Privacy Policy

Vivo Clinic Dubai

Last updated: 8 February 2026

1. Introduction

Vivo Clinic Dubai is committed to protecting and respecting your privacy. This Privacy Policy explains how personal data is collected, used, stored, and protected when you interact with Vivo Clinic Dubai, whether through our website, enquiry forms, booking systems, or direct communications.

Vivo Clinic Dubai operates solely as a marketing, administrative, and appointment-facilitation provider. All medical services are delivered by EMORA Clinic, which acts as the sole medical service provider and controller of medical and health-related data.

This Privacy Policy is drafted in accordance with applicable United Arab Emirates data protection laws and regulations.

2. Data Controllers and Allocation of Responsibility

2.1 Vivo Clinic Dubai

Vivo Clinic Dubai acts as a data controller for non-medical personal data, including data collected for:

• Enquiries and bookings
• Customer communications
• Administrative and operational purposes
• Marketing and promotional communications, where consent has been given

Vivo Clinic Dubai does not act as a medical service provider and does not control or process medical data for clinical purposes.

2.2 EMORA Clinic

EMORA Clinic acts as the sole data controller for all medical and health-related personal data, including but not limited to:

• Medical histories and declarations
• Consultation notes and clinical assessments
• Treatment records and consent forms
• Aftercare and follow-up documentation

All medical data is processed, stored, and protected under EMORA Clinic’s clinical governance and regulatory obligations.

3. Personal Data We Collect

3.1 Non-Medical Personal Data

Vivo Clinic Dubai may collect and process the following information:

• Full name
• Contact details, including telephone number and email address
• Appointment and booking details
• Enquiry and communication history
• Payment status, excluding full card details

3.2 Medical and Health-Related Data

Medical data is collected directly by EMORA Clinic and may include:

• Medical history and suitability assessments
• Treatment plans and outcomes
• Consent documentation
• Aftercare and follow-up records

Vivo Clinic Dubai does not use medical data for marketing, profiling, or administrative decision-making.

4. How Personal Data Is Used

Vivo Clinic Dubai uses non-medical personal data to:

• Respond to enquiries and requests
• Schedule and manage appointments
• Provide customer service and administrative support
• Communicate service updates and operational information
• Send marketing communications where consent has been provided

EMORA Clinic uses medical data to:

• Assess treatment suitability
• Deliver medical treatments and consultations
• Maintain accurate medical records
• Provide aftercare and medical follow-up
• Comply with healthcare regulations and professional standards

5. Legal Basis for Processing

Personal data is processed on one or more of the following lawful bases:

• Consent provided by the individual
• Performance of a contract or service
• Compliance with legal or regulatory obligations
• Legitimate business interests, where applicable

Medical and health-related data is processed by EMORA Clinic on the basis of explicit consent and healthcare obligations.

6. Data Sharing and Disclosure

Personal data may be shared only where necessary and lawful, including:

• Between Vivo Clinic Dubai and EMORA Clinic for appointment coordination
• With authorised staff who require access to perform their duties
• With regulators, authorities, or courts where legally required

Personal data is never sold and is not shared with unrelated third parties for marketing purposes.

7. Data Storage and Security

Appropriate technical and organisational safeguards are in place to protect personal data against unauthorised access, loss, misuse, or disclosure, including:

• Secure databases and systems
• Restricted access controls
• Confidentiality obligations for staff

Medical data is stored and protected by EMORA Clinic in accordance with healthcare record-keeping requirements.

8. International Data Transfers

Where personal data is transferred outside the United Arab Emirates, appropriate safeguards are implemented to ensure continued protection in accordance with applicable laws.

9. Marketing Communications

Vivo Clinic Dubai may send marketing communications, offers, or updates where consent has been given.

You may withdraw consent or opt out at any time. Opting out of marketing communications does not affect service-related messages.

10. Your Rights

You have the right to:

• Request access to your non-medical personal data
• Request correction of inaccurate or incomplete data
• Withdraw consent for marketing communications
• Request deletion of non-medical personal data where legally permitted

Requests relating to medical records or health-related data must be directed to EMORA Clinic, as the medical data controller.

11. Data Retention

Non-medical personal data is retained only for as long as necessary for administrative, legal, or business purposes.

Medical records are retained by EMORA Clinic in accordance with healthcare and regulatory requirements.

12. Third-Party Correspondence

Vivo Clinic Dubai reserves the right to charge reasonable administrative fees for responding to third-party requests for information or documentation, including requests from solicitors, insurers, or government bodies.

13. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be published on the website and will take effect immediately upon posting.

14. Contact

For questions relating to this Privacy Policy or non-medical personal data, please contact Vivo Clinic Dubai via the website contact form.

For questions relating to medical data or medical records, please contact EMORA Clinic directly.

15. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes shall be subject to the exclusive jurisdiction of the courts of Dubai and the UAE, whose decisions shall be final and binding.