This Privacy Policy explains how DELEGATA Medical Treatment Facilitation Services L.L.C (โDelegataโ, โweโ, โusโ, or โourโ) collects, uses, stores, and protects your Personal Data and Sensitive Personal Data (including health records) when you visit delegata.care or engage our medical facilitation services.
We comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), UAE Federal Law No. 2 of 2019 concerning Health Data Processing, and applicable international data governance frameworks.
1. Data we collect
- Identity & contact data: name, date of birth, passport/national ID details, nationality, phone number, email address, and residential address.
- Sensitive health data: medical history, diagnostic reports, MRI/CT scans, physician notes, prescription history, lab results, and second opinion requests provided voluntarily by you for case review.
- Technical & usage data: IP address, browser type, device information, operating system, pages visited, and cookies.
2. How we collect data
- Directly from you via website contact forms, WhatsApp communications, portal uploads, or direct emails.
- From authorized third parties (e.g., referring clinics, family representatives) with your explicit consent.
3. Purpose & legal basis for processing
We process your data strictly under the legal bases of explicit consent and contractual necessity for the following purposes:
- Evaluating medical inquiries and coordinating cases with international hospitals and specialists.
- Translating and transferring medical records securely to reviewing physicians.
- Managing bookings, travel, accommodation, and concierge logistics related to treatment.
- Processing payments, invoicing, and refunds.
- Complying with regulatory, legal, and anti-money laundering (AML) requirements in the UAE.
By sending a request to Delegata, you consent to us processing your details and sharing them with the doctors and clinics involved in your care.
4. Processing of health data & third-party transfers
- Partner healthcare providers: to fulfill our service, your anonymized or pseudonymized medical records (unless full disclosure is clinically necessary) will be shared with carefully selected partner hospitals, clinics, and specialists in the UAE, Switzerland, China, or other requested jurisdictions.
- Cross-border transfers: when sending health data abroad, we enforce strict data transfer protocols, ensuring recipient facilities adhere to equivalent confidentiality and data protection standards.
- No unlawful monetization: Delegata does not sell, rent, or trade client personal or health data to marketing agencies or third parties under any circumstances.
5. Data security & retention
- Security standards: we employ enterprise-grade encryption (SSL/TLS in transit, AES-256 at rest), strict access controls, and secure medical cloud storage to prevent unauthorized access, loss, or disclosure.
- Retention: we retain personal and health records only for as long as necessary to fulfill facilitation services, resolve clinical queries, or comply with statutory retention obligations under UAE health laws.
6. Your rights
Under UAE PDPL and applicable privacy laws, you hold the right to:
- Access and obtain a copy of your Personal Data.
- Request correction of inaccurate or incomplete records.
- Withdraw your consent at any time (which will not affect the lawfulness of prior processing).
- Request erasure/deletion of your Personal Data, subject to regulatory retention mandates.
To exercise your rights, contact our Data Protection Officer at [email protected].
Contact information
For legal inquiries, privacy requests, or corporate questions, please contact us:
DELEGATA Medical Treatment Facilitation Services L.L.C.
Email: [email protected]
Website: https://delegata.care
Jurisdiction: Dubai, United Arab Emirates
Dubai DET commercial licence No. 1169263