KMC Medical Center
Privacy Policy
Last updated: 6 October 2026
This Privacy Policy explains how [full registered legal name], operating as KMC Medical Center ("we", "us" or "our"), handles personal information when you visit https://kmcmedicals.ae/, contact us or request an appointment through the website.
It also explains how appointment information relates to patient confidentiality. Clinical records are subject to the healthcare rules that apply to the centre, and information about their use will be provided when you register for care.
1 Who is responsible for your information
The website operator and organisation responsible for the information covered by this policy is [full registered legal name], located at [registered clinic address], Al Ain, Abu Dhabi, United Arab Emirates.
For privacy questions or requests, contact [monitored privacy contact email]. General clinic contact details appear at the end of this policy.
2 Information we collect
Depending on the form or service you use, information you provide may include your name, email address, telephone number, preferred department or clinician, requested appointment date and time, and the contents of your enquiry.
If you arrange an appointment for another person, we may also need that person's booking details and information confirming your authority to act for them. Provide only information needed for the request.
Our website and its providers may receive technical information such as your IP address, browser and device details, pages visited, and the date and time of access. The cookies and similar technologies actually used are described in section 7.
Health information you include in an appointment request can be sensitive. Please avoid sending medical reports, identity documents or detailed medical histories through a general enquiry form or ordinary email unless we have specifically requested them through an appropriate channel.
[Confirm the fields collected by each booking and contact form, any document uploads, payment information and any patient account features. Remove categories that are not collected and add any missing categories.]
3 How we use information
We use relevant information to respond to enquiries, assess and arrange appointment requests, send booking confirmations and service messages, and communicate about the care you have requested. We also use necessary information to operate and protect the website, investigate misuse, maintain required records and meet applicable legal obligations.
If you separately choose to receive marketing, we use your contact details for the communications you have selected. You can withdraw that choice using the unsubscribe option provided or by contacting us. A booking request is not permission for unrelated marketing, and declining marketing does not affect access to care.
4 Applicable rules and consent
We handle personal information under applicable UAE data protection requirements, including Federal Decree-Law No. 45 of 2021 where it applies. Health information is also subject to applicable healthcare rules, including Federal Law No. 2 of 2019 and relevant Department of Health Abu Dhabi requirements.
The grounds for handling information depend on its purpose and the applicable rules. These may include your consent, steps needed to provide a service you request, and legal or healthcare obligations. Where consent is required, we obtain it separately and explain how you can withdraw it. Reading this policy or browsing the website does not itself provide consent for every use of your information.
Privacy choices and website terms do not replace the consent or authorisation required for medical treatment or disclosure of confidential patient information.
5 When information is shared
Where necessary and permitted, relevant information may be shared with authorised clinic staff and healthcare professionals involved in the services you request; providers supporting hosting, appointment scheduling, communications or other approved systems; and healthcare authorities or other public bodies when legally required.
Information may be shared with insurers or other healthcare providers when needed for your care or coverage and when the applicable authorisation or legal requirement is satisfied. We may also disclose information when required by a lawful request or to protect rights or safety as permitted by law.
Service providers must handle information only for authorised purposes and under appropriate confidentiality and security arrangements. Other disclosures require a permitted legal basis and any consent or authorisation required by the applicable rules.
[Identify the actual booking, hosting, email, messaging, payment and analytics providers, where relevant, and any other recipients whose access visitors need to understand.]
6 Where information is processed
[Insert the verified locations where website enquiries and appointment information are stored or processed, including relevant providers and any permitted international transfer arrangements.]
Health information relating to healthcare provided in the UAE is subject to specific restrictions on storage, processing and transfer outside the UAE. An international transfer may take place only where the applicable healthcare rules permit it and the required conditions and approvals are satisfied. Agreeing to this policy does not authorise a transfer that those rules prohibit.
Any international processing of other personal information must also meet the data protection requirements applicable to that information.
7 Cookies and third party tools
Cookies are small files stored on your device. Similar technologies can also collect information when a page or embedded service loads. Their purpose can include essential website functions, preferences, analytics or advertising, depending on the tools enabled.
[List the cookies and similar tools actually used, including provider, purpose, information collected, duration and whether consent is required. Include embedded maps, tag managers, analytics and advertising tools where applicable.]
You can manage cookies through your browser and [link to the website's cookie controls, if implemented]. Where consent is required for optional tools, you will be given a choice before those tools operate and a way to change or withdraw that choice. Blocking essential cookies may affect some website functions.
8 How long information is kept
We keep information for the period needed for the purpose for which it was collected and to meet applicable recordkeeping, healthcare and legal requirements. Different periods can apply to enquiries, booking requests, clinical records and records needed for a dispute.
[Insert the approved retention periods or clear retention criteria for website enquiries and appointment information. Identify the separate requirements applying to clinical records.]
Information is deleted or appropriately anonymised when it is no longer needed and retention is no longer required. A request to delete website information does not override a legal duty to retain a clinical or other required record.
9 Information security
We use technical and organisational safeguards appropriate to the information handled, including measures to restrict access to authorised people. No online service can guarantee absolute security.
If you suspect that your information has been accessed or used improperly, contact the privacy contact in this policy. Security incidents are handled under the applicable reporting and notification requirements.
10 Your choices and requests
Depending on the information and the rules that apply, you may request information about how your data is used, access or a copy, correction, deletion, restriction of processing, or transfer of your information. You may also withdraw consent for uses that rely on it and object to marketing.
These requests are subject to applicable conditions, including patient confidentiality, the rights of others and required record retention. Withdrawing consent does not invalidate processing that was lawful before withdrawal.
Send requests to [monitored privacy contact email]. We may need to verify your identity and, where relevant, your authority to act for a patient. We respond within the period required by applicable law. You may also raise a concern with the relevant healthcare or data protection authority.
11 Children and representatives
The centre may provide care to children. Appointment requests for a child or someone who cannot act for themselves should be made by a parent, legal guardian or another properly authorised person, subject to applicable law. We collect only the information needed for the request and verify authority where required.
12 Other websites and communications
Links and embedded services may connect you to third-party websites or platforms with their own privacy notices. Review those notices before providing information. A third-party platform's own processing is explained in its notice; information we receive through it is handled under this policy and applicable confidentiality duties.
Use our general contact channels for routine enquiries. Ask the clinic how to submit sensitive documents if they are needed for your care.
13 Changes to this policy
We may update this policy when our services, data handling or legal obligations change. The latest version will appear on this page with an updated date. We provide additional notice and obtain new consent where required.
14 Contact us
KMC Medical Center
Registered operator: [full registered legal name]
Address: [registered clinic address], Al Ain, Abu Dhabi, United Arab Emirates
Privacy enquiries: [monitored privacy contact email]
General enquiries: info@kmcmedicals.com
Telephone: +971 3 764 5909
Website: kmcmedicals.ae