1. Introduction

This Customer Health Data Privacy Policy ("Health Policy") supplements our general Privacy Policy and specifically addresses how DentistNearMeDubai collects, uses, protects, and shares health-related information. We recognize that health data requires enhanced protection and are committed to handling it with the utmost care.

This policy complies with UAE Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields, UAE Federal Decree-Law No. 45/2021 on Personal Data Protection, and international health data standards.

2. Scope of Health Data

For the purposes of this policy, "Health Data" includes:

• Dental health concerns and symptoms you describe
• Dental service preferences and treatment history shared with us
• Insurance information related to dental coverage
• Appointment history and booking records
• Communications with dental clinics through our platform
• Any other health-related information you voluntarily provide

Important Note: DentistNearMeDubai is a booking platform, not a healthcare provider. We do not access, store, or process your clinical dental records, treatment plans, X-rays, or medical history maintained by dental clinics. Those records are governed by the clinic's own privacy policies and UAE healthcare regulations.

3. Legal Basis for Processing Health Data

Health data is classified as "sensitive personal data" under UAE law. We process health data based on:

• Explicit Consent: You provide affirmative consent when sharing health information for booking purposes
• Healthcare Services: Processing is necessary to facilitate dental appointments and healthcare coordination
• Legal Obligations: Where required by UAE healthcare regulations
• Vital Interests: In emergency situations to protect your health or safety

4. How We Use Health Data

We use your health data strictly for the following purposes:

• Appointment Facilitation: Sharing relevant information with your chosen dental clinic to prepare for your appointment
• Service Matching: Helping you find clinics that offer the specific dental services you need
• Insurance Verification: Facilitating insurance coverage verification where you request this service
• Communication: Sending appointment reminders and follow-up communications
• Platform Improvement: Analyzing aggregated, anonymized data to improve our services
• Legal Compliance: Meeting regulatory requirements and responding to lawful requests

We do NOT use your health data for:

• Marketing or advertising purposes without explicit consent
• Sale to third parties
• Profiling for non-healthcare purposes
• Automated decision-making affecting your access to services

5. Health Data Sharing

5.1 With Dental Clinics

When you book an appointment, we share only the information necessary for the clinic to serve you, including:

• Contact information (name, phone, email)
• Appointment details (date, time, requested service)
• Health concerns you choose to share
• Insurance information (if applicable)

5.2 Legal Disclosures

We may disclose health data without consent only when:

• Required by UAE law or court order
• Requested by health authorities (MOHAP, DHA) for public health purposes
• Necessary to prevent serious harm to you or others
• Required for insurance claim verification (with your prior consent)

5.3 Research Purposes

We may use anonymized, aggregated health data for research to improve dental healthcare services. This data cannot be traced back to individuals.

6. Data Storage and Security

6.1 Data Localization

In compliance with UAE regulations, health data is primarily stored within the UAE or in jurisdictions with adequate data protection standards. Where international transfers are necessary, we implement appropriate safeguards.

6.2 Security Measures

We protect health data through:

• End-to-end encryption for data transmission
• Encryption at rest for stored health data
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Employee training on health data protection
• Incident response procedures for data breaches

6.3 Access Controls

Access to health data is restricted to employees who need it to perform their duties. All access is logged and monitored.

7. Data Retention

In accordance with UAE Federal Law No. 2 of 2019 and healthcare record retention requirements:

• Booking Records: Retained for 7 years for legal and audit purposes
• Health Information Shared: Retained for the minimum period necessary, typically 25 years as required by UAE healthcare regulations
• Communications: Retained for 3 years after your last interaction
• Insurance Data: Retained as required by insurance regulations

Upon account deletion, we will delete or anonymize your health data unless retention is required by law.

8. Your Rights Regarding Health Data

You have enhanced rights concerning your health data:

• Access: Request a complete copy of your health data we hold
• Correction: Request correction of inaccurate health information
• Deletion: Request deletion of health data (subject to legal retention requirements)
• Restriction: Request limitation of processing for specific purposes
• Portability: Receive your health data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for health data processing at any time
• Object: Object to processing of your health data for specific purposes

To exercise these rights, contact our Health Data Protection team at [email protected]. We will respond within 30 days.

9. Children's Health Data

For users under 18, health data processing requires parental or guardian consent. Parents and guardians can:

• Review health data collected about their child
• Request correction or deletion of such data
• Withdraw consent for future collection

10. Data Breach Notification

In the event of a data breach affecting your health data:

• We will notify the UAE Data Office immediately as required by law
• We will notify affected individuals within 72 hours if there is a high risk to their rights and freedoms
• We will provide information about the breach and steps you can take to protect yourself
• We will document the breach and remediation measures taken

11. Third-Party Healthcare Integration

Our platform may integrate with:

• Insurance Providers: For coverage verification (with your consent)
• Health Information Exchanges: Such as NABIDH (Dubai), Malaffi (Abu Dhabi), or Riyati (Northern Emirates) where applicable and with your consent

Each integration is governed by its own privacy policies and UAE healthcare regulations.

12. Updates to This Policy

We may update this Health Data Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email and posted on our Platform. Your continued use after updates constitutes acceptance.

13. Contact Us

For questions or concerns about your health data, contact our dedicated Health Data Protection team:

Email: [email protected]
General Privacy: [email protected]
Address: Ajman Free Zone, C1 Building, Ajman, United Arab Emirates

You also have the right to file a complaint with the UAE Data Office or the relevant health authority (MOHAP, DHA) if you believe your health data rights have been violated.