
Privacy Policy
Last updated: 24 June 2026
Sunface Medical Center LLC (“Sunface HomeCare”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights as a patient or website visitor. By using our services or this website, you agree to the practices described in this policy.
1. Who We Are
Sunface HomeCare is a home healthcare services provider licensed and operating under the Dubai Health Authority (DHA). Our registered clinic address is No. 1003, 10th Floor, Jumeirah Bay X2, Cluster X, Jumeirah Lake Towers (JLT), Dubai, United Arab Emirates.
For all privacy-related enquiries, please contact our data protection officer at: info@sunface.ae
2. Information We Collect
We collect the following categories of information:
- Personal Identification: Your full name, date of birth, nationality, and Emirates ID number where required for medical records.
- Contact Information: Phone number, email address, and home address for appointment scheduling and care coordination.
- Medical and Health Information: Diagnosis, treatment history, medications, and care requirements shared by you or your referring physician.
- Communication Records: Records of calls, WhatsApp messages, emails, and web form submissions made to our team.
- Website Usage Data: IP address, browser type, pages visited, and session duration collected via standard web analytics tools (cookies).
- Payment Information: Payment confirmation details. We do not store full card numbers or banking credentials.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To schedule, coordinate, and deliver home care services tailored to your clinical needs.
- To share relevant health information with the care professionals assigned to your case.
- To communicate appointment confirmations, reminders, and care updates via phone, WhatsApp, or email.
- To coordinate with your treating physician or referring hospital where required for clinical continuity.
- To fulfil legal and regulatory obligations under Dubai Health Authority requirements.
- To improve our services through aggregate, anonymised analysis of patient satisfaction and outcomes.
- To send service-related communications (we will always give you the option to opt out of non-essential communications).
4. Legal Basis for Processing
We process your personal data on the following legal bases under applicable UAE data protection law and DHA regulations:
- Contract Performance: Processing necessary to deliver the healthcare services you have requested.
- Legal Obligation: Processing required to comply with DHA licensing, medical record retention laws, and other statutory requirements.
- Legitimate Interests: Processing for quality assurance, clinical governance, and service improvement where your rights are not overridden.
- Consent: Where you have given explicit consent, such as for marketing communications or non-essential data collection.
5. Sharing Your Information
We do not sell, trade, or rent your personal or medical information to any third party. We may share your information only in the following circumstances:
- Care Team Members: Nurses, doctors, and allied health professionals within our network who are directly involved in your care.
- Referring Physicians: With your consent, your treating doctor or referring hospital may receive progress reports and care summaries.
- Regulatory Authorities: Dubai Health Authority, Dubai Health, or other competent authorities when required by law or regulatory obligation.
- Technology Providers: Trusted technology platforms that process data on our behalf (e.g., electronic health record systems, communication tools) under strict data processing agreements.
- Emergency Services: In case of a medical emergency, we may share relevant health information with emergency responders or hospitals.
6. Medical Record Retention
In accordance with DHA regulations, patient medical records are retained for a minimum of ten (10) years from the date of the last interaction. Records for patients who were minors at the time of care are retained until the patient reaches the age of 28 or for ten years, whichever is longer. After the mandatory retention period, records are securely and permanently destroyed.
7. Cookies and Website Analytics
Our website uses cookies and similar technologies to improve your browsing experience and understand how visitors interact with our content. Cookies we use include:
- Essential Cookies: Required for the website to function. These cannot be disabled.
- Analytics Cookies: Used to collect anonymous data on page visits and user journeys to help us improve the website.
You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect your experience on this site.
8. Your Rights
Under applicable UAE data protection legislation, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Correction: Request that inaccurate or incomplete data be corrected.
- Right to Deletion: Request erasure of your personal data, subject to our legal retention obligations.
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
- Right to Object: Object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@sunface.ae. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal and medical information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data storage, access controls, staff training on data protection, and regular security assessments.
While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.
10. Children's Privacy
We provide home care services to patients of all ages, including minors. When providing services to a child under the age of 18, we collect and process data with the explicit consent of a parent or legal guardian. Personal data of minors is handled with heightened care and is not used for any purpose other than direct care delivery.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you by email or through a prominent notice on our website. The “Last Updated” date at the top of this policy indicates the most recent revision.
12. Contact Us
For any questions, concerns, or requests related to this Privacy Policy, please reach out to us:
- Email: info@sunface.ae
- Phone: +971525409170
- Address: No. 1003, 10th Floor, Jumeirah Bay X2, Cluster X, JLT, Dubai, UAE
