Official Clinic Policies
Privacy policy
What we collect, why we collect it, how long we keep it and what you can ask us to do with it.
Last updated: 14 September 2026 · Compliant with DHA Telemedicine Standards (License #1113980)
Statutory Legal & Medical Notice: This document is established in accordance with Dubai Health Authority (DHA) Telemedicine Regulations, UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and UAE Medical Liability Law.
Who we are
Peak Prime Health is a licensed digital telemedicine clinic operating in Dubai, United Arab Emirates under DHA License #1113980, under the medical direction of Dr. Mustafa Fashir, MBBS, MSc, FECSM (DHA #96883477). In this policy, “we” and “us” mean Peak Prime Health.
You can reach our compliance team and Data Protection Officer at info@peakprimehealth.com.
What we collect
We collect only the essential health and personal data required to evaluate and treat you lawfully and safely under UAE regulations.
Information you give us
- Your answers to the clinical health assessment, including symptoms, medical history, medications and allergies
- Your legal name, date of birth, Emirates ID number and clear photographs of your Emirates ID
- Your contact details and verified UAE delivery address
- Clinical information shared with your physician during video consultations or direct portal messaging
Information we generate
- Your digital medical records, physician clinical notes, consultation transcripts and approved e-prescriptions
- Your order history, courier delivery dispatch records and payment invoices
Information collected automatically
- Standard secure session telemetry (browser type, device type, IP address) for session authentication and fraud prevention
- Temporary local browser storage to preserve your cart and intake progress securely
How we use it
To assess your suitability for remote clinical treatment, to enable your DHA-licensed doctor to prescribe safely, to dispense and deliver your medication via licensed partner pharmacies, to process secure payments, to maintain mandatory medical records under UAE Federal Law, and to communicate directly regarding your ongoing clinical care.
We never sell, rent, or commercialize your personal or health data. Your medical information is protected by statutory patient-physician privilege.
Who sees it
Access to your health file is strictly limited to your attending DHA physician, designated clinical care team, and licensed UAE partner dispensing pharmacists.
Payment processing is conducted via certified PCI-DSS compliant payment gateways (Mamo Pay). We do not store your full card numbers on our servers.
We disclose information to health authorities or regulators only where strictly required by UAE law or official DHA compliance mandates.
Where it is stored
All medical records and personal health information are stored in secure cloud infrastructure strictly adhering to UAE Health Data Residency requirements and DHA health IT security regulations. Data is protected with AES-256 encryption at rest and TLS 1.3 in transit.
How long we keep it
Medical records are maintained for the statutory period mandated by Dubai Health Authority and UAE Ministry of Health regulations (minimum 5 years from the last consultation date). Following the mandatory retention period, files are permanently and securely destroyed.
Your rights
Under UAE Federal Decree-Law No. 45 of 2021 and DHA telemedicine guidelines, you have the right to:
- Request an electronic copy of your medical file and personal data
- Request correction of inaccurate personal or contact details
- Request account closure and deletion of data not subject to mandatory medical retention
- Opt out of non-clinical notifications at any time
Email info@peakprimehealth.com and our compliance team will respond within statutory timeframes.
Security
Medical records and identity documents are stored encrypted and accessible only to authenticated care personnel. We maintain strict role-based access control, comprehensive audit logging, multi-factor authentication, and end-to-end encrypted video channels for telemedicine consultations.
Cookies & local storage
This website utilizes secure local browser storage (sessionStorage and localStorage) strictly to preserve your cart contents, assessment intake, and authenticated patient portal session across page navigation. We do not use third-party tracking or advertising networks.
Changes to this policy
If we update this policy, we will update the publication date at the top of this page and notify active patients via their registered email address or patient portal alert.