Privacy Policy

01 Who We Are

Data Controller: DNA Hakim, operated by Dr. Mohammad Rashid Khan (DOH Licensed, Abu Dhabi).

Website: dnahakim.in

Contact: dnahakim01@gmail.com · +971 54 310 2734

Practice address: Abu Dhabi, United Arab Emirates

02 Information We Collect

We collect information in the following categories depending on how you interact with us:

03 How We Use Your Information

We use your information strictly for the following purposes:

• To schedule, confirm, and conduct medical consultations
• To assess your health profile and prepare personalised care plans
• To communicate clinical recommendations, follow-up instructions, and prescriptions
• To send appointment reminders and programme updates (with your consent)
• To maintain accurate medical records as required by UAE health regulations
• To improve our website experience through anonymised analytics
• To respond to enquiries submitted via forms, email, or WhatsApp

We do not use your information for automated decision-making, profiling, or targeted advertising.

04 Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent — when you submit a form, book an appointment, or message us directly
• Contract performance — to provide the consultation or programme you have engaged us for
• Legal obligation — to comply with UAE healthcare recordkeeping and DOH requirements
• Legitimate interests — to operate and improve our practice, where your rights are not overridden

05 How We Share Your Information

We do not sell, rent, or trade your personal or health data to any third party. We may share your information only in the following limited circumstances:

• Referring physicians or specialists — only with your explicit consent, when a referral is clinically necessary
• Regulatory authorities — when required by UAE law, DOH, or a court order
• Technology service providers — platforms we use to operate (e.g., website hosting, scheduling tools), bound by confidentiality agreements
• Payment processors — solely for processing consultation fees; we do not store card details

06 WhatsApp & Communication Channels

We use WhatsApp (+971 54 310 2734) as a primary communication channel for appointment queries and follow-ups. Please be aware that WhatsApp is operated by Meta Platforms Inc. and is subject to its own privacy terms.

We recommend you do not share sensitive health documents or laboratory reports via WhatsApp unless you have been specifically advised to do so for a consultation. For sensitive data, use encrypted email or share directly during your session.

07 Cookies & Website Analytics

Our website uses minimal cookies and analytics tools to understand how visitors use our site and to improve performance. We do not use advertising cookies or cross-site tracking cookies.

The types of cookies we may use:

• Essential cookies — required for the website to function correctly
• Analytics cookies — anonymised data on page visits and traffic sources (e.g., Google Analytics, if enabled)

You may disable cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the website or book an appointment.

08 Data Retention

We retain your personal and health data for as long as necessary to fulfil the purposes outlined in this policy, and in accordance with UAE healthcare regulations.

• Medical records — retained for a minimum of 10 years from the date of last consultation, as required by DOH Abu Dhabi
• Appointment and communication data — retained for 3 years after last interaction
• Website analytics data — retained in anonymised form for up to 26 months

When data is no longer required, it is securely deleted or anonymised.

09 Your Rights

As a patient or website visitor, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete information
• Right to erasure — request deletion of your data, subject to legal and clinical retention obligations
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for marketing communications at any time
• Right to data portability — receive your data in a structured, commonly used format where applicable

To exercise any of these rights, contact us at dnahakim01@gmail.com. We will respond within 7 days.

10 Security of Your Data

We take the security of your personal and health information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

These measures include:

• Password-protected access to patient records
• HTTPS encryption across the entire website
• Limiting data access strictly to authorised personnel
• Regular review of data handling practices

In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities as required by UAE law.

11 Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. If a minor is brought in as a patient, all personal and health data is collected from and with the consent of the parent or legal guardian.

If you believe we have inadvertently collected data from a minor without appropriate consent, please contact us immediately.

12 International Visitors

DNA Hakim offers online consultations to patients worldwide. If you are accessing our website or booking a consultation from outside the UAE, please be aware that your data will be processed and stored in the UAE, which may have different data protection standards than your country of residence.

By using our services, you consent to the transfer and processing of your data in the UAE for the purposes described in this policy.

13 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practice, technology, or applicable regulations. The date at the top of this page indicates the most recent revision.

We encourage you to review this policy periodically. Continued use of our website or services after any update constitutes your acceptance of the revised policy.