This Privacy Policy explains how Enfield STD Clinic in Dubai collects, uses, stores, and shares personal data when you use our services, book tests, request home visits, or visit our website. Enfield STD Clinic Dubai treats health data as highly sensitive and handles it with strict regard for the privacy protocols set by the UAE government.
Scope of Policy and Who We Cover
This policy applies to the following individuals:
- Patients
- Website Users
- Visitors
It applies to anyone who gives us personal or health information through our site, phone booking, home testing, or at our clinic. This Privacy Policy covers personal data and sensitive health data, such as STD test results.
What We Collect
We limit collection to what we need for care and service delivery:
- Identity and Contact: Name, date of birth, Emirates ID or passport, phone, email, and address for home visits.
- Health Data: Symptoms, medical history, test results (HIV, chlamydia, gonorrhea, syphilis, etc.), and clinical notes.
- Billing and Admin: Payment method, insurance details, appointment records.
- Technical: IP address, cookies for the booking function, device, and log data.
- Other: Photos or scans only when clinically necessary.
We avoid collecting unnecessary personal identifiers for anonymous testing options.
How We Collect Data
We collect data when you:
- Book or attend an appointment.
- Use our secure results portal or request home testing.
- Contact support or complete forms.
- Visit our website (cookies and logs).
We may also receive data from referring clinicians, partner labs, or health authorities.
Why We Use Your Data (Legal Bases)
We process personal data for clear purposes:
- To provide clinical services and diagnosis.
- To process payments and insurance claims.
- To comply with legal obligations, including notifiable disease reporting.
- With your consent for marketing (as we do in our blogs as testimonials), research, or anonymized audits.
- For legitimate clinic operations, quality control, and fraud prevention
Sharing and Third Parties
We share data only when needed and under contracts that require data protection:
- Laboratories and Pharmacies for testing and treatment.
- Insurers, when you request claims.
- Health authorities (DHA, MOHAP) for mandatory reporting.
- Service providers (hosting, analytics, payment processors) who act under our instructions.
We never sell personal health data for marketing. Transfers outside the UAE do not occur for health data unless expressly permitted under the Health Data Law and approved by the relevant authority.
Data Localization and Transfers
UAE law, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE Federal Data Protection Law or FDPL), generally prohibits storing, processing, generating, or transferring health data outside the UAE unless an authorized exception applies.
If a lawful transfer occurs, we will document safeguards and, where required, obtain approvals.
How Long Do We Keep Your Health Records
We retain health records in line with the UAE requirements. The minimum period, as suggested by the UAE law, Federal Law No. 2 of 2019 Concerning the Use of Information and Communications Technology in Health Fields, is 25 years from the last clinical interaction, unless a longer period is required. After retention ends, we securely delete or anonymize records.
Data Security Measures and System Protection
We apply technical and organizational measures such as encryption in transit, encryption at rest where feasible, access controls, secure servers, and audit logs.
We adhere to the DHA-specific security standards and guidelines.
Staff receive training on data protection. We test and review security regularly.
Data Breach Notification:
In the event of a data breach affecting your personal health information, we will:
- Notify affected individuals within 72 hours of discovering the breach
- Report to the Dubai Health Authority as required by DHA regulations
- Provide details of: (a) nature of breach, (b) data affected, (c) remedial actions taken
- Offer guidance on protective measures you can take
Your Data Rights and How to Exercise Them
Subject to the UAE law, you may:
- Request access to your personal data.
- Ask for the correction of inaccurate data.
- Request deletion when legal grounds allow.
- Request restriction of processing.
- Object to processing for direct marketing.
- Request portability of the data you provided in a machine-readable format.
- Withdraw consent when processing relies on consent.
To claim your data rights, simply contact our Privacy Team (details below). We act swiftly, yet meticulously, confirming your identity before fulfilling your request. Understand that while your control is paramount, the law maintains limits: certain mandated health or legal retentions are non-negotiable. Our commitment is governed by the letter of the law, specifically the foundational UAE PDPL (Federal Decree Law No. 45 of 2021) and the ICT in Health Fields Law (Federal Law No. 2 of 2019).
Policy on Minors: Collecting Data from Users Under 18
For patients under 18 years of age:
- Parental or guardian consent is required for STD testing and treatment
- In cases where UAE law permits minors to consent independently for sexual health services, we will follow DHA guidelines
- We maintain strict confidentiality protocols for minor patients while ensuring appropriate parental involvement as legally required.
All minor data is handled with enhanced security measures
Website Cookies and Usage
We utilize cookies to ensure our website functions correctly and to continuously improve your experience. Our cookie use falls into two categories:
- Essential Cookies: These are strictly necessary for core site operations, such as secure online booking, session management, and site functionality. These cookies cannot be disabled without affecting site usage.
- Performance and Analytics Cookies: We use these to gather anonymous data on how visitors use our website. This helps us measure site performance, identify areas for improvement, and optimize content for better user experience.
How to Exercise Rights or Contact Us
If you believe we have not handled your data correctly, you have the right to complain to:
- Dubai Health Authority (DHA) Data Protection Office
- UAE Data Office
You may also seek legal remedies as provided under UAE law.
Legal Disclaimer:
This Privacy Policy is designed to comply with:
- UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection)
- Federal Law No. 2 of 2019 (ICT in Health Fields)
- Dubai Health Authority (DHA) regulations
- Other applicable UAE laws
While we have made every effort to ensure accuracy, this policy does not constitute legal advice. For questions about your specific data protection rights or obligations, please consult a qualified UAE attorney specializing in health data protection.
For interpretations of this policy, UAE law shall govern, and Dubai courts shall have exclusive jurisdiction.
Frequently Asked Questions:
Can my employer access my STD test results?
No. We never share results with employers without your explicit written consent.
Will this appear on my insurance record?
Only if you file an insurance claim. Cash payments keep records private.
How long until I can delete my account?
You can request deletion 25 years after your last appointment, per UAE law.
Do you share data with immigration?
Only for specific conditions requiring mandatory reporting to the UAE health authorities.
Can I get tested anonymously?
Yes. We offer anonymous testing with code-based result retrieval for certain services.
Questions About Your Privacy?
Your trust is paramount. We are committed to protecting your personal and health information and are here to address any questions you may have regarding this policy or our data practices.
