Luxury Wellness
Privacy Policy
Effective Date: 01/Jan/2025
- Introduction
At Luxury Wellness Home Healthcare (“we,” “our,” or “us”), we are committed to safeguarding the privacy and confidentiality of our patients’ personal and health information. This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with applicable UAE laws and regulations, including:
- Federal Law No. 2 of 2019 on the Use of Information and Communications Technology (ICT) in Health Fields
- Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data
- DHA’s Health Data Protection and Confidentiality Policy
- DHA Circular No. DHA/OUT/2022/0003298 on NABIDH consent requirements
- Definitions
- Personal Data: Information relating to an identified or identifiable individual.
- Health Data: Information related to an individual’s physical or mental health, including medical history, test results, and treatment information.
- Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
- Data Collection
We collect personal and health data through various means, including:
- Direct Interactions: When you provide information during consultations, assessments, or through our website and mobile applications.
- Electronic Systems: Through our electronic health record systems and patient portals.
- Third-Party Sources: From referrals, insurance providers, and other healthcare facilities involved in your care.
The data collected may include, but is not limited to:
- Full name, contact information, and identification details
- Medical history, diagnoses, treatment plans, and test results
- Insurance information and billing details
- Purpose of Data Processing
Your personal and health data are processed for the following purposes:
- Providing and managing healthcare services
- Processing insurance claims and billing
- Complying with legal and regulatory requirements
- Conducting quality assurance and clinical audits
- Participating in approved research activities (with appropriate consent)
We ensure that data processing is limited to what is necessary for these purposes and is conducted in accordance with applicable laws.
- Data Retention
In compliance with Federal Law No. 2 of 2019, we retain health data for a minimum of 25 years from the date of the last medical procedure. Personal data not classified as health data is retained only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
- Data Security Measures
We implement appropriate technical and organizational measures to protect personal and health data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption and secure storage solutions
- Access controls and authentication protocols
- Regular security assessments and audits
- Employee training on data protection practices
- Data Localization and Cross-Border Transfers
In accordance with UAE regulations, particularly the Health Data Law, we store and process health data within the UAE. Cross-border transfer of health data is prohibited unless:
- Explicit consent is obtained from the data subject
- The transfer is necessary for treatment purposes and approved by the relevant health authority
- The transfer complies with conditions outlined in Ministerial Resolution No. 51 of 2021
When such transfers are permitted, we ensure that adequate safeguards are in place to protect the data.
- Data Subject Rights
Under Federal Decree-Law No. 45 of 2021, you have the following rights concerning your personal data:
- Access: Request access to your personal data held by us.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data under certain circumstances.
- Objection: Object to the processing of your data for specific purposes.
- Data Portability: Request transfer of your data to another service provider.
To exercise these rights, please contact us using the information provided in the “Contact Us” section below.
- Disclosure of Data
We do not disclose your personal or health data to third parties without your consent, except in the following circumstances:
- To healthcare professionals involved in your care
- To insurance companies for claim processing
- To regulatory authorities as required by law
- For public health purposes, including disease control and prevention
- In response to legal proceedings or court orders
All disclosures are made in compliance with applicable laws and regulations.
- NABIDH Consent
In compliance with DHA Circular No. DHA/OUT/2022/0003298, we include the following consent in our general consent form:
“I agree that healthcare provider(s) involved in my care at this facility will access my health information through the Health Information Exchange System (NABIDH) in accordance with the Laws of the United Arab Emirates, Emirate of Dubai Legislation, and Dubai Health Authority Policies.”
- Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws.
Contact Information:
M.Muhammad
medical_director@luxurywellness.ae
+971 4 553 8193
- Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. We encourage you to review this policy periodically.
- Contact Us
If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:
Luxury Wellness Home Healthcare Center LLC
Office #104 – 4 Khalid Bin Al Waleed Road, Al Souq Al Kabeer, Dubai, UAE
info@luxurywellness.ae
+971 4 553 8193