Issued in accordance with UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL), UAE Federal Law No. 2 of 2019 concerning the Use of Information and Communication Technology (ICT) in Health Fields, Department of Health – Abu Dhabi Regulations, and ADHICS Standards.
1. PURPOSE OF THIS NOTICE
Apollo Medical Centre – Sole Proprietorship LLC ("Apollo Medical Centre", "we", "our", or "us") respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, process, store, disclose, and protect your personal information when you receive healthcare services from our facility.
This notice applies to all current and former patients, visitors, and where applicable, their legal representatives.
By providing your personal information to Apollo Medical Centre, you acknowledge that your information will be processed in accordance with applicable UAE laws and this Privacy Notice.
Unless otherwise stated, the personal information requested from you is necessary for providing healthcare services, complying with legal obligations, and ensuring patient safety.
2. TYPES OF PERSONAL INFORMATION WE COLLECT
Personal Information
Information that identifies you as an individual, including but not limited to:
Sensitive Personal Information
This includes information relating to:
3. HOW WE COLLECT YOUR INFORMATION
We collect personal information:
During your treatment we also create additional medical information including:
Our premises are monitored using CCTV in public areas for safety and security purposes in accordance with applicable laws.
4. PURPOSE OF PROCESSING YOUR PERSONAL INFORMATION
Apollo Medical Centre processes your personal information for the following purposes:
A. Provision of Healthcare Services
To:
Examples of information processed include:
B. Compliance with Legal and Regulatory Requirements
To comply with:
C. Patient Safety and Quality Improvement
We process information to:
D. Legitimate Business Interests
Where permitted by law we may process information for:
E. Marketing and Patient Communication
With your consent where required by law, we may contact you regarding:
You may withdraw your consent for marketing communications at any time.
5. CHANGE OF PURPOSE
We will only use your personal information for the purposes described in this Notice or for purposes compatible with those originally communicated.
If we intend to process your information for another purpose, we will notify you where required by law.
6. DISCLOSURE OF YOUR INFORMATION
Apollo Medical Centre may share your personal information only where necessary and permitted by law with:
All third parties are required to implement appropriate information security and confidentiality controls.
7. INTERNATIONAL DATA TRANSFERS
Where necessary and legally permitted, limited personal information may be transferred outside the UAE to approved service providers or technology partners.
Such transfers will only occur where adequate safeguards exist and in accordance with applicable UAE laws.
8. CONSENT
Apollo Medical Centre generally processes personal information where necessary for:
Specific consent will be obtained where required under applicable laws.
9. AUTOMATED DECISION MAKING
Apollo Medical Centre does not make decisions based solely on automated processing that produce legal or similarly significant effects on patients.
10. INFORMATION SECURITY
Apollo Medical Centre has implemented administrative, technical, and physical safeguards to protect personal information, including:
Where legally required, Apollo Medical Centre will notify affected individuals and relevant authorities of eligible personal data breaches.
11. DATA RETENTION
We retain your personal information only for the period required by:
When information is no longer required, it is securely destroyed or anonymized.
12. YOUR RIGHTS
Subject to applicable UAE laws, you may have the right to:
Requests may be submitted to Apollo Medical Centre's Medical Records Department or Data Protection Officer.
Proof of identity may be required before processing your request.
13. CHANGES TO THIS NOTICE
Apollo Medical Centre may update this Privacy Notice from time to time to reflect changes in legislation, regulatory requirements, or our practices.
The latest version will always be available at our reception and on our website.
14. CONTACT US
For questions regarding this Privacy Notice or the processing of your personal information, please contact:
Apollo Medical Centre – Sole Proprietorship LLC
Hamdan Street, Abu Dhabi, UAE
Email: marketing@apollogulf.com
Telephone: +971 522 511 575
15. REGULATORY AUTHORITIES
If you believe your personal information has been processed in violation of applicable laws, you may contact:
16. DATA PROTECTION OFFICER / PRIVACY CONTACT
Apollo Medical Centre has designated a Privacy Officer responsible for overseeing compliance with applicable privacy and data protection laws, including the UAE Personal Data Protection Law (PDPL), the ICT Health Law, Department of Health – Abu Dhabi regulations, and ADHICS requirements.
For any privacy-related enquiries, requests, or complaints, please contact:
Privacy Officer
Apollo Medical Centre – Sole Proprietorship LLC
Hamdan Street, Abu Dhabi, UAE
Email: marketing@apollogulf.com
Telephone: +971 522 511 575
17. LEGAL BASIS FOR PROCESSING PERSONAL DATA
Apollo Medical Centre processes personal information only where permitted under applicable UAE laws, including one or more of the following legal bases:
Where consent is relied upon, patients have the right to withdraw their consent at any time unless processing is otherwise required by applicable laws or regulations.
18. CHILDREN'S PERSONAL INFORMATION
Where healthcare services are provided to patients under the legal age of consent, Apollo Medical Centre will process personal information with the consent of a parent, legal guardian, or other authorized representative where required by law.
Reasonable measures are implemented to ensure that children's personal information receives an appropriate level of protection.
19. CROSS-BORDER DATA TRANSFERS
Apollo Medical Centre may transfer personal information outside the United Arab Emirates only where:
Where international transfers occur, Apollo Medical Centre will ensure appropriate contractual, technical, and organizational safeguards are implemented to protect personal information.
20. PERSONAL DATA BREACH MANAGEMENT
Apollo Medical Centre maintains documented procedures for identifying, reporting, investigating, managing, and responding to actual or suspected personal data breaches.
Where a breach is likely to result in harm to an individual or where notification is required by applicable laws or Department of Health regulations, Apollo Medical Centre will notify the relevant regulatory authorities and affected individuals within the legally prescribed timeframes.
The breach management process includes:
21. EXERCISING YOUR PRIVACY RIGHTS
Patients may submit requests relating to their personal information, including requests to:
Requests should be submitted in writing to the Medical Records Department or Privacy Officer.
Apollo Medical Centre may require proof of identity before processing any request to protect patient confidentiality.
22. COMPLAINTS
If you believe Apollo Medical Centre has not handled your personal information in accordance with applicable laws, you may submit a complaint to our Privacy Officer.
Apollo Medical Centre will:
If you remain dissatisfied, you may contact the appropriate regulatory authority, including:
23. INFORMATION SECURITY GOVERNANCE
Apollo Medical Centre implements an Information Security Management Framework aligned with ADHICS requirements and international best practices.
Security measures include, but are not limited to:
Only authorized personnel are granted access to patient information based on business need and job responsibilities.
24. COOKIES AND WEBSITE PRIVACY
Where patients use the Apollo Medical Centre website or online appointment services, certain technical information may be collected automatically, including:
Cookies are used to:
Users may manage cookie preferences through their browser settings. Disabling cookies may affect certain website functionality.
25. DOCUMENT CONTROL
Document Title: Personal Information Protection Notice
Document Number: AMC-POL-PRV-001
Version: 1.0
Effective Date: 23 July 2026
Review Date: 22 July 2028
Document Owner: Apollo Medical Centre – Sole Proprietorship LLC
Approved By: Medical Director
Classification: Public