Data Protection Policy

1. Name and Contact Details of the Data Controller

AEMED Partners FZE (registered office: Business Centre, Sharjah Publishing City Free Zone, Sharjah, UAE; license number: 4417198.01, hereinafter referred to as the "Company" or the "Controller") acts as the controller of personal data processed through the website https://odoctor.ae/ (hereinafter referred to as the "Website") in accordance with UAE data protection law.

2. Definitions

Terms not defined in this Data Protection Policy shall have the meanings provided in our General Terms and Conditions. Key definitions include:

• Personal Data: Any information relating to a natural person that enables their identification, such as name, phone number, email address, or IP address.
• Health Data: Personal data concerning an individual’s physical or mental health, including details of healthcare services provided.
• Processing: Any operation performed on personal data, such as collection, storage, or disclosure.
• Controller: The entity determining the purposes and means of processing personal data (i.e., the Company).
• Data Subject: The individual whose personal data is processed (i.e., you).
• Consent: A freely given, specific, informed, and unambiguous indication of the Data Subject’s agreement to the processing of their personal data.

3. The Importance of Processing Personal Data by the Controller

The Controller processes personal data to deliver services via the Website (https://odoctor.ae/), enabling patients to book appointments with healthcare providers and allowing healthcare professionals to manage their schedules and receive feedback. Use of the Website and provision of personal data are voluntary. However, without consenting to the processing of personal data, certain services (e.g., appointment booking) cannot be accessed.

The Controller informs users that personal data may be transferred to third countries. Where such transfers occur, the Controller ensures compliance with UAE data protection laws, applying appropriate safeguards.

4. Data Processing Activities

4.1 Use of the Website

Patients may use the Website to book medical appointments, while healthcare providers may use it to offer services and receive reviews. The following data may be processed:

• For patients: Name, ID number, email address, phone number, selected healthcare provider, appointment details (e.g., date, time, location), and reviews.
• For healthcare providers: Name, contact details, qualifications, availability, and patient feedback.

Purpose: To operate the appointment booking system, facilitate connections between patients and providers, and maintain communication (e.g., for appointment changes).

• Operate the appointment booking system available on the Website.
• Book appointments with medical institutions and specialists.
• Maintain contact with users (e.g., to change or cancel an appointment).
• Send notifications via SMS or other messaging services.
• Improve services through analytics, system monitoring, and error detection.
• Provide marketing updates analytics and support Website performance.

Legal Basis: Explicit consent of the Data Subject or contractual necessity under UAE law. Recipients: Healthcare providers, Website visitors (for public reviews), and technical service providers assisting with Website operations.

Duration: Data is processed until consent is withdrawn or the purpose is fulfilled, up to a maximum of 5 years after account closure.

4.2 Cookies

The Controller uses cookies to enhance Website functionality. Cookies are small data files stored by your browser to improve user experience. Users can manage cookie preferences via the Website or browser settings.

5. Sharing and Storage of Personal Data

Personal data is shared only as necessary to provide services—e.g., with healthcare providers for bookings or technical partners for Website maintenance. These recipients are bound by agreements to process data solely on the Controller’s instructions.

Data may be transferred outside the UAE, with safeguards in place to comply with UAE law. Anonymized data may be used for statistical purposes without identifying individuals.

If the Company is sold, data may be transferred to the buyer to ensure service continuity. Disclosure may also occur if legally required, with notification to the Data Subject unless prohibited.

6. Duration of Data Processing

• Data linked to Website accounts (patients or providers) is retained for 5 years after account termination.
• Contact details for marketing purposes are kept until the Data Subject unsubscribes.
• Data related to service issues is stored only as long as needed to resolve them, up to 5 years.

7. Rights of the Data Subject

The Controller ensures Data Subjects’ rights are protected under UAE Law. Requests to exercise these rights will be addressed within 30 days of receipt. Rights include:

• Right to Information and Access: Request confirmation of whether your data is processed and access details about its use.
• Right to Rectification: Request correction or completion of inaccurate or incomplete data.
• Right to Restriction: Request limited processing if accuracy is disputed, processing is unlawful, or data is needed for legal claims.
• Right to Withdraw Consent/Object: Withdraw consent or object to processing based on legitimate interests.
• Right to Erasure: Request deletion if data is no longer needed, consent is withdrawn, or processing is unlawful.
• Remedies: Lodge complaints with the Controller or the UAE Data Protection Authority if processing is believed to be unlawful.

Contact the Controller at info@odoctor.ae to exercise these rights.

8. Cookies and Internet Security

Cookies are used to improve Website performance. Transmission of data online is not fully secure; while the Controller employs safeguards, data sent to the Website is at the user’s risk. The Website may link to external sites not governed by this policy—review their policies separately.

9. Feedback and Updates

Suggestions on this policy are welcome at info@odoctor.ae. This policy was last updated on 20.03.2025