Book Appointment

  1. Who This Policy Covers

This Policy explains how MISC collects, uses, stores, and protects your personal and health data when you use www.misc.ae, book appointments, purchase packages, or visit the Clinic. It is issued under the PDPL (Federal Decree-Law No. 45 of 2021), Federal Law No. 2 of 2019 on ICT Use in Health Fields, DHA/NABIDH data standards, and the Consumer Protection and E-Commerce laws referenced in Part A. Using the Website or providing your data means you consent to this Policy.

  1. Data Controller

Medical International Specialist Centre LLC, Umm Suqeim, Dubai, UAE, is the data controller. DHA Licence No.: [0045568]. Data protection queries: [contact@misc.ae].

  1. What We Collect
  • Identity & contact data: name, date of birth, gender, nationality, Emirates ID/passport number, phone, email, address, emergency contact.
  • Health data (sensitive, under the PDPL): medical history, diagnoses, treatment and prescription records, lab and imaging results, physiotherapy notes, allergies, and related clinical records — processed for diagnosis, treatment, and care.
  • Financial & insurance data: insurance policy details, billing and payment records (full card numbers are never stored by us; processed via PCI DSS-compliant gateways).
  • Technical & usage data: IP address, browser/device type, pages visited, and cookie data (see Section 6).
  • Communication data: booking records, emails, calls, and WhatsApp correspondence with the Clinic.
  1. How & Why We Use It

We use your data to register and identify you as a patient, diagnose and treat you, manage appointments and packages, process billing and insurance claims, comply with DHA/NABIDH and other legal reporting duties, and — only with your explicit consent — send you marketing about services or offers by email, SMS, or WhatsApp; you can withdraw that consent at any time without affecting past processing. Our legal bases are your consent, contract performance, legitimate interests, legal obligation, and vital/medical interests, as permitted under the PDPL.

  1. Who We Share It With

Data is shared only where necessary: with clinicians and staff directly involved in your care; insurers for claims; DHA/NABIDH as regulated; other providers you are referred to; accredited labs and imaging centres; and vetted IT, hosting, and payment-processing partners bound by data protection agreements — plus regulators or courts where legally required. MISC does not sell, rent, or trade your personal data to third parties.

  1. Cookies

The Website uses strictly necessary cookies (no consent required), and, with your consent via our cookie banner, analytics and functionality cookies to understand usage and remember preferences. You can manage cookie preferences through your browser at any time.

  1. Retention

Medical records are retained for at least 25 years from your last clinical encounter as required by DHA rules and Federal Law No. 4 of 2016; financial records for at least 5 years; website usage data for up to 24 months — or longer where the law requires. Data is securely deleted or anonymised once retention periods expire.

  1. Security

We protect your data with encryption in transit and at rest, access controls, secure DHA/NABIDH-compliant clinical systems, and PCI DSS-compliant payment processing, alongside staff confidentiality obligations and breach-response procedures. In the event of a reportable breach, we will notify the UAE Data Office, DHA, and affected individuals as required by the PDPL.

  1. Your Rights

Under the PDPL you may request access to, correction of, or (subject to legal retention duties such as medical records) deletion of your data; object to or restrict certain processing; request data portability; withdraw consent; and lodge a complaint with the UAE Data Office. For contact [Contact@misc.ae] — we will respond within 30 days and may verify your identity first.

  1. Cross-Border Transfers, Children & Changes

Your data is stored and processed primarily in the UAE. Where it must be transferred abroad (e.g., to an international insurer or cloud provider), we ensure equivalent safeguards under PDPL Articles 22–23. We do not knowingly collect data from anyone under 18 without parental/guardian consent. We may update this Policy from time to time; the current version is always posted here with its “Last Updated” date.

  1. Contact & Complaints

Medical International Specialist Centre LLC — Umm Suqeim, Dubai, UAE — Email: [contact@misc.ae] — Phone: 04 349 9100] — Website: www.misc.ae. Healthcare complaints: DHA, toll-free 800342, www.dha.gov.ae. Data protection complaints: UAE Data Office, www.dataoffice.ae.