Your Privacy Matters

Privacy Policy

Allied Medical Center is committed to protecting your personal health information and respecting your privacy. Learn how we collect, use, and safeguard your data.

Last Updated: March 2026

Introduction

Welcome to Allied Medical Center's Privacy Policy. This document explains how Allied Medical Center ("we," "our," or "us"), located in Dubai, United Arab Emirates, collects, uses, protects, and shares information about our patients, website visitors, and service users.

At Allied Medical Center, we recognize that your personal health information is highly sensitive and private. We are committed to maintaining the highest standards of confidentiality and data protection in accordance with UAE laws, international healthcare privacy standards, and global data protection regulations including the General Data Protection Regulation (GDPR) where applicable.

This Privacy Policy applies to all information collected through our website (www.alliedmedicalcenter.net), mobile applications, patient portals, in-person visits to our facilities, telephone communications, and any other means of interaction with Allied Medical Center.

Your Consent: By using our website, services, or visiting our medical facilities, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein. If you do not agree with this policy, please refrain from using our services.

Information We Collect

Personal Information

We collect various types of personal information depending on your interaction with our services:

  • Contact Information: Name, email address, phone number, mailing address, emergency contact details
  • Identification Information: Date of birth, nationality, Emirates ID number (for UAE residents), passport number (for non-residents), insurance card information
  • Demographic Information: Age, gender, language preferences, occupation
  • Communication Preferences: Preferred contact methods, appointment reminder preferences, newsletter subscription status
  • Payment Information: Credit card details, billing address, insurance provider information (processed securely through encrypted payment gateways)

Website and Digital Information

When you visit our website or use our digital services, we automatically collect certain technical information:

  • Device Information: IP address, browser type and version, operating system, device identifiers
  • Usage Data: Pages visited, time spent on pages, links clicked, referring website, exit pages
  • Location Data: Approximate geographic location based on IP address
  • Cookie Data: Information stored in cookies and similar tracking technologies (see Cookies section)

Information You Provide Voluntarily

  • Appointment requests and scheduling information
  • Inquiries submitted through contact forms or email
  • Feedback and reviews about our services
  • Participation in surveys, contests, or promotional activities
  • Newsletter subscriptions and marketing communications preferences

Medical Data Protection

Allied Medical Center handles Protected Health Information (PHI) with the utmost care and confidentiality. We adhere to healthcare privacy standards equivalent to HIPAA (Health Insurance Portability and Accountability Act) regulations, adapted for UAE healthcare requirements.

Health Information We Collect

  • Medical History: Past illnesses, surgeries, chronic conditions, family medical history, allergies, current medications
  • Clinical Data: Vital signs, physical examination findings, symptoms, diagnoses, treatment plans
  • Diagnostic Results: Laboratory test results, imaging studies (X-rays, MRI, CT scans, ultrasounds), pathology reports
  • Treatment Records: Medications prescribed, procedures performed, clinical notes, progress reports
  • Specialist Consultations: Referrals, specialist reports, multidisciplinary team discussions
  • Mental Health Information: Psychological assessments, counseling notes, psychiatric treatment records

Special Protection for Medical Data

We implement enhanced security measures specifically for medical information:

Encryption

All medical records encrypted at rest and in transit

Access Control

Strict role-based access limited to treating physicians

Audit Trails

Comprehensive logging of all medical record access

Medical Confidentiality: We never disclose your medical information to third parties without your explicit written consent, except where required by UAE law, for treatment purposes with other healthcare providers involved in your care, for payment and insurance processing, or in emergency situations where disclosure is necessary to protect your health or safety.

How We Use Your Information

Allied Medical Center uses collected information for the following legitimate purposes:

Healthcare Delivery

  • Providing medical consultations, diagnoses, and treatments
  • Coordinating care among healthcare providers within our facility
  • Managing appointments and scheduling procedures
  • Communicating test results and treatment recommendations
  • Maintaining accurate medical records for continuity of care
  • Facilitating referrals to specialists when necessary

Administrative Operations

  • Processing payments and managing billing inquiries
  • Verifying insurance coverage and submitting claims
  • Sending appointment reminders via SMS, email, or phone
  • Responding to patient inquiries and support requests
  • Managing patient portals and online services
  • Conducting quality assurance and patient satisfaction surveys

Legal and Regulatory Compliance

  • Complying with UAE Ministry of Health regulations
  • Maintaining records as required by Dubai Health Authority (DHA)
  • Reporting communicable diseases to public health authorities
  • Responding to legal requests and court orders
  • Investigating and resolving medical malpractice claims

Research and Quality Improvement

  • Conducting de-identified medical research to advance healthcare
  • Analyzing treatment outcomes for quality improvement initiatives
  • Developing clinical protocols and best practices
  • Training healthcare professionals (with anonymized patient data)

Marketing Communications (with your consent)

  • Sending newsletters about health topics and wellness tips
  • Informing you about new services and medical specialties
  • Promoting health screening campaigns and preventive care programs
  • Sharing educational content and medical blog posts

Note: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Data Security Measures

Allied Medical Center implements comprehensive technical, physical, and administrative safeguards to protect your personal and health information:

Technical Security

  • Encryption: All sensitive data encrypted using industry-standard AES-256 encryption at rest and TLS 1.3 for data in transit
  • Secure Servers: Medical records stored on secure, access-controlled servers in certified data centers
  • Firewalls: Advanced firewall protection and intrusion detection systems
  • Regular Updates: Security patches and software updates applied promptly
  • Backup Systems: Regular encrypted backups with disaster recovery protocols
  • Network Security: Segmented networks with restricted access to medical data systems

Physical Security

  • Restricted access to server rooms and medical records storage areas
  • 24/7 security surveillance and monitoring
  • Secure document disposal procedures (shredding of physical records)
  • Locked cabinets for physical medical files
  • Visitor access controls and sign-in procedures

Administrative Security

  • Access Controls: Role-based access permissions ensuring staff only access information necessary for their job functions
  • Staff Training: Mandatory privacy and security training for all employees handling patient data
  • Confidentiality Agreements: All staff sign confidentiality agreements acknowledging their privacy obligations
  • Audit Logs: Comprehensive logging and monitoring of all access to patient records
  • Incident Response: Established protocols for responding to data breaches or security incidents
  • Vendor Management: Due diligence and security assessments of third-party service providers

Data Breach Notification: In the unlikely event of a data breach affecting your personal or health information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovery, and take immediate steps to mitigate potential harm.

Your Privacy Rights

As a patient and data subject, you have important rights regarding your personal and health information:

Right to Access

You have the right to request and obtain copies of your medical records and personal information we hold about you. We will provide this information within 30 days of your request, subject to any legal limitations.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request corrections. We will update your records promptly upon verification of the correct information.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances. However, please note that medical records must be retained for minimum periods as required by UAE law and medical licensing authorities. We cannot delete medical records during legally mandated retention periods.

Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as when you contest the accuracy of your data or object to our processing.

Right to Data Portability

You have the right to receive your medical records in a structured, commonly used, machine-readable format and to transmit this data to another healthcare provider.

Right to Object

You may object to processing of your data for marketing purposes at any time. For medical data processing necessary for healthcare delivery, objection rights are limited by medical necessity and legal requirements.

Right to Withdraw Consent

Where we rely on your consent to process data (such as for marketing), you can withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided at the end of this policy. We will respond to your request within one month and provide clear information about the action taken.

Information Sharing and Disclosure

Allied Medical Center shares your information only in limited circumstances:

Healthcare Providers

We may share your medical information with other healthcare providers involved in your treatment, including:

  • Referring physicians who sent you to our facility
  • Specialists to whom we refer you for consultation
  • Diagnostic laboratories processing your tests
  • Hospitals to which you may be admitted
  • Pharmacies filling your prescriptions

Insurance Companies and Payers

We share necessary medical information with your insurance provider to process claims and verify coverage. We disclose only the minimum information required for these purposes.

Service Providers

We engage carefully vetted third-party service providers who assist with our operations. These include:

  • Electronic medical record (EMR) system providers
  • Cloud storage and data hosting services
  • Payment processors for billing and transactions
  • IT support and cybersecurity services
  • Appointment scheduling platforms
  • Communication services (SMS, email providers)

All service providers are contractually bound to maintain confidentiality and use data only for specified purposes.

Legal Requirements

We may disclose information when required by law, including:

  • Responses to court orders, subpoenas, or legal processes
  • Compliance with UAE Ministry of Health regulations
  • Reporting of communicable diseases to public health authorities
  • Investigations of suspected medical fraud or abuse
  • Protection of public safety in emergency situations

Business Transfers

In the event of a merger, acquisition, or sale of all or part of Allied Medical Center's assets, patient information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

No Sale of Data: Allied Medical Center does not sell, rent, or trade your personal or medical information to third parties for their marketing purposes. Your health information is never used for commercial gain beyond the provision of healthcare services.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable the website to remember your preferences and track your activity.

Types of Cookies We Use

  • Essential Cookies: Required for website functionality, including secure login to patient portals, appointment booking systems, and maintaining your session. These cannot be disabled.
  • Performance Cookies: Collect anonymous information about how visitors use our website, helping us improve site performance and user experience.
  • Functional Cookies: Remember your preferences (such as language settings) and provide enhanced features.
  • Targeting/Advertising Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These cookies may be set by our advertising partners.

Third-Party Cookies

Our website may include cookies from third-party services such as:

  • Google Analytics (for website traffic analysis)
  • Facebook Pixel (for social media advertising)
  • YouTube (for embedded video content)
  • Google Maps (for location services)

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View what cookies are stored and delete them individually or entirely
  • Block third-party cookies
  • Block cookies from specific websites
  • Block all cookies from being set
  • Delete all cookies when you close your browser

Note: Disabling essential cookies may affect website functionality, including the ability to book appointments online or access patient portals.

International Data Transfers

Allied Medical Center is located in Dubai, United Arab Emirates. Your information is primarily stored and processed within the UAE. However, some of our service providers may process data in other countries.

Safeguards for International Transfers

When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by data protection authorities
  • Adequacy decisions recognizing equivalent data protection standards
  • Binding Corporate Rules for transfers within multinational organizations
  • Compliance with GDPR requirements for transfers outside the European Economic Area

European Economic Area (EEA) Residents

If you are located in the EEA, your personal data is protected under the GDPR. We comply with GDPR requirements including:

  • Lawful basis for processing (consent, contract, legal obligation, vital interests, or legitimate interests)
  • Enhanced rights to access, rectification, erasure, and portability
  • Right to lodge complaints with supervisory authorities
  • Data Protection Impact Assessments for high-risk processing

Children's Privacy

Allied Medical Center provides healthcare services to patients of all ages, including children. We recognize that children's privacy requires special protection.

Parental Consent for Minors

For patients under 18 years of age (or under 21 for certain services under UAE law), we require parental or legal guardian consent for:

  • Collection of personal and health information
  • Provision of medical treatment (except in emergencies)
  • Sharing of medical records with third parties
  • Participation in research or surveys

Online Services and Children Under 13

Our website and online services are not directed at children under 13 years of age for independent use. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you believe your child under 13 has provided personal information to us without your consent, please contact us immediately, and we will delete such information promptly.

Pediatric Medical Records

Pediatric medical records are maintained with the same confidentiality and security standards as adult records. Parents and legal guardians have the right to access their child's medical records, subject to age-appropriate considerations and UAE law.

Changes to This Privacy Policy

Allied Medical Center reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors.

How We Notify You of Changes

  • Material changes will be posted prominently on our website with an updated "Last Updated" date
  • Significant changes affecting your rights may be communicated via email to registered patients
  • We may display a notice on our website or patient portal for important policy updates
  • Continued use of our services after changes indicates acceptance of the revised policy

Reviewing the Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The current version is always available on our website at www.alliedmedicalcenter.net/privacy-policy

Prior Versions

If you would like to review previous versions of our Privacy Policy, please contact us, and we will provide copies of prior policies upon request.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Data Protection Officer

Allied Medical Center has designated a Data Protection Officer responsible for overseeing privacy compliance and handling data protection inquiries.

Get in Touch

For privacy inquiries, data access requests, or to exercise your rights

Mailing Address

Allied Medical Center
P.O. Box 32442
Dubai, United Arab Emirates

Office Hours

Monday – Friday: 8:00 AM – 8:00 PM
Saturday – Sunday: 8:00 AM – 7:00 PM

Response Time

We aim to respond to all privacy inquiries within 5 business days and will address data access requests within 30 days as required by law.

Regulatory Authority: Allied Medical Center is licensed by the Dubai Health Authority (DHA) under MOH# SJ2CZJ5Q-240325 and operates in compliance with UAE healthcare regulations and data protection standards.