Privacy Policy — Burjeel Breast Cancer Center
Effective Date: 20 July 2026
Website: https://burjeelbreastcenter.com
1. About this Privacy Policy
Burjeel Breast Cancer Center, part of Burjeel Medical City ("we," "our," or "us"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you receive care or interact with us through our website, mobile applications, and facilities (the "Services").
Please read this Privacy Policy carefully so that you can make an informed decision about whether to use or continue using our Services.
By using our Services, you consent and agree that we may access, receive, collect, share, use, and disclose (including transfer) your Personal Data in accordance with this Privacy Policy. If you do not agree with any of the terms included in this Privacy Policy, please refrain from using our Services and do not provide us with any Personal Data.
If you provide us with Personal Data belonging to or relating to a third party (for example, information about your child or a dependent), by submitting that information you represent to us that you have obtained the relevant consent, or have the right to consent on their behalf, and you agree that such disclosure will be governed by this Privacy Policy.
This Privacy Policy may from time to time be supplemented by, or subject to, terms set out in separate informed consents provided by you prior to treatment, admission to our facility, or participation in any research trial or study. This Privacy Policy must be read in conjunction with any such informed consents.
We may amend this Privacy Policy from time to time and will make the updated version available on this page. We will not use your Personal Data in a way that is materially different from the uses described here without giving you an opportunity to opt out of such differing uses. Each time you use the Services, you acknowledge that the latest version of this Privacy Policy applies.
2. Scope of this Privacy Policy
This Privacy Policy applies to all patients, visitors, and users of our Services.
It applies to personally identifiable information ("PII") provided to us for the purpose of obtaining medical care through our Services. Information specifically related to your health and healthcare is also referred to as "Protected Health Information" or "PHI." This may include information (i) received directly from you, (ii) collected automatically, (iii) obtained through our mobile application, and (iv) provided by third parties.
"Personal Data" includes all PII and PHI but excludes:
anonymised or fully de-identified information;
aggregated information combined into fully anonymous groups or categories; and
information about deceased persons.
3. Applicable Laws
Our collection, storage, use, processing, retention, and transfer of your personal data is subject to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"), Federal Law No. (2) of 2019 Concerning the Use of Information and Communication Technology in Health Fields, and any other laws, regulations, and standards applicable to healthcare facilities in the Emirate of Abu Dhabi, including those of the Department of Health – Abu Dhabi and the Abu Dhabi Healthcare Information and Cyber Security Standard v2 (ADHICS v2) (together, the "Applicable Laws").
Under Applicable Laws, we are required to provide you with information about who we are, how we process your Personal Data and for what purposes, and your rights in relation to your Personal Data. If there is ever a conflict between this Privacy Policy and the Applicable Laws, the Applicable Laws will apply.
4. Types of Personal Data We Collect
We may collect and process the following types of information about you:
Identification Data — name, date of birth, Emirates ID, passport number, etc.
Contact Details — address, phone number, email address, etc.
Geolocation Data — IP address, browser or mobile device location upon access, approximate location data.
Health Data — height, weight, medical history, medical condition, diagnosis, treatments, test results, prescriptions, reports, lifestyle information, etc.
Financial and Administrative Data — insurance information, payment information, appointment records, etc.
Technical and Log Data — cookies, browser type, device configuration, CCTV footage (for safety and security), metadata, and search history relating to our Services.
Images and Sound — video recordings, voice recordings, photographs, scans, etc.
When you use our website or app, we may monitor your usage. We may also use, collect, and share non-personally identifiable information not associated with an identifiable individual.
5. Methods of Collection
We may collect data through:
direct interactions (e.g., patient registration, consultations, appointment booking);
third-party referrals (e.g., from other healthcare providers, insurers, or payment guarantors);
other third parties (e.g., family members, government agencies, employers, or legal representatives acting on your behalf);
diagnostic devices and medical records systems; and
public authorities, where legally required.
We may also collect information automatically when you use our website or app, such as IP address, device and browser type, operating system, pages visited, and standard server log information.
We may utilize cookies, pixel tags, and similar technologies to gather this information automatically. By using the Services, you consent to our use of cookies and similar technologies as described in our Cookie Policy.
We may use analytics software (such as Google Analytics) to help us understand our users and improve your experience on our website and app. You can opt out of advertising tracking cookies through your browser settings.
6. Legal Basis for Using Your Personal Data
We process your personal data for multiple purposes, each requiring a legitimate basis. Where we process special category data such as PHI, an additional legal basis applies.
We process personal data based on legitimate interests, in compliance with Applicable Laws. You have the right to object to this processing (see Section 12).
When processing PHI, we rely on (a) your express consent, and (b) the necessity of processing for public interest reasons, to ensure high standards of healthcare quality and safety.
In all other cases, we process your Personal Data pursuant to the legal bases available under the UAE PDPL and other Applicable Laws.
7. How We Use Your Personal Data
We are the "data controller" for the purposes of Applicable Laws, meaning we determine the purposes for which, and the manner in which, your Personal Data is processed.
We may use your Personal Data to:
provide safe and effective healthcare services;
maintain accurate medical records;
process billing and insurance claims;
comply with our legal and regulatory obligations;
support medical research or public health initiatives, with appropriate safeguards;
provide and improve our Services and website content;
send you information about additional clinical services or general wellness from us or our affiliates;
prevent potentially prohibited or illegal activities, in accordance with our Terms & Conditions; and
manage appointment scheduling, including reminders and status updates.
We may combine newly collected information with information we already hold about you. No information provided by patients during medical consultations or appointment requests is ever used for marketing purposes.
8. Amendments to Personal Data Collected
If there are errors in your PII (e.g., name, mobile number, date of birth), we will make corrections to ensure the information is accurate, upon your authorization. It is important that the Personal Data we hold about you is accurate and current — please keep us informed if your details change.
9. Sharing of Personal Data
We may share your information with other entities within Burjeel Holdings, including Burjeel Medical City and its affiliated facilities, where necessary to ensure high-quality, coordinated patient care.
We may also share your Personal Data with third parties such as other healthcare providers, laboratories, vendors or service providers, government authorities, judicial or law enforcement authorities, regulatory bodies, embassies, insurance companies, employers, and our affiliates. Third-party vendors and service providers may not use your information for purposes other than those related to the services they provide to us.
With your consent or at your direction, we may share information for any other purpose disclosed to you at the time of collection.
Before transferring your Personal Data to any third party, we will enter into an appropriate agreement covering the roles of each party, the purposes of the transfer, and the Applicable Laws the recipient must adhere to.
10. International Data Transfers
When transferring Personal Data outside the UAE, we will implement appropriate safeguards, such as contractual protections with the recipient, or your explicit consent following disclosure of the relevant risks.
We may transfer Personal Data without such additional safeguards where the transfer is:
required to fulfil or enter into a contract with you;
requested by UAE law enforcement authorities, or required for legal or judicial proceedings;
required for public interest purposes; or
required to protect your vital interests, or those of another person, where consent cannot reasonably be obtained.
11. Retention of Personal Data
We will not keep your data in an identifiable format longer than necessary or mandated by law. For example:
UAE Federal Law No. 2 of 2019 requires that PHI be stored for at least 25 years;
certain information may be retained until you request its removal or the purpose for which it was collected is complete; and
certain non-health information may be retained for legal or business purposes, such as financial record-keeping and insurance claims management.
Even after deletion, your Personal Data may persist on backup or archival media for a period, for legal, tax, or regulatory reasons.
12. Security
We use measures designed to protect your Personal Data from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction, in accordance with Applicable Laws. No data storage system or transmission over the internet can be guaranteed to be 100% secure.
13. Your Rights
Subject to any exemptions, restrictions, and exceptions under Applicable Laws, you have the right to:
access your own Personal Data;
be informed of how long we expect to keep your Personal Data, and the sources from which it was collected;
request that we transfer your Personal Data to you or another controller in a structured, machine-readable format;
request details of the purposes and categories of Personal Data we process;
request rectification of inaccurate Personal Data;
request erasure of your Personal Data in certain circumstances (for example, where it is no longer needed, or you withdraw consent);
request restriction of processing in certain circumstances;
object to processing based on our legitimate interests;
object to processing for direct marketing purposes;
withdraw or amend any consent you have provided, without affecting the lawfulness of processing carried out before the withdrawal; and
be informed of the safeguards applied to any international transfer of your Personal Data.
Requests to exercise these rights are assessed on a case-by-case basis, and we will take reasonable steps to fulfil valid requests promptly.
You can exercise your rights to access your own PHI, or all other rights, by contacting us using the details in Section 17 below. We may need to verify your identity before processing your request, and we reserve the right to deny or limit a request where legally required, or where another individual's rights are at risk.
14. Children's Information
We do not knowingly collect personal information online from individuals under the age of 18 without the consent of a parent or legal guardian. Adults engaging with us on behalf of a child must have the authority to do so, either as a parent or legal guardian.
15. Cookies and Your Choices
You may refuse or disable cookies by adjusting your browser settings. Please note that if you disable cookies, some functionality of the Services may no longer be available. For more information, see our Cookie Policy or visit allaboutcookies.org.
You may also opt out of interest-based advertising through your browser or device settings, or through the Digital Advertising Alliance / Network Advertising Initiative opt-out programs. Opting out means you will still receive advertisements, but they may be less relevant to you.
16. Third-Party Links and Do Not Track
Our Services may contain links to content maintained by third parties that we do not control. We are not responsible for the privacy practices of these third parties.
Some browsers transmit "do-not-track" signals to websites. We currently do not act on these signals.
17. Questions and Requests
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
Burjeel Breast Cancer Center
Phone: +971-800226237
Email: info@burjeelmedicalcity.com
Address: Burjeel Medical City, Mohammed Bin Zayed City, Abu Dhabi, UAE
Website: https://burjeelbreastcenter.com
18. Policy Update
We may update this Privacy Policy from time to time. You are advised to review this page periodically for any changes. Updates are effective immediately once posted to this page.