Privacy Policy

International Aesthetic Medical Center (“IAMC”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or receive services at our clinic in Al Ain, Abu Dhabi, UAE. We process personal data in compliance with the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and any applicable healthcare and data regulations in the Emirate of Abu Dhabi.

1. Data controller

The data controller responsible for your personal data is International Aesthetic Medical Center (IAMC), operating at Al Ain - Al Jimi Area Opp. Al Jimi Police Station, Al Ain - UAE. For privacy-related enquiries you may contact us at info@iamc.ae or via our Contact page.

2. Information we collect

We may collect the following categories of data:

• Identity and contact data: name, date of birth, gender, nationality, phone number, email address, and address.
• Health and treatment data: medical history, allergies, current medications, consultation notes, treatment records, before-and-after images (with your consent), and other information necessary for safe and appropriate care.
• Booking and communication data: appointment requests and confirmations, messages sent via WhatsApp, email, or through our website contact forms.
• Technical data: IP address, browser type, device information, and pages visited when you use our website, where permitted by our cookie policy.
• Payment and billing data: payment method and transaction references as required for billing; we do not store full card details on our systems.

3. Legal basis and purpose

We process your data for the following purposes on the basis of your consent, performance of a contract (e.g. providing treatment), compliance with legal obligations, or our legitimate interests (e.g. improving services, security):

• To manage appointments, consultations, and treatments.
• To maintain accurate medical and administrative records as required by healthcare regulations in Abu Dhabi and the UAE.
• To communicate with you about your appointments, aftercare, and clinic updates.
• To respond to enquiries and complaints.
• To comply with legal and regulatory requirements, including reporting to health authorities where required.
• To improve our website and services and to ensure security and fraud prevention.

4. Sharing and disclosure

We may share your data only where necessary with:

• Healthcare and regulatory bodies: when required by Abu Dhabi or UAE health authorities, or by law.
• Service providers: such as IT or payment processors, under strict confidentiality and data processing agreements.
• WhatsApp / Meta: when you contact us via WhatsApp, your messages and phone number are processed according to WhatsApp’s privacy policy. We use WhatsApp for communication only and do not control their data practices.

We do not sell your personal data to third parties.

5. Data retention

We retain your data only for as long as necessary for the purposes set out above. Medical and treatment records are kept in line with healthcare retention requirements in the UAE and Abu Dhabi (typically for a minimum period as required by law). After that period, data may be anonymised or securely deleted.

6. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. This includes secure storage of medical records, restricted access, and secure communication channels. No method of transmission over the internet is completely secure; we encourage you to use secure means when sending sensitive information.

7. Your rights

Under UAE law, including Federal Decree-Law No. 45 of 2021, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where the law allows.
• Object to or restrict certain processing where applicable.
• Withdraw consent where processing is based on consent (without affecting the lawfulness of processing before withdrawal).

To exercise these rights, please contact us at info@iamc.ae. You may also have the right to lodge a complaint with the UAE Data Office or the relevant supervisory authority in the UAE.

8. Cookies and website tracking

Our website may use cookies or similar technologies to improve functionality and analyse usage. You can control cookies through your browser settings. For more detail, please see our cookie notice if published separately, or contact us.

9. International transfers

Your data is processed and stored within the UAE. If we ever transfer data outside the UAE, we will ensure appropriate safeguards are in place as required by UAE law.

10. Minors

Our services are directed to adults. If you are under 18, we may process your data only with the consent of a parent or guardian and where necessary for your care.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version will be published on this page with the date of last update. We encourage you to review it periodically.

12. Contact

For any questions about this Privacy Policy or our data practices, please contact IAMC at info@iamc.ae, +971 37801700, or via our Contact page. Address: Al Ain - Al Jimi Area Opp. Al Jimi Police Station, Al Ain - UAE.