Reem Hospital protects your personal and health information in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Federal Law No. 2 of 2019 on ICT in Health Fields, and the Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS). This notice explains what we collect online, on our premises and during your care, how we use and protect it, and your rights.
-
Who We Are
Reem Hospital LLC, Al Reem Island, Abu Dhabi, is licensed by the Department of Health – Abu Dhabi (DoH) and is the controller of your information. This notice covers Reem Hospital, Reem Neuroscience, our Inpatient and Outpatient Pharmacies, and our Mobile Health Unit.
-
Information We Collect
- From you: your identification and contact details (including your Emirates ID or passport), medical and health information, insurance and billing details, and anything you submit through our website, forms, patient portal or apps
- From others: referring doctors and other healthcare providers, laboratories, insurers, your authorized representative or guardian, and DoH or other authorities
- Automatically from our website: your IP address, device and browser details, the pages you visit, when you visit, the site that referred you, and cookie identifiers
- On our premises: CCTV images recorded at entrances, exits and designated areas for safety and security
- Only what we need: we collect only what is necessary for the purposes in this notice. Please do not send medical details through general website enquiry forms; use the patient portal or contact us directly.
-
How We Use It and Why
What we use it for: we use your information to:
- Provide and record your care
- Manage appointments, billing and insurance claims
- Improve the quality and safety of our services
- Meet DoH and other legal reporting duties
- Support public health and approved research, using anonymized data wherever possible
- Operate and secure our website and premises
Our legal basis: we use your information only where we have a lawful reason to do so, namely:
- Providing your healthcare
- Complying with UAE law and DoH requirements
- Protecting public health
- Running safe and secure services
Where we rely on your consent, we will ask for it clearly and keep a record of it. You can withdraw your consent at any time, as easily as you gave it.
New purposes: if we wish to use your information for a purpose that is not compatible with the reason we collected it, we will ask for your consent first, unless the law requires or allows the use without it (for example, to meet a legal obligation or provide emergency care).
Declining will not affect your care, treatment, or insurance.
-
Who We Share It With
Who we may share with: we share your information only where necessary and lawful, with:
- Your treating clinicians
- Approved healthcare partners and laboratories
- Insurers
- DoH and other authorities
- Service providers who act only on our written instructions, under contracts covering confidentiality, security, UAE data storage, breach reporting and secure deletion
Required sharing with DoH platforms: as required by DoH, parts of your health record are shared with:
- Malaffi (the Abu Dhabi Health Information Exchange), so that clinicians treating you elsewhere can view it
- Sahatna, Shafafiya and other DoH platforms, for regulatory and insurance purposes
- Our commitment: we do not sell your information, and we do not share it for marketing without your consent.
-
Cookies
Cookies we use: our website uses the following types of cookies:
- Essential cookies: needed for the website to work properly
- Functional cookies: remember your preferences, such as language
- Analytics cookies: help us understand how the website is used, and are set only with your consent
What we do not use: we do not use advertising or profiling cookies.
Managing your choices: you can change your cookie preferences at any time through our cookie settings or your browser.
Third-party sites: linked content from other providers, such as maps or videos, is governed by those providers’ own privacy notices.
-
How Long We Keep It and Where
We keep information only as long as we need it or the law requires:
- Clinical records: a minimum of 25 years, or longer where the law or our retention schedule requires
- Website and technical data: only as long as needed, in line with our approved retention schedule
When information is no longer needed, we securely destroy or anonymize it.
Where we keep it: all information is stored, processed and backed up within the UAE. Any access from outside the UAE needs an approved exception, which requires a privacy impact assessment, Data Protection Officer review, leadership approval and, where required, DoH approval.
-
Your Rights
Your rights: you may ask us to:
- Give you access to, or a copy of, your information
- Correct information that is inaccurate or incomplete
- Delete information we are not required to keep, such as contact details used only for reminders or copies of identification documents we no longer need by law
- Restrict or object to non-essential uses of your information, where this does not affect your care or our legal duties
- Stop using your information for any purpose you consented to, if you withdraw that consent; this does not affect care already provided or uses based on another legal basis, such as keeping your medical record
- Receive your information in a secure, commonly used format, or have it transferred to another healthcare provider, where technically feasible
How to make a request: you can contact us in either of these ways:
- By email: write to [email protected]
- In person: complete the Data Subject Access Request Form ADM-032 at the hospital
Before we act on a request, we will verify your identity and, if someone is acting on your behalf, their authority to do so.
Our response times: unless a shorter legal timeline applies, we will:
- Acknowledge your request within 3 business days
- Aim to respond in full within 15 business days
- Handle your request free of charge
If we cannot fully meet your request, we will explain why in writing.
Limits that apply: some requests are restricted by law:
- Medical records: consultation notes, prescriptions, and lab and radiology results must be kept for at least 25 years under UAE Federal Law No. 2 of 2019 and DoH requirements, so we cannot delete them during this period. Corrections are added to the record, and the original entry is kept.
- DoH platforms: we cannot delete information already shared with Malaffi, Sahatna, Shafafiya or other DoH platforms. Contact DoH at [email protected] with your name, Emirates ID, medical record number and the platform concerned.
-
How We Protect It
How we protect your information: we use appropriate technical, organizational and administrative safeguards, including role-based access, encryption, multi-factor authentication, access monitoring, regular security testing, staff confidentiality commitments, privacy training, and privacy impact assessments before high-risk changes.
If a breach occurs: we notify DoH within the required timelines. Where there is a high risk to you, we will also explain what happened, the likely impact, and the steps you can take.
-
Children, CCTV and Automated Decisions
- Children (under 18): consent and requests are handled through a verified parent or legal guardian, except in emergencies or where law or child safety requires otherwise. Our website is not aimed at children.
- CCTV: cameras operate at entrances, exits and designated areas for safety and security, never in consultation, treatment, changing or bathroom areas. Footage is kept for the period required by the Abu Dhabi Monitoring and Control Centre, and access is restricted.
- Automated decisions: we do not profile you or make significant decisions about you by automated means alone and will update this notice before that changes.
-
Contact, Complaints and Updates
For questions about this notice, to exercise your rights or to make a privacy-related complaint, contact:
Data Protection Officer, Reem Hospital — [email protected] | +971 54 770 5401
We review this notice at least annually and will tell you directly about any significant change that affects you.
Patient Login