Personal Data

1. General Provisions
This Personal Data Processing Policy (the “Policy”) is designed to protect the rights and freedoms of data subjects and to comply with the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Refresh Clinic (the “Clinic”, “we”, “our”) is committed to safeguarding your personal data during its processing.

2. Personal Data We Collect
We may process the following categories of personal data: Identification data: name, surname, date of birth, gender;
Contact data: phone number, email address, postal address;
Medical data: medical history, examination results, diagnoses, prescribed procedures and medications;
Technical data: IP address, browser type, cookies data, and other site interaction information.

3. Purposes of Data Processing
Personal data is processed for the following purposes: Appointment scheduling and provision of medical services;
Maintenance of medical records;
Communication with patients (appointment confirmation, reminders, feedback);
Service quality improvement and development;
Compliance with UAE legal and regulatory requirements;
Website administration and analytics.

4. Legal Grounds for Processing
Data processing is based on: Your voluntary and informed consent; Necessity for the performance of a contract for medical services; Fulfillment of legal obligations; Other lawful grounds as provided by UAE law.

5. Data Retention Period
Personal data is retained for as long as necessary to achieve the processing purposes and/or in accordance with legal requirements, after which it is deleted or anonymized.

6. Disclosure of Personal Data to Third Parties
Personal data may be disclosed to: Authorized employees of the Clinic; Government authorities as required by law; Partners and contractors providing technical and organizational support, under confidentiality obligations. Data disclosure to other entities occurs only with your consent or as required by law.

7. Rights of Data Subjects
You have the right to: Receive information about the processing of your personal data; Request access to your data; Demand correction, updating, or deletion of data; Withdraw your consent to data processing; File complaints with competent authorities in case of rights violations.

8. Data Security
We implement technical and organizational measures to protect data against unauthorized access, loss, or alteration.

9. Contact Information
To exercise your rights or address questions related to data processing, please contact us using the details provided on our website.

10. Consent to Personal Data Processing
I, the undersigned, acknowledge that I have read the Personal Data Processing Policy of Refresh Clinic and consent to the collection, processing, and storage of my personal data for appointment scheduling, provision of medical services, and communication.