Learn how we handle personal information when you visit our website, contact our team or request an appointment.
Last updated: [29/10/2026]
Medwin Medical Center (“Medwin”, “we”, “our” or “us”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how personal information may be collected, used, stored, disclosed and protected when you visit our website, submit an appointment request, contact our team, enquire about a healthcare service or use other website features.
Villa 516, Jumeirah 3, Beach Road, Dubai, United Arab Emirates
Telephone: +971 4 395 5044
Email: reception@medwins.com
Website: medwinmedicalcenter.com
For the purposes of this policy, “personal information” means information that identifies you or could reasonably be used to identify you, directly or indirectly.
The exact legal entity responsible for your information should be identified in the final published version using Medwin's registered legal name.
This Privacy Policy primarily addresses personal information collected through the Medwin website and related digital communications. It applies when you:
This policy does not replace patient consent forms, clinical-record notices or more specific privacy information that may apply when you receive medical care. Patient records and health information may be subject to additional confidentiality, protection and retention requirements under applicable healthcare laws and regulatory policies.
The information we collect depends on how you interact with the website and which features you use.
When you submit a contact request or communicate with us, we may collect:
When you submit an appointment request, we may collect information such as:
We use this information to review your request, contact you, check availability and coordinate the appointment process. Submitting an appointment request does not, by itself, confirm an appointment.
You may choose to include health-related information in a message or appointment note, such as the reason for your enquiry or the service you are interested in.
Please avoid submitting detailed medical records, identification documents, payment-card information or other highly sensitive information through general website forms unless the clinic has specifically instructed you to use an appropriate secure channel.
Where health-related information is necessary for your care, it may be handled under additional healthcare confidentiality and health-data protection requirements.
When you visit the website, certain technical information may be processed automatically, depending on the website's configuration and the services it uses. This may include:
We will use and retain this information only for appropriate purposes, subject to applicable law and the actual technical configuration of the website.
If you use a third-party service linked to or embedded in our website, that provider may process information about your interaction with the service. Examples may include map services, WhatsApp, social media integrations, review widgets or analytics tools where these are enabled.
The information collected and the way it is handled depend on the relevant service and its privacy settings.
To receive and review appointment requests, check availability, contact you, coordinate scheduling and provide appointment-related information.
To answer questions about Medwin Medical Center, our healthcare professionals, specialties, treatments, home-care services and other available services.
Where appropriate and lawful, to support administrative activities connected with your enquiry, appointment or care journey. If you become a patient, relevant information may be processed separately as part of your patient record in accordance with applicable healthcare requirements.
To operate, maintain, troubleshoot and protect the website, investigate suspicious activity, prevent misuse and improve the reliability of our digital services.
Where supported by our actual website configuration and permitted by applicable law, we may use technical or aggregated usage information to understand website performance, identify errors and improve the visitor experience.
To comply with applicable legal obligations, healthcare regulations, lawful requests from competent authorities, and requirements concerning the protection and management of health information.
We may send administrative or service-related communications that are necessary to respond to your request or manage an appointment. We will not use personal information for promotional communications where consent or another legal requirement has not been satisfied. Where applicable, you may opt out of marketing communications using the instructions provided in the communication or by contacting us.
We will process personal information only where permitted by applicable law. Depending on the information and purpose of processing, the relevant grounds may include:
Health-related information may be subject to additional legal requirements and restrictions. It will be handled in accordance with the healthcare confidentiality and health-data protection rules applicable to the relevant activity.
Where consent is required, you may withdraw it as permitted by law. Withdrawal does not necessarily invalidate processing lawfully carried out before the withdrawal or prevent processing required for legal, regulatory or healthcare-record obligations.
We do not sell personal information as a commercial product. We may disclose personal information to the following categories of recipients when necessary and lawful.
Relevant members of our administrative, reception, technical and healthcare teams may access information where it is needed to handle your request, manage an appointment, provide healthcare or perform their responsibilities. Access should be limited according to the individual's role and responsibilities.
We may use service providers to support website hosting, maintenance, security, email, contact forms, appointment management, technical support, communications and other operational activities. Such providers may process personal information on our behalf where necessary, subject to appropriate arrangements and applicable legal requirements.
The final policy should identify material service providers used by the website once Medwin's technical configuration has been verified.
Where appropriate and lawful, relevant information may be shared with the healthcare professional or provider involved in your request or care. Health information will be disclosed only as permitted by applicable healthcare confidentiality, consent and health-data protection requirements.
We may disclose information where required or authorised by applicable law, a valid legal process, a competent regulator or a lawful request from a public authority.
Information may be used or disclosed where reasonably necessary and legally permitted to protect the rights, safety, property and security of Medwin, our patients, our personnel or other individuals.
Our website may provide access to external websites or services, including mapping services, messaging platforms, social media or review platforms.
When you choose to use these services, your information may be processed by the respective third-party provider under its own privacy policy, terms and settings.
Medwin does not control all data-processing activities of these external providers. We encourage you to review the privacy information applicable to any third-party service before using it.
For example, when you open WhatsApp, your communication may be handled by WhatsApp and its associated service providers under their applicable terms and privacy practices.
The website may use cookies or similar technologies, depending on its configuration. Cookies are small data files that a website may store on your device. They can support website functionality, security, preference management, performance measurement or other functions.
Necessary for core website functionality, security or the operation of a requested feature.
Used to remember choices such as language or other settings, where available.
Used, where enabled, to understand how visitors use the website and identify technical issues.
Used only if the website has relevant advertising technologies enabled and their use is permitted under applicable requirements.
The actual cookies and similar technologies used by Medwin must be confirmed through a technical audit of the live website, WordPress plugins, embedded services and any analytics or marketing scripts. Where required, non-essential cookies or similar technologies will be subject to the appropriate consent mechanism.
You may also be able to manage or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.
Personal information may be stored or processed using systems operated by Medwin or its authorised service providers. Depending on the services configured for the website, information may be processed in the United Arab Emirates or another country.
Where personal information is transferred outside the UAE, the transfer must comply with applicable legal requirements, including any conditions or safeguards required for personal data or health information.
The location of Medwin's website hosting, form submissions, email systems, appointment systems, analytics tools and backups should be verified before this section is finalised.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal, regulatory, operational and healthcare-record requirements.
Retention periods may differ according to the type of information and why it was collected.
When personal information is no longer required, it will be securely deleted, anonymised or otherwise handled in accordance with applicable law and Medwin's approved retention procedures.
The final policy should be consistent with Medwin's actual retention schedule and applicable healthcare requirements.
Medwin aims to protect personal information through reasonable administrative, technical and organisational safeguards appropriate to the information being handled and the nature of the processing.
These safeguards may include access controls, appropriate staff procedures, technical security measures, secure system administration and measures to reduce unauthorised access, disclosure, alteration, loss or destruction.
No website, communication channel or electronic storage system can be guaranteed to be completely secure.
You should avoid sending extensive confidential medical information through general contact forms or other channels that have not been designated for secure handling of such information.
If you believe that information you have submitted to Medwin has been compromised or sent to the wrong recipient, please contact us promptly.
Subject to applicable UAE law and any healthcare-specific requirements, you may have rights in relation to your personal information. Depending on the circumstances, these may include the right to:
These rights are subject to applicable legal conditions and exceptions. For example, certain information may need to be retained to meet healthcare-record, legal, regulatory or other lawful requirements.
To make a privacy request, contact us using the details in the “Contact Us” section below. We may need to verify your identity and clarify the nature of your request before responding.
We will handle requests in accordance with the legal requirements and response periods applicable to the request.
As a healthcare provider, Medwin recognises that information relating to a person's health requires particular care.
Health information may be subject to specific UAE healthcare laws, confidentiality obligations, Dubai Health Authority requirements and other applicable rules governing the use, sharing, security and retention of health information.
Information submitted through a general website form should not be treated as a replacement for the clinic's formal patient-record or consent procedures.
Where you receive care from Medwin, additional information may be provided about the handling of clinical records, patient rights, consent and health information.
The final published version of this policy should be aligned with Medwin's applicable health-data protection and confidentiality policy and its operational procedures.
If you submit an appointment request or communicate with Medwin on behalf of a child or another person, you should ensure that you are authorised to provide the relevant information and make the request.
Where required, Medwin may ask for confirmation of parental responsibility, legal authority or permission to act on another person's behalf.
Information relating to children and individuals who require a legal representative will be handled in accordance with applicable law and relevant healthcare procedures.
We will handle promotional communications in accordance with applicable consent and marketing requirements.
If you receive marketing communications from Medwin and wish to stop receiving them, you may use any unsubscribe mechanism provided or contact us directly.
Even if you opt out of marketing communications, we may still need to send service-related messages concerning an enquiry, appointment, legal obligation or other legitimate administrative matter.
We may revise this Privacy Policy to reflect changes to our website, services, data-handling practices, third-party integrations or applicable legal requirements.
The updated version will be published on this page with a revised “Last updated” date. Where required by applicable law, we will provide additional notice or obtain consent for material changes to the way personal information is processed.
Please review this page periodically to stay informed about our privacy practices.
If you have questions about this Privacy Policy, want to make a privacy request or wish to raise a concern about the handling of personal information, please contact Medwin Medical Center.
Villa 516, Jumeirah 3, Beach Road, Dubai, United Arab Emirates
Telephone: +971 4 395 5044
Email: reception@medwins.com
Website: medwinmedicalcenter.com
Please include “Privacy Request” in the subject line of your email so your enquiry can be directed to the appropriate person. We may request reasonable information to verify your identity before responding to a request involving personal information.
Share a few details and our team will confirm your appointment within one business hour.
