment, or use our services.

Our privacy practices are designed to comply with applicable laws and regulations of the United Arab Emirates, including applicable personal data and healthcare data protection requirements. (U.AE)

1. Information We Collect

We may collect information that you voluntarily provide to us, including:

  • Full name
  • Phone number
  • Email address
  • Preferred doctor
  • Preferred department or treatment
  • Preferred branch
  • Appointment details
  • Messages and enquiries submitted through our website
  • Information provided during consultations or treatment
  • Medical and health information where necessary for providing healthcare services

We may also automatically collect limited technical information when you use our website, such as:

  • IP address
  • Browser type
  • Device information
  • Website usage information
  • Pages visited
  • Date and time of access

2. How We Use Your Information

We may use your information to:

  • Respond to enquiries and requests
  • Schedule and manage appointments
  • Provide healthcare and aesthetic services
  • Communicate with you regarding your appointments or treatment
  • Provide personalized treatment and healthcare
  • Maintain medical and administrative records
  • Improve our services and website
  • Maintain website security
  • Comply with applicable legal and regulatory requirements

We will only process personal data where permitted by applicable law and, where required, with your consent. UAE data protection rules generally establish controls around processing personal data and provide individuals with rights concerning their information. (U.AE)

3. Health and Medical Information

Health and medical information is treated as confidential and will only be accessed, used or disclosed where authorized and necessary for legitimate healthcare, administrative, legal or regulatory purposes.

We take reasonable measures to protect health information against unauthorized access, alteration, disclosure, loss or misuse.

UAE healthcare ICT requirements specifically require healthcare providers to maintain the confidentiality, integrity and availability of health data and restrict disclosure without proper authorization. (U.AE)

4. Sharing Your Information

We do not sell your personal information.

We may share information only where reasonably necessary and legally permitted, including with:

  • Authorized healthcare professionals involved in your care
  • Authorized staff within the medical center
  • Service providers supporting our website, appointment systems, IT infrastructure or communications
  • Government authorities, regulators or healthcare authorities where legally required
  • Other parties where you have provided appropriate authorization or consent

Any third-party service providers handling personal information on our behalf should be required to maintain appropriate confidentiality and security measures.

5. Marketing Communications

If you choose to receive marketing communications from us, we may use your contact details to send information about:

  • Treatments
  • Services
  • Offers
  • Promotions
  • Events
  • Clinic updates

You may withdraw your consent or opt out of marketing communications at any time by contacting us or using the unsubscribe option provided in our communications.

Your personal data should not be used for promotional purposes contrary to applicable UAE requirements. The UAE Government notes that consumer-protection rules also address the use of consumer data for marketing. (U.AE)

6. Before & After Images

Before-and-after photographs may constitute personal information and may also reveal sensitive health or treatment information.

We will only publish or use identifiable patient photographs for marketing, educational or promotional purposes where appropriate authorization and consent has been obtained.

Where consent is required, patients will be informed about the intended use of their images.

7. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

  • Ensure the website functions properly
  • Improve website performance
  • Understand how visitors use the website
  • Remember preferences
  • Improve the user experience

Where required, we will request appropriate consent before using non-essential cookies or similar technologies.

You can manage or disable cookies through your browser settings, although doing so may affect certain website functionality.

8. Data Security

We take reasonable technical and organizational measures to protect personal and health information against:

  • Unauthorized access
  • Unauthorized disclosure
  • Loss
  • Destruction
  • Alteration
  • Misuse

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

9. Data Retention

We retain personal and medical information only for as long as reasonably necessary for the purposes for which it was collected, including providing healthcare services, maintaining appropriate medical records, complying with legal and regulatory obligations, resolving disputes and enforcing our agreements.

Healthcare records may be retained for periods required by applicable UAE healthcare regulations.

10. Your Rights

Subject to applicable UAE laws and regulations, you may have rights relating to your personal information, including the ability to:

  • Request access to certain personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request restriction or cessation of certain processing where legally applicable
  • Withdraw consent where processing is based on consent
  • Object to certain uses of your information where applicable
  • Request deletion where legally permitted

Requests may be subject to applicable legal, regulatory and healthcare record-retention requirements.

The UAE Personal Data Protection Law provides individuals with rights including requesting correction of inaccurate personal data and restricting or stopping certain processing. (U.AE)

11. Third-Party Websites

Our website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policies of any third-party website you visit.

12. Children's Privacy

Our website is not intended to knowingly collect personal information from children without appropriate authorization from a parent or legal guardian.

If we become aware that personal information has been collected from a child without appropriate authorization, we will take reasonable steps to address the situation in accordance with applicable law.

13. International Data Transfers

Some technology or service providers we use may process information outside the UAE.

Where personal information is transferred outside the UAE, we will take appropriate steps to ensure that such transfers are carried out in accordance with applicable UAE data protection requirements. The UAE Personal Data Protection Law includes requirements concerning cross-border transfers and sharing of personal data. (U.AE)

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or applicable laws and regulations.

Any updated version will be published on this page with a revised Last Updated date.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise applicable privacy rights, please contact us:

Dr. Batoul Reffai Medical Center
Phone: +971 504917522
Address: Dubai - Jumeirah 1
Data Protection / Privacy Contact: