Trust, Privacy & Security

Aafiyah Care Clinic is a DHA-licensed primary care clinic located at Unit G09, Churchill Executive Towers, Business Bay, Dubai, United Arab Emirates. We provide in-clinic appointments, home visits, blood tests and IV therapy across Dubai.

Clinical records are managed by our DHA-licensed clinicians under the regulatory framework of the Dubai Health Authority and the UAE Federal Law on the use of Information and Communication Technology in Health Fields (Federal Law No. 2 of 2019).

From our website: contact details you submit through booking and enquiry forms (name, phone, email, area, reason for visit) and basic technical information needed to operate the site (e.g. cookies for session and analytics where enabled).

As a patient: identification, insurance details where applicable, medical history, consultation notes, test results, prescriptions and other information necessary to provide safe clinical care.

We use the information you provide to schedule and deliver care, contact you about your appointment or results, manage billing and insurance claims, and meet our regulatory and clinical record-keeping obligations.

We do not sell patient information. We do not use clinical records for advertising.

Access to clinical records is limited to clinicians and staff involved in your care, on a least-privilege basis. Staff accounts are individually identifiable and access is logged within our clinical systems.

Public website content is served over HTTPS. Booking submissions are transmitted over encrypted connections to our backend.

We share information with third parties only where it is necessary to deliver care or meet a legal obligation. This may include:

• Accredited laboratories that process your blood tests and diagnostics.
• Your health insurer, when you choose to use insurance for a service.
• Pharmacies fulfilling a prescription on your behalf.
• Regulators or authorities where disclosure is required by UAE law.

Our website uses standard hosting, analytics and messaging providers (such as our booking, email and WhatsApp tooling) to operate. We work to limit the personal information shared with these providers to what is needed for them to function.

Essential storage keeps this website functioning. Google Ads uses advertising measurement cookies (such as _gcl_au), click identifiers and basic device information to measure ad interactions and conversion events. Google Analytics uses cookies (such as _ga) to measure general website interactions. Google receives this measurement information; it is not a clinical record. A WhatsApp button click records a hand-off, not proof that a message was sent or received.

With explicit advertising measurement acceptance, a random enquiry reference can be added to your pre-filled WhatsApp message. Authorised clinic staff confirm an actual incoming enquiry using that reference and the message receipt time. We store the permitted Google click identifier, reference, consent evidence and reporting status separately from clinical records. Google receives only the click identifier, a generic confirmed-enquiry event, receipt time and an opaque deduplication identifier—not the message, contact details, service or medical information. Enquiries without eligible ad attribution are not reported as Google conversions.

Your advertising choice is also saved securely with a random visitor reference and the notice shown, preserving acceptance and later withdrawal. Cookie settings updates that record; pending reports require both acceptance when the reference was created and the latest permission. Withdrawal blocks unsent reports but cannot recall information Google already received. Staff confirmation records remain separate from button clicks. Temporary Google reporting failures remain pending and retry when authorised staff use the confirmation page; receipt by Google does not prove ad attribution.

We do not send form names, telephone numbers, email addresses, medical answers or service-specific page details to Google for matching. Personalised advertising and health-based remarketing audiences are disabled in this website's Google setup.

Visitors in the EEA, UK, Switzerland and Canada are asked before optional Google measurement loads. A country-only lookup cannot distinguish Quebec, so we ask throughout Canada. If your location cannot be established, we also ask. Elsewhere ordinary measurement may run without a banner, unless you refuse or your browser sends a recognised privacy opt-out.

Use Cookie settings at the bottom of any page to accept, reject or change analytics and advertising measurement separately. Withdrawal stops new website events; it does not erase information already received by Google. Choices, timestamps, region and the notice version are stored with a random visitor reference in your browser, preserving earlier acceptance when you later withdraw. Clearing browser storage removes that local record. No blocked events are replayed on later acceptance.

How Google uses data

Clinical records are retained for the periods required by Dubai Health Authority regulations and applicable UAE health information law. Website enquiry data is retained only as long as needed to respond to you and to maintain reasonable business records.

You can ask us to access, correct or delete personal information we hold about you, subject to our regulatory obligation to maintain clinical records. To make a request, contact us using the details below and we will respond within a reasonable time.

If you have a privacy concern or believe information may have been mishandled, please contact us so we can investigate. We take all reports seriously.

Email: welcome@aafiyahcare.clinic
Phone: +971 4 566 1486
Visit: Unit G09, Churchill Executive Towers, Business Bay, Dubai, UAE

We update this page as our practices change. Material changes will be reflected here. This is editable content maintained by Aafiyah Care Clinic.

Cookie notice updated: 20 October 2026.