Privacy Policy

Livera Clinic (“we”, “us”, or “our”) operates this website and provides medical, aesthetic, wellness, and related healthcare services in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, use our online forms, communicate with us, or receive care at our facilities. By accessing our services or submitting information to us, you acknowledge that you have read this policy and understand how we handle your data. If you do not agree with our practices, please discontinue use of our digital services and contact us using the details provided at the end of this document.

We are committed to protecting your privacy and maintaining the confidentiality of health and personal information in line with applicable UAE laws and regulations, including Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL), where applicable, and professional standards applicable to healthcare providers. This policy supplements any consent forms, treatment agreements, or notices you may receive during clinical care. Where clinical records are involved, additional medical confidentiality rules may apply beyond this website-focused notice.

Data controller and contact

The data controller responsible for personal data processed through this website and for non-clinical inquiries is Livera Clinic, with its principal place of business at Office 203, Second Floor, Art XV Tower, Marasi Drive, Business Bay, Dubai, United Arab Emirates. For privacy-specific requests, including access, correction, or deletion where applicable, you may contact us at clinic@liveraclinic.ae or aesthetic@liveraclinic.ae, or by telephone using the numbers published on our website. We may ask you to verify your identity before processing certain requests to protect your information from unauthorized disclosure.

Information we collect

We may collect the following categories of information, depending on how you interact with us:

• Identity and contact data: full name, title, date of birth, nationality or residency where relevant, email address, telephone numbers, and mailing or billing address when you book appointments, complete forms, or correspond with us.
• Health and clinical data: symptoms, medical history, treatment preferences, photographs where clinically or aesthetically relevant, prescriptions, referrals, and other information you or your providers share for diagnosis, treatment, or continuity of care.
• Appointment and transaction data: preferred dates and times, service selections, visit type (for example general medical versus aesthetic), payment references (we do not store full card details on our servers when payments are handled by certified payment processors), and communications regarding scheduling or follow-up.
• Technical and usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps collected through cookies and similar technologies to secure our website, measure performance, and improve user experience.
• Marketing preferences: your choices regarding newsletters, educational content, or promotional communications where you have opted in.

How we use your information

We use personal information for purposes that may include:

1. Providing medical, dental, aesthetic, physiotherapy, mental wellness, and training services.
2. Scheduling appointments, confirming visits, and sending reminders where you have agreed.
3. Maintaining accurate medical records and meeting regulatory, licensing, and accreditation requirements.
4. Processing payments and managing billing, insurance coordination, or refunds as applicable.
5. Responding to inquiries submitted through our website, email, or telephone.
6. Improving our website, services, and safety through analytics and aggregated reporting.
7. Detecting, preventing, and investigating fraud, cyber incidents, or misuse of our systems.
8. Sending service-related notices and, where permitted, marketing communications with your consent.

We do not sell your personal information to third parties in the conventional sense of selling lists of individuals for unrelated marketing. Any sharing described in this policy is limited to the purposes stated here or as required by law.

Legal bases and consent

Where the PDPL or other rules require a legal basis, we may rely on one or more of the following: performance of a contract with you; compliance with legal obligations applicable to licensed healthcare providers; protection of your vital interests or those of another person; performance of a task carried out in the public interest or in the exercise of official authority; or legitimate interests pursued by us or a third party, such as operating a secure clinic and website, provided those interests are not overridden by your rights. Sensitive health data is generally processed only with your explicit consent or as permitted for medical treatment, legal claims, or substantial public interest under applicable law. You may withdraw consent for non-essential processing where withdrawal does not affect the lawfulness of prior processing.

Sharing and disclosure

We may disclose personal information to: members of our clinical and administrative staff who need access to perform their duties; laboratories, imaging centers, specialists, or hospitals involved in your care; insurers or payors when you authorize billing; IT vendors, cloud hosting providers, and cybersecurity services under strict confidentiality agreements; professional advisers including lawyers and auditors when required; and government or regulatory authorities when compelled by lawful request. International transfers, if any, are conducted with appropriate safeguards such as standard contractual clauses or adequacy decisions as recognized under UAE law.

Retention

We retain personal and health information for as long as necessary to fulfill the purposes described in this policy, including statutory retention periods for medical records in the UAE, limitation periods for legal claims, and operational requirements. When retention expires, we securely delete or anonymize data in accordance with internal policies and applicable regulations.

Security

We implement administrative, technical, and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, staff training, encryption where appropriate, secure hosting environments, and incident response procedures. No method of transmission over the Internet is completely secure; we encourage you to use strong passwords, avoid sharing credentials, and notify us promptly of any suspected unauthorized access.

Your rights

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal data; restrict or object to certain processing; receive a copy of data you provided in a structured, commonly used format where technically feasible; and lodge a complaint with a competent supervisory authority where available. Rights may be limited where processing is necessary for medical diagnosis, legal compliance, or establishment or defense of legal claims. To exercise your rights, contact us using the details below. We will respond within reasonable timeframes as required by law.

Cookies and similar technologies

Our website may use cookies, local storage, or analytics tools to remember preferences, measure traffic, and improve functionality. You can control cookies through your browser settings; disabling certain cookies may limit features of the site. Where we use analytics, we strive to configure tools to minimize identification of individuals.

Children

Our services may be relevant to minors when accompanied by a parent or guardian. We do not knowingly collect personal information from children through our website without appropriate parental or guardian involvement as required by law. If you believe we have collected information from a child inappropriately, please contact us so we can take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or services. The “Last updated” date at the top of this page will be revised when material changes are made. We encourage you to review this policy periodically. Continued use of our website after updates constitutes your acknowledgment of the revised policy, except where additional consent is required by law.

Contact

For questions about this Privacy Policy or our data practices, contact Livera Clinic at clinic@liveraclinic.ae or aesthetic@liveraclinic.ae, or write to Office 203, Second Floor, Art XV Tower, Marasi Drive, Business Bay, Dubai, United Arab Emirates. We will endeavour to respond to legitimate inquiries without undue delay.