Legal

Privacy Policy

Last updated: May 3, 2026

Royal Treat Clinic (“Royal Treat,” “we,” “our,” or “us”) is an integrative medical center based in Deira, Dubai, United Arab Emirates. We respect your privacy and are committed to handling your personal information in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable health-data regulations including DOH and DHA standards.

This Privacy Policy explains what information we collect through this website (royaltreatclinic.com / royalclinicuae.com), our advertising on platforms like Meta (Facebook and Instagram) and Google, and our WhatsApp and phone channels, and how we use, share, retain, and protect that information.

1. Information We Collect

1.1 Information you provide directly

  • Contact and booking forms — full name, phone number, email address, service of interest, preferred appointment time, and any message or symptom details you choose to share.
  • WhatsApp and phone enquiries — your phone number, the content of your messages, and any clinical information you voluntarily disclose to our team.
  • Lead forms on Meta (Facebook/Instagram) and Google — when you submit an instant form within an ad, the platform shares your name, phone number, email, and any answers you provided with us.
  • Clinical information — once you become a patient, we collect medical history, examination findings, treatment plans, and consent forms in line with DHA record-keeping requirements. Clinical records are governed by our in-clinic patient consent and confidentiality terms, not by this website policy alone.

1.2 Information collected automatically

  • Device and usage data — IP address, browser type, device type, operating system, referring page, pages viewed, and time spent on each page.
  • Microsoft Clarity — we use Microsoft Clarity to capture session recordings and heatmaps so we can understand how visitors interact with our site and improve usability. Clarity may capture mouse movement, clicks, scrolls, and the content of pages you view, but we have configured it to mask form input by default. See Microsoft Clarity.
  • Google Analytics 4 and Google Ads — we measure traffic, page performance, and conversion events (form submissions, phone-call clicks, WhatsApp clicks) to understand which campaigns work. This uses cookies and similar identifiers.
  • Meta Pixel and Conversions API — we send conversion events (page views, leads, contact actions) to Meta to measure ad performance and improve audience targeting. Where possible we hash personal identifiers before transmission.

2. How We Use Your Information

  • To respond to your enquiry, schedule and confirm appointments.
  • To send appointment-related WhatsApp notifications. When you submit our contact form, the submission is forwarded to our clinic team via WhatsApp so we can reach you quickly. You can opt out of further WhatsApp messages at any time by replying “STOP.”
  • To deliver care, follow up on treatment, and maintain your medical record.
  • To measure, secure, troubleshoot, and improve our website and advertising. This includes analytics, session replay (Clarity), conversion tracking (Google, Meta), and A/B testing.
  • To comply with legal, regulatory, accounting, and DOH/DHA obligations applicable to healthcare providers in the UAE.

3. Lawful Basis

We rely on the following lawful bases under UAE PDPL:

  • Consent — when you submit a form, send us a message on WhatsApp, or accept cookies for analytics and advertising.
  • Contract — to deliver the services you request and manage your appointment.
  • Legal obligation — to retain medical records and comply with regulatory inspections.
  • Legitimate interest — to secure our site, prevent fraud, and improve our services, where this does not override your rights.

4. Sharing Your Information

We do not sell your personal information. We share it only with:

  • Service providers who process data on our behalf — hosting (Vercel / equivalent), WhatsApp Business API providers, email and SMS delivery, Microsoft Clarity, Google (Analytics, Ads, Tag Manager), and Meta (Pixel, Conversions API, Lead Ads).
  • Healthcare partners — laboratories, imaging centers, or specialists when a referral is medically necessary, with your consent where required.
  • Regulators and authorities — DOH, DHA, MOHAP, or other UAE authorities when required by law or to respond to a lawful request.

Some of these providers are based outside the UAE. Where data is transferred abroad we rely on the provider’s contractual safeguards and data-transfer mechanisms.

5. Cookies and Tracking

We use first-party and third-party cookies for essential site function, analytics, and advertising measurement. You can control cookies through your browser settings. Blocking analytics or advertising cookies will not break the site, but it will limit our ability to measure campaign performance.

6. Data Retention

  • Enquiry and lead data — retained for up to 24 months unless you become a patient or ask us to delete it sooner.
  • Patient medical records — retained in line with DHA / DOH requirements (typically a minimum of 25 years for adult records).
  • Analytics and advertising data — retained per the provider’s defaults (Google Analytics: 14 months; Meta: per platform retention).

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion, subject to our legal record-keeping obligations.
  • Object to or restrict certain processing, including direct marketing.
  • Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

8. Security

We use TLS encryption in transit, access controls, and reputable cloud infrastructure to protect your data. No system is perfectly secure; if you believe your data has been compromised, please contact us immediately.

9. Children

Our website and advertising are not directed at children under 18. Minors are treated at the clinic only with parent/guardian consent in person.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or in the law. The “Last updated” date at the top of this page reflects the latest revision.

11. Contact Us

Royal Treat Clinic
Deira, Dubai, United Arab Emirates
Phone: +971 50 972 3913
WhatsApp: +971 50 972 3913
Email: info@royaltreatclinic.com

See also: Contact us.

WhatsApp