This Privacy Policy explains how DELEGATA Medical Treatment Facilitation Services L.L.C (“Delegata”, “we”, “us”) collects, uses, shares, stores and protects your personal data, including health data, when you visit delegata.care or use our services.
Delegata is the controller of your personal data. We follow UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and UAE Federal Law No. 2 of 2019 on the Use of Information and Communications Technology in Health Fields.
1. Data we collect
- Identity and contact data: name, date of birth, passport or ID details when travel or hospital admission needs them, nationality, phone number, email address and address.
- Health data: medical history, reports, scans, laboratory results, prescriptions, doctors’ notes and anything else you choose to share so that we can review your case.
- Booking and payment data: appointment times, the service you chose, invoices and payment confirmations. Card details go directly to Stripe. We never see your full card number.
- Messages: what you write to us by form, email or WhatsApp, and notes from calls and consultations.
- Technical data: IP address, browser, device, pages visited and analytics data: anonymous signals without cookies, and analytics cookies only if you agree (see section 8).
- Where your visit came from: the referring website, landing page and campaign tags of your first visit. This is kept in your own browser and is sent to us only with a form you choose to send.
2. How we collect data
- From you: through website forms, the booking calendar, email, WhatsApp, phone and video consultations.
- From others, with your consent: for example a family member acting for you, a referring doctor, or a clinic sending us your results.
3. Why we use your data and on what basis
- To answer your enquiry and review your case. Basis: your consent.
- To coordinate your care with doctors and clinics, and to arrange appointments, translation, travel and accommodation. Basis: your consent and our contract with you.
- To take payments, issue invoices and handle refunds. Basis: our contract with you and our legal duties.
- To meet legal duties, such as tax, accounting and anti-money-laundering rules in the UAE. Basis: legal obligation.
- To keep the website secure and working. Basis: our legitimate interest in a safe service.
- To understand which pages help people. Basis: your consent through the cookie banner. You can refuse.
Our forms and the booking calendar ask you to tick a consent box before you send. By sending a request, you consent to us processing your details, including any health information you choose to share, and to sharing them with the doctors and clinics involved in your care. You can withdraw your consent at any time (see section 9).
4. Who we share your data with
Doctors and clinics involved in your care. We share your data only with the doctors, clinics and hospitals involved in your care, and only what they need. Where a first review does not need your identity, we limit identifying details.
Service providers. We use the following providers to run our service. Each one processes data only for the purpose listed:
- FormSubmit: delivers messages from our website forms to our email inbox.
- Cal.com: runs the booking calendar for consultations. It receives your name, contact details, chosen time and any note you add.
- Google Meet: hosts video consultations.
- Google Workspace: our email and working files, including case files you send us.
- Stripe: processes card payments. It receives your card details and the payment amount.
- WhatsApp (Meta): messaging, only if you choose to contact us that way.
- Cloudflare: hosts the website, delivers it quickly and protects it from attacks. It processes IP addresses and technical request data.
- Supabase: stores the Google reviews shown on our website. It holds no patient data and no data about you as a visitor.
- Google Maps: shows the map on our contact page. The map loads only when you click it.
- Google Analytics 4, Yandex Metrica and Microsoft Clarity: website analytics. Google Analytics runs on every page: until you accept cookies it sets none and receives only anonymous signals without cookies, such as a page view and the type of device. Yandex Metrica and Clarity load only if you accept. With your consent they see pages visited, device type, approximate location and clicks. Clarity can record how a page is used, such as scrolling and clicks, with typed text hidden.
Authorities. We disclose data to authorities only when the law requires it.
We do not sell, rent or trade your personal or health data, and we never share it for marketing.
5. International transfers
Your care may involve doctors and clinics outside the country you live in. We send your data only to those involved in your care, in the United Arab Emirates, Georgia, Turkey and Switzerland and, if you ask for care there, Germany, Israel, South Korea, China and the United States.
Our service providers may process data in other countries, including the United States and the European Union. Yandex Metrica processes data in Russia.
Some of these countries have different data protection laws from your own. We transfer data on the basis of your consent and our contract with you, we send only what is needed, and we use encrypted channels where we can.
6. Security
Data sent to and from our website and our email is encrypted in transit. Our email and file providers encrypt stored data. Only team members working on your case can see your health data. No system is completely secure, so please tell us at once if you think your data has been exposed.
7. How long we keep data
- Enquiries that do not lead to a service: deleted 24 months after our last contact.
- Client case files, including medical records: kept for 5 years after our last service to you. We keep them longer only if the law requires it. You can ask us to delete them earlier where the law allows.
- Payment and invoice records: kept for 5 years, as UAE tax law requires.
- Analytics data: kept for 14 months.
When a period ends, we delete the data or make it anonymous.
8. Cookies and similar technologies
Essential storage. Our website saves a few small items in your browser’s local storage. They are needed for the site to work and do not track you across other websites:
- delegata-lang: remembers your language choice.
- delegata-consent: remembers your cookie choice for 12 months.
- delegata-first-touch: remembers where your first visit came from. It stays in your browser and reaches us only if you send a form.
Analytics cookies. Google Analytics 4 uses Google Consent Mode. It loads on every page, but it sets cookies, including those that measure our advertising, only after you accept them in our consent banner. If you decline or make no choice, it sets no cookies and sends Google only anonymous signals without cookies. Yandex Metrica and Microsoft Clarity load only after you accept. You can change your cookie choice at any time, or clear this site’s data in your browser. If you withdraw consent, we remove the Google Analytics cookies from your browser.
Third-party content. Cal.com sets its own cookies only when the booking calendar is loaded. Google Maps sets its own cookies only when you click to load the map.
9. Your rights
You have the right to:
- access your personal data and receive a copy;
- correct data that is wrong or incomplete;
- ask us to delete your data, unless the law requires us to keep it;
- withdraw your consent at any time. This does not affect processing that took place before;
- object to processing, or ask us to restrict it;
- receive data you gave us in a commonly used format.
To use any of these rights, email info@delegata.care with the subject “Privacy request”. We may ask you to confirm your identity. We reply within 30 days, and there is no charge.
If you are not satisfied with our answer, you can complain to the UAE Data Office or to the data protection authority in your country.
10. Health data
We treat health data as the most sensitive data we hold. We collect only what we need for your case, we share it only with the doctors and clinics involved in your care, and we keep it confidential under UAE Federal Law No. 2 of 2019 on the Use of Information and Communications Technology in Health Fields.
11. Children
We arrange services for children only through a parent or legal guardian, who gives consent on the child’s behalf.
12. Changes to this policy
We may update this policy. The effective date at the top shows when it last changed. If a change is significant, we tell current clients by email.
Contact information
For legal questions, privacy requests or corrections, please contact us:
DELEGATA Medical Treatment Facilitation Services L.L.C
Metropolis Tower, Office 811, Business Bay, Dubai, United Arab Emirates
Email: info@delegata.care
Phone and WhatsApp: +971 54 376 6772
Website: https://delegata.care
Dubai DET commercial licence No. 1169263