Privacy Policy

WhiteLine Dental Clinic ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our clinic, use our website at www.whitelineclinic.com, or interact with us in any other way.

We are located at Al Rigga Road, Deira, Dubai, UAE and operate under a licence issued by the Dubai Health Authority (DHA) and the Ministry of Health and Prevention (MOHAP). All patient data is handled in strict accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), DHA regulations, and applicable international best practices.

Please read this policy carefully. If you have any questions or concerns, please refer to the Contact Us section at the bottom of this page.

We collect various types of information in connection with the services we provide:

2.1 Personal Identification Information

• Full name, date of birth, gender, and nationality
• Emirates ID number or passport number
• Clinical photographs (when relevant to your treatment)

2.2 Contact Information

• Phone number(s) and WhatsApp number
• Email address
• Residential or work address

2.3 Medical and Dental Information

• Dental and medical history, existing conditions, and allergies
• X-rays, clinical photographs, and diagnostic records
• Treatment records, prescriptions, and clinical notes
• Insurance details, policy numbers, and prior authorisation records

2.4 Appointment and Communication Data

• Booking history, appointment dates and times, and treatment preferences
• Communications sent to or from us via phone, WhatsApp, email, or our website contact form

2.5 Technical and Website Data

• IP address, browser type, and operating system
• Pages visited on our website, time spent, and referring URLs
• Cookie and tracking data — see the Cookies & Tracking section below

We use the personal information we collect for the following purposes:

• Providing dental care: diagnosing, treating, and managing your oral health, including issuing prescriptions and coordinating specialist referrals.
• Appointment management: scheduling, confirming, rescheduling, and sending reminders for your visits.
• Billing and insurance: processing payments, submitting insurance claims, and handling pre-authorisation requests.
• Patient communications: responding to enquiries, sharing post-treatment care instructions, and notifying you of relevant clinic updates.
• Legal and regulatory compliance: meeting obligations imposed by the Dubai Health Authority, MOHAP, UAE law enforcement, and other applicable regulatory bodies.
• Service improvement: analysing aggregated, anonymised usage data to improve clinical quality, patient experience, and our website.
• Marketing communications (with your consent): sending promotional offers, newsletters, or oral health tips. You may opt out at any time by contacting us or using the unsubscribe link in our emails.

We process your data on the legal bases of contractual necessity (to provide you treatment), legal obligation (regulatory compliance), legitimate interest (clinic operations and security), and — where required — your explicit consent (marketing, sensitive health data).

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• Within the clinic: with dental professionals, nurses, and administrative staff who are directly involved in your care or the management of your records.
• Healthcare partners: with dental laboratories, specialist clinics, or referral hospitals as necessary to complete your treatment, under appropriate confidentiality agreements.
• Insurance providers: with your insurer or third-party administrator (TPA) to process claims and obtain pre-authorisations on your behalf.
• Technology and service providers: with trusted third-party platforms that assist us in appointment booking, practice management, payment processing, and website hosting — all subject to data processing agreements that restrict their use of your data.
• Regulatory and legal authorities: when required by law, court order, or a request from a government or regulatory authority (DHA, MOHAP, UAE courts).
• Business transfers: in the event of a merger, acquisition, or sale of clinic assets, patient records may be transferred to the succeeding entity under strict confidentiality obligations.

We implement industry-standard technical and organisational measures to protect your personal and medical information against unauthorised access, loss, alteration, or disclosure.

• Electronic records are stored in encrypted, password-protected systems with role-based access controls.
• Physical patient files are secured in locked cabinets accessible only to authorised clinical and administrative staff.
• All staff undergo regular training on data privacy, patient confidentiality, and information security obligations.
• We conduct periodic audits and vulnerability assessments of our data systems.

Data Retention: We retain patient medical records for a minimum of 10 years from the last date of treatment, or longer if required by applicable UAE law, regulatory guidance, or ongoing legal proceedings. Non-clinical data (e.g., marketing preferences, website enquiries) is retained only for as long as necessary for the purpose for which it was collected.

While we take every reasonable precaution, no electronic system is 100% secure. If you believe your data has been compromised, please contact us immediately at care@whitelineclinic.com.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. Cookies are small text files placed on your device by your browser when you visit a website.

Types of cookies we use:

• Essential cookies: Strictly necessary for the website to function. These cannot be disabled without affecting core functionality.
• Analytics cookies: Tools such as Google Analytics help us understand how visitors interact with our site (pages visited, session duration, traffic sources). This data is aggregated and does not identify individual users.
• Functional cookies: Remember your preferences (e.g., language selection) to personalise your experience.
• Marketing cookies: Used to serve relevant advertisements on third-party platforms. These are only placed with your prior consent.

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect website functionality.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable regulations, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal and medical data we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete information held on file.
• Right to Deletion: You may request deletion of your personal data, subject to our legal obligation to retain medical records under UAE healthcare regulations.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format for transfer to another healthcare provider.
• Right to Object: You may object to processing based on legitimate interest, or withdraw consent where processing is consent-based (e.g., marketing communications).
• Right to Restrict Processing: You may request that we limit processing of your data under certain circumstances while a query is under investigation.

To exercise any of these rights, please contact us in writing using the details in the Contact Us section. We will respond within 30 days of receiving your verified request. We may ask you to confirm your identity before processing sensitive requests.

WhiteLine Dental Clinic provides dental services to patients of all ages, including children. When treating patients under the age of 18, we require written consent from a parent or legal guardian prior to initiating any treatment or collecting sensitive data.

Personal data collected for minor patients is held strictly for clinical and administrative purposes. Parents or legal guardians may exercise data rights — including access, correction, and deletion — on behalf of their minor child by contacting us directly.

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children through our website outside of a clinical context. If you believe a child has submitted personal data to our website without appropriate parental consent, please contact us immediately so we can investigate and, if necessary, delete the data.

We may update this Privacy Policy from time to time to reflect changes in our clinical practices, technology, legal requirements, or for other operational reasons. When material changes are made, we will:

• Update the "Last updated" date at the top of this page;
• Post a notice on our website homepage; and/or
• Notify you by email if we hold your address and the change is significant.

We encourage you to review this Privacy Policy periodically. Your continued use of our services following any changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to us:

We are committed to resolving any privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant UAE data protection authority.