Privacy Policy
Dr. Baraa Al Hafez Medical Center
Introduction
At Dr. Baraa Al Hafez Medical Center, we are deeply committed to protecting the privacy, confidentiality, and security of every patient and visitor who interacts with our services. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit www.bamedcenter.com, use our patient portal, book an appointment, or receive medical care at our center in Sharjah, UAE. By using our website or services, you agree to the practices described in this Privacy Policy.
Who We Are
Dr. Baraa Al Hafez Medical Center is a multi-specialty medical center located at Asas Tower, Office 101, Al Khan, Sharjah, UAE. We provide comprehensive medical services including Neurosurgery, Physiotherapy, Dermatology, Dental Care, Family Medicine, Internal Medicine, Skin and Laser Treatments, Beauty Department, Cupping Therapy, Pediatric Care, and Orthopedic services — all guided by advanced American medical standards. As the data controller for personal information collected through our website and services, we are responsible for ensuring your data is handled with the utmost care, confidentiality, and respect.
Legal Basis
This Privacy Policy is prepared and maintained in full compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, Dubai Law No. 26 of 2021 on Personal Data Protection, the Telecommunications and Digital Government Regulatory Authority Consumer Protection Regulations, UAE Federal Decree-Law No. 34 of 2021 on Cybercrime, DHA Health Data Protection Standards, and UAE Federal Law No. 1 of 2006 on Electronic Commerce and Transactions.
What Information We Collect
We collect two types of information — personal information you provide to us directly and technical information collected automatically when you use our website.
Personal information we may collect includes your full name, email address, phone number, date of birth, gender, nationality, Emirates ID number, insurance details, medical history, appointment details, consultation notes, test results, prescriptions, and any other information you provide when booking an appointment, registering on our patient portal, or receiving medical care at our center.
Technical information collected automatically when you visit www.bamedcenter.com includes your IP address, browser type, device type, operating system, pages visited, time spent on pages, referring website, and cookie data as described in our Cookie Policy. This technical information is collected in anonymized and aggregated form wherever possible and is used solely to improve our website and services.
How We Use Your Information
We use the personal information we collect to provide you with the highest quality medical care and services. Specifically we use your information to process and confirm appointment bookings, manage your patient records and medical history, communicate with you regarding your appointments and treatment, provide telemedicine consultations where applicable, process insurance claims and billing, send you important service updates and health information, improve our website and patient experience, comply with our legal and regulatory obligations under UAE law, and ensure the security and integrity of our patient portal and telemedicine platform.
We will never use your personal information for any purpose that is inconsistent with this Privacy Policy or that you have not consented to. We will never sell your personal information to any third party under any circumstances.
How We Protect Your Health Data
The protection of your health and medical data is our absolute highest priority at Dr. Baraa Al Hafez Medical Center. All patient health records, consultation notes, test results, prescriptions, and clinical information are stored exclusively in our secure, encrypted health record management system which operates in full compliance with DHA Health Data Protection Standards and UAE Federal Decree-Law No. 45 of 2021.
All data transmission between your device and our patient portal is protected using industry-standard SSL encryption. Access to patient health records is strictly limited to authorized medical and administrative staff who require access to provide you with care. All staff members are bound by strict confidentiality obligations and receive regular training on data protection and patient privacy best practices.
How We Share Your Information
We understand that your personal and health information is deeply private and we treat it with the highest level of confidentiality. We may share your information only in the following limited circumstances.
We may share your information with other healthcare providers involved in your treatment where necessary to provide you with coordinated, continuous medical care. We may share your information with your insurance provider to process legitimate insurance claims on your behalf. We may share your information with trusted third-party service providers who assist us in operating our website, patient portal, and appointment booking system — all of whom are contractually bound to protect your information in accordance with UAE data protection standards. We may disclose your information to regulatory or law enforcement authorities where required by UAE law or a valid court order.
We will never share your health or medical information with any third party for marketing, advertising, or commercial purposes.
Data Retention
We retain your personal information for as long as necessary to provide you with medical care and fulfill our legal obligations under UAE healthcare regulations. Patient medical records are retained in accordance with UAE Ministry of Health and DHA record retention requirements. Where you request deletion of your personal data and there is no legal obligation requiring us to retain it, we will action your request within 30 days of receipt.
Your Rights Under UAE Law
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection you have a number of important rights in relation to your personal information. You have the right to access the personal information we hold about you and request a copy of it. You have the right to request correction of any inaccurate or incomplete personal information. You have the right to request deletion of your personal data where there is no legal basis for us to continue holding it. You have the right to withdraw your consent for non-essential data processing at any time. You have the right to object to the processing of your personal data for marketing purposes. You have the right to request restriction of processing of your personal data in certain circumstances.
To exercise any of these rights please contact our Data Protection Officer at info@bamedcenter.com. We will respond to all requests within 30 days of receipt.
Children's Privacy
Dr. Baraa Al Hafez Medical Center provides Pediatric medical care for children of all ages. Where we collect personal information about a child under the age of 18, we require the consent of a parent or legal guardian before collecting, using, or storing that information. Parents and guardians may contact us at any time to request access to, correction of, or deletion of their child’s personal information.
Third Party Websites
Our website may contain links to third-party websites including insurance provider portals and regulatory authority websites. This Privacy Policy applies only to www.bamedcenter.com and our services. We are not responsible for the privacy practices of any third-party websites and encourage you to review their privacy policies before providing any personal information.
International Data Transfers
Some of our trusted third-party service providers may process data on servers located outside the UAE. Where international data transfers occur, we ensure that all transfers comply fully with UAE Federal Decree-Law No. 45 of 2021, that receiving parties provide an equivalent level of data protection to UAE standards, and that no patient health or medical data is ever involved in any international transfer.
Changes to This Privacy Policy
We review and update this Privacy Policy regularly to reflect changes in our services, technology, and applicable UAE laws and regulations. When material changes are made the Last Updated date will be revised and registered patient portal users will be notified via email or in-app notification. We encourage you to review this Privacy Policy periodically. Continued use of our website or services after updates take effect constitutes acceptance of the revised policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact our Data Protection Officer at info@bamedcenter.com or visit us at Asas Tower, Office 101, Al Khan, Sharjah, UAE. You can also reach us by phone on +971 6 530 5981 Saturday through Thursday between 10:00 AM and 9:00 PM. We are committed to resolving all privacy concerns promptly and transparently within 30 days of receipt.
For regulatory escalation regarding data protection concerns you may contact the UAE Data Office at www.dataoffice.ae or the Telecommunications and Digital Government Regulatory Authority at www.tdra.gov.ae.