Last Updated: September 2026
1. Scope & Legal Regulatory Framework
Pallidus Polyclinic is committed to safeguarding patient confidentiality and personal data in strict compliance with:
DHCC Health Data Protection Regulation No. 7 of 2013 (HDPR).
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
UAE Federal Law No. 2 of 2019 Concerning the Use of ICT in Health Fields.
Google Ads Data Collection & Privacy Policies for Healthcare Advertisers.
2. Categories of Information Collected
We collect information directly from you through website contact forms, WhatsApp inquiries, online booking portals, or during clinical intake:
Personal Identification Information: Full name, passport/Emirates ID details, age, gender, date of birth, contact telephone number, and email address.
Patient Health Information (PHI): Medical history, treatment records, diagnostic findings, prescriptions, practitioner notes, and appointment details generated before or during healthcare delivery.
Technical & Usage Data: IP address, browser type, device information, operating system, and website interaction metrics collected automatically via cookies.
3. Lawful Purpose & Utilization of Data
In accordance with Article 27 of the HDPR and UAE Data Protection Laws, personal data and PHI are collected solely for lawful, defined healthcare and operational purposes:
Facilitating clinical consultations, appointments, medical evaluations, and treatment planning.
Managing clinic billing, insurance processing, and operational records.
Communicating appointment confirmations, operational updates, and follow-up clinical care instructions.
Ensuring compliance with healthcare quality standards, medical audits, and regulatory reporting mandated by DHCR and DHA.
4. Storage, Data Retention & Safeguards
Security Measures: All electronic health records and personal data are protected by administrative, physical, and technical safeguards (including SSL encryption, secure access controls, and firewall defenses) against unauthorized access, loss, tampering, or disclosure.
Mandatory Record Retention Periods: Pursuant to DHCC HDPR Section 35, medical and dental records held by Pallidus Polyclinic are securely retained for the following mandatory minimum timeframes:
Adult Medical & Dental Records: Minimum of 10 years from the date of last clinical entry.
Minor (Pediatric) Medical Records: Minimum of 10 years after the patient reaches 18 years of age.
Medico-Legal Records: Minimum of 20 years from the date of last entry.
5. Cross-Border Data Transfers
Patient Health Information generated and held within Dubai Healthcare City is stored securely within approved local health data infrastructure. In compliance with HDPR Section 67, PHI will not be transferred to third parties outside DHCC or the UAE unless:
The destination jurisdiction ensures an adequate level of data protection recognized by applicable UAE authorities; and
The transfer is explicitly authorized by the patient or strictly necessary for the ongoing provision of healthcare services.
6. Cookie Policy & Web Analytics Transparency
Our website utilizes cookies and tracking technologies to enhance user navigation, analyze site performance, and support Google Ads marketing transparency:
Categories of Cookies Used:
Necessary Cookies: Essential for core website functionality, secure form submission, and consent preference storage.
Analytical Cookies: (e.g., Google Analytics _ga, _gid) Collect anonymous site usage metrics, session counts, and page performance data to optimize user experience.
Marketing & Ad Verification Cookies: (e.g., Google Tag Manager _gcl_au, DoubleClick IDE) Used to evaluate ad campaign effectiveness and measure conversion requests (such as form submissions or phone calls) without profiling health conditions.
Google Ads Healthcare Personalization Restriction Notice:
In accordance with Google Ads Restricted Targeting Policies, Pallidus Polyclinic strictly prohibits personalized ad targeting or remarketing based on sensitive health data, medical conditions, or specific treatment searches. Campaign targeting is limited strictly to geographic location, general demographics, and broad wellness interests.
Managing Cookie Preferences: Visitors may manage, block, or delete cookies at any time via their web browser settings or by utilizing our website's cookie consent banner.
7. Patient Rights & Contact Information
Under DHCC HDPR and UAE Data Protection Regulations, patients possess the following rights regarding their data:
Right of Access: Request copies of your personal data and health records in writing without charge.
Right to Correction: Request prompt correction of inaccurate or incomplete personal records.
Right to Information: Be informed of the purposes, recipients, and security measures applied to your data.
Data Protection Enquiries & Grievances:
To exercise your data rights or raise questions regarding this Privacy Policy, please contact our administrative office:
Attn: Data Protection Officer / Clinic Manager
Facility: Pallidus Polyclinic, Unit 3, Ground Floor, Building 25, Dubai Healthcare City, Dubai, UAE
Email: info@pallidusclinic.com | Phone: +971 56 481 1807
If you believe your data privacy rights have been infringed, you have the right to submit a formal inquiry or complaint to the Centre for Healthcare Planning and Quality (CPQ) / Customer Protection Unit (CPU) of DHCA.
