Privacy Policy

1. Who this covers

This policy explains how Pinas Aesthetic Polyclinic (the "Clinic"), as data controller, processes the personal data of website visitors, prospective patients, and patients. It is written to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and the health-data standards issued by the Dubai Health Authority (DHA).

2. Information we collect

• Contact details: name, phone number, WhatsApp number, and email address, submitted through our contact form, booking form, or campaign landing pages.
• Appointment & consultation information: the treatment(s) you're interested in, preferred date/time, and any notes you provide when booking.
• Medical/health information: if you become a patient, information relevant to your care — medical history, allergies, current medications, and treatment records — collected during intake and consultation.
• Technical data: standard web analytics (pages visited, browser/device type) collected automatically when you use this website.

3. Why we process it

To respond to your enquiries, schedule and manage appointments, provide clinical care and follow-up, process billing and insurance where applicable, and — only with your consent — send you marketing communications about our treatments and offers.

4. Marketing communications

We will only contact you for marketing purposes if you have opted in (for example, by checking the marketing-consent box on our lead form). You can withdraw this consent at any time by contacting us using the details below.

5. Who we share it with

Your data may be shared with insurance companies/TPAs to process claims (where applicable), with health information exchanges where the Clinic is required to report as a licensed healthcare facility, and with service providers who support our operations (such as hosting and email delivery), bound by confidentiality obligations. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

6. How long we keep it

• Clinical/health records: retained for a minimum of 25 years from your last visit, in line with DHA medical-record retention standards.
• Billing records: retained for at least 5 years, in line with UAE financial record-keeping requirements.
• Enquiries/leads who don't become patients: retained for up to 2 years from your last interaction, unless you ask us to delete it sooner.

7. Security

All traffic to this website and our booking system is encrypted in transit (HTTPS/TLS). Access to patient data within our systems is restricted to authorized staff on a role-appropriate basis, and administrative actions are logged.

8. Your rights

Subject to PDPL and applicable health-record regulations, you may request access to, correction of, or — where legally permitted — deletion of your personal data. Because clinical records are also subject to DHA retention requirements, deletion requests for health data may be fulfilled by restricting further use rather than outright erasure where the law requires the record to be kept.

9. Contact

For questions about this policy or to exercise your rights, contact us at info@pinasaesthetic.com. See also our Terms & Conditions.