SAM Health Polyclinic ("we", "the clinic") is a Dubai Health Authority licensed outpatient facility at Al Bada Oasis 5, Street 333, Al Bada', Dubai, United Arab Emirates. This notice explains what personal data we collect through this website and our clinic operations, why we hold it, and the rights you have over it.
We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, the Dubai Health Authority's health data rules, and UAE Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields.
Who is responsible for your data
SAM Health Polyclinic is the data controller for the information described here. For any privacy question or request, contact us at info@sampolyclinic.com or call [+971 4 570 3708](+971 4 570 3708).
What we collect
We only collect what we need to provide care and run the clinic:
- Identity and contact details — name, phone number, email address, and preferred language.
- Appointment information — the doctor, service, date and time you request, and the status of your booking.
- Health information you choose to share — the reason for your visit, symptoms you describe, and any details you enter when pre-registering.
- Clinical records — created by your treating clinician during care, and held in the clinic's medical record system.
- Website and technical data — pages visited, approximate location derived from your IP address, browser type, and language preference.
- Correspondence — messages you send through our contact form, WhatsApp, or email.
Why we use it
- To schedule, confirm, reschedule, and remind you about appointments.
- To deliver and document your medical care.
- To answer your enquiries and provide patient support.
- To meet legal, licensing, and insurance obligations, including reporting duties owed to the Dubai Health Authority.
- To keep the website secure and to understand which pages patients find useful.
- To send service updates or clinic news where you have asked to receive them.
We do not sell your personal data, and we do not use your health information for advertising.
Cookies and analytics
The website uses a small number of cookies that are necessary for it to work, such as remembering your language choice and keeping your session active while you book. Where we use analytics to measure page performance, the data is aggregated and is not used to identify individual patients. You can clear or block cookies in your browser settings, though some booking features may stop working if you do.
When we share information
We share personal data only where it is necessary and permitted:
- With the clinician and clinical staff involved in your care.
- With laboratories, imaging providers, and referral facilities when your care requires it.
- With your insurer or its administrator when you ask us to bill a policy.
- With regulators such as the Dubai Health Authority, where reporting is required by law.
- With technology providers who host or maintain our systems under written confidentiality and data protection terms.
Health data is stored on infrastructure that meets UAE health data residency requirements. Where any processing involves a transfer outside the UAE, we do so only under the safeguards permitted by the applicable data protection law.
How long we keep it
Medical records are retained for the period required by Dubai Health Authority regulations, which is a minimum of ten years from the date of your last visit. Appointment and contact records that are not part of a medical record are kept only as long as they serve the purpose described above, and are then deleted or anonymised.
How we protect it
Access to patient information is restricted to authorised staff on a need-to-know basis and is logged. Data is encrypted in transit, credentials for third-party services are stored encrypted, and staff accounts carry role-based permissions. We review these controls regularly.
Your rights
Subject to the conditions in the UAE data protection law, you may:
- Ask what personal data we hold about you and request a copy.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete data, where we are not required to keep it.
- Withdraw consent to optional communications at any time.
- Object to or ask us to restrict certain processing.
- Ask us to transfer your data to another provider in a structured format.
Send requests to info@sampolyclinic.com. We will verify your identity before releasing any information and will respond within the period set by law. If you are not satisfied with our response, you may raise the matter with the UAE Data Office or the Dubai Health Authority.
Children
Appointments for patients under 18 are booked and consented to by a parent or legal guardian, who may exercise the rights above on the child's behalf.
Changes to this notice
If we change how we handle personal data, we will publish the revised notice on this page and update the date shown at the top. Material changes will be communicated directly where we hold your contact details.
Contact us
SAM Health Polyclinic, Al Bada Oasis 5, Street 333, Al Bada', Dubai, UAE. Email info@sampolyclinic.com, telephone [+971 4 570 3708](+971 4 570 3708), WhatsApp [+971 50 326 5353](+971 50 326 5353).