PRIVACY POLICY

Last Updated: February 4, 2026

Global Med Sys Poly Clinic LLC (“we,” “our,” or “us”), registered in the United Arab Emirates under license number 8997209, operates https://www.gmsclinic.ae and provides medical services. We are committed to protecting the privacy and security of your personal and health information.

This Privacy Policy explains how we collect, use, and protect your data in compliance with UAE Federal Law No. 45 of 2021 (PDPL) and UAE Federal Law No. 2 of 2019 (Health Data Law).

 1. DATA WE COLLECT

We collect the following types of information:

•  Personal Identification: Name, Emirates ID details, date of birth, gender, and contact details (phone number, email, address).

•  Health Information (Sensitive Data): Medical history, diagnoses, prescriptions, lab results, and insurance information.

•  Technical Data: IP address, browser type, and cookies collected via our website.

•  Communication Data: History of your interactions with us via WhatsApp, email, or phone.

 2. PURPOSE OF DATA PROCESSING

We process your data for the following purposes:

•  Providing medical consultations and treatments.

•  Managing medical appointments and reminders (including via WhatsApp).

•  Processing insurance claims.

•  Complying with mandatory reporting to UAE Health Authorities (e.g., DHA, DoH, MoHAP).

•  Improving our website and services.

 3. LEGAL BASIS FOR PROCESSING

Under UAE PDPL, we process your data based on:

•  Your Explicit Consent: Provided when you book an appointment or contact us.

•  Medical Necessity: For providing healthcare services and diagnosis.

•  Legal Obligation: To comply with UAE healthcare regulations.

 4. DATA STORAGE AND LOCALIZATION (HEALTH DATA LAW)

In accordance with UAE Federal Law No. 2 of 2019, all health-related data is stored on secure servers located within the United Arab Emirates. We do not transfer health data outside the UAE unless specifically authorized by the relevant health authority.

 5. COMMUNICATION VIA WHATSAPP (WABA)

By contacting us via WhatsApp, you acknowledge and agree that:

•  WhatsApp is a third-party platform owned by Meta.

•  While WhatsApp provides end-to-end encryption, the metadata and account information are subject to Meta’s privacy policies.

•  We use WhatsApp solely for administrative purposes (appointments, general inquiries). Sensitive medical reports will only be shared via WhatsApp with your explicit request and consent.

 6. DATA SHARING AND DISCLOSURE

We do not sell your data. We may share your information only with:

•  UAE Health Authorities (DHA/DoH/MoHAP).

•  Your health insurance provider for billing purposes.

•  Authorized third-party service providers (Cloud hosting within UAE, IT support) under strict confidentiality agreements.

 7. YOUR RIGHTS

Under UAE law, you have the right to:

•  Access your personal data.

•  Request correction of inaccurate data.

•  Request deletion of your data (subject to medical record retention laws in the UAE).

•  Withdraw consent for marketing communications.

8. SECURITY MEASURES

We implement advanced technical and organizational security measures to protect your data from unauthorized access, modification, or disclosure.

9. COOKIES

Our website uses cookies to enhance user experience. You can manage cookie settings in your browser.

10. CONTACT US

If you have any questions regarding this Privacy Policy or your data, please contact our Data Protection Officer (DPO) at:

Global Med Sys Poly Clinic LLC

Address: Dubai, Downtown, Souk Al Manzil

Email: hello@gmsclinic.ae

Phone: +971 4 572 1912

Website: https://www.gmsclinic.ae