Doctrix Medical

Effective Date: September 28, 2026

Last Updated: September 28, 2026

Doctrix Medical Laboratory FZCO (“Doctrix”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal and health information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, protect and retain information when you visit our website, contact us or use our laboratory services.

This policy is intended to operate in accordance with applicable UAE data-protection and healthcare privacy requirements, including applicable provisions of Federal Decree-Law No. 45 of 2021 concerning Personal Data Protection and Federal Law No. 2 of 2019 concerning the use of ICT in health fields. (U.AE)

For healthcare operations in Dubai, Doctrix will also comply with applicable requirements issued by the competent health authority, including applicable DHA requirements concerning health-data protection, confidentiality, information sharing and patient consent. (Dubai Health Authority)

1. Information We May Collect

Depending on how you interact with Doctrix, we may collect the following categories of information.

A. Personal Information

This may include:

Full name;
Date of birth;
Gender where required for the service;
Telephone number;
Email address;
Address or location information where required;
Identification information where legally or operationally required.

B. Health and Medical Information

Where necessary to provide laboratory services, we may process information such as:

Tests requested;
Health screening or laboratory packages selected;
Specimen information;
Relevant clinical information;
Laboratory test results;
Information necessary to support laboratory testing and reporting.

Health information is treated as confidential information and is subject to additional protections under applicable healthcare requirements.

C. Communications

We may collect information you provide when you:

Submit an enquiry;
Contact customer support;
Request clarification of a report;
Submit a complaint;
Provide feedback; or
Communicate with Doctrix by email, telephone or other approved channels.

D. Technical Information

When you use our website, certain technical information may be collected automatically, such as:

IP address;
Browser type;
Device information;
Operating system;
Pages visited;
Website usage information; and
Technical logs necessary for security and operation.

2. How We Use Your Information

We may process your information for purposes including:

Providing laboratory and diagnostic services;
Processing requested tests;
Preparing and delivering laboratory reports;
Responding to enquiries;
Communicating with you regarding your requested services;
Handling complaints and report clarifications;
Maintaining appropriate healthcare and business records;
Maintaining the security and functionality of our systems;
Improving our services and website;
Meeting applicable legal, regulatory and healthcare requirements; and
Responding to lawful requests from competent authorities.

We will not use your personal information for purposes incompatible with the purpose for which it was collected unless permitted or required by applicable law.

3. Health Information and Confidentiality

Health information is sensitive information.

Doctrix will take appropriate measures to maintain the confidentiality, integrity and security of patient health information.

Access to health information will be restricted to authorised persons who require access for legitimate healthcare, operational, regulatory or legal purposes.

Applicable UAE healthcare requirements require health providers to maintain confidentiality of health information and protect its integrity and availability.

4. Legal Basis for Processing

Depending on the circumstances, Doctrix may process personal information based on applicable legal grounds, which may include:

Your consent;
Provision of healthcare or laboratory services requested by you;
Compliance with legal or regulatory obligations;
Protection of public interest or other legally recognised grounds;
Establishment, exercise or defence of legal claims; or
Other grounds permitted under applicable UAE law.

Consent will be obtained where required by applicable law.

5. Sharing of Information

Doctrix does not sell personal or health information.

Information may be disclosed where appropriate and lawful to:

Authorised healthcare professionals involved in your care;
Authorised persons acting on your behalf;
Service providers supporting Doctrix operations;
Laboratories or technical service providers where necessary for the requested service;
Competent healthcare or regulatory authorities;
Government authorities where required by law;
Legal or professional advisers where reasonably necessary; or
Other parties where disclosure is authorised or required by applicable law or with appropriate consent.

Any sharing of health information will be subject to applicable confidentiality, legal and regulatory requirements.

DHA’s Health Information Sharing Policy specifically addresses lawful health-data sharing, consent, confidentiality and formal arrangements between entities.

6. International Transfers

Where personal or health information is transferred or accessed outside the UAE, Doctrix will take steps required by applicable UAE laws and regulatory requirements governing cross-border data transfers.

The UAE Personal Data Protection framework includes requirements relating to cross-border transfers and sharing of personal data.

7. Data Security

Doctrix maintains reasonable technical, organisational and administrative measures designed to protect personal and health information against:

Unauthorised access;
Unauthorised disclosure;
Alteration;
Destruction;
Loss;
Misuse; and
Other unlawful processing.

However, no electronic system or method of transmission can be guaranteed to be completely secure.

8. Data Retention

Doctrix retains personal and health information for as long as reasonably necessary for the purposes for which it was collected, including:

Providing healthcare and laboratory services;
Maintaining required healthcare records;
Meeting legal and regulatory requirements;
Resolving complaints or disputes;
Maintaining appropriate business records; and
Complying with applicable retention obligations.

Specific retention periods may depend on the type of record and applicable UAE healthcare and regulatory requirements.

9. Your Rights

Subject to applicable law and any lawful limitations, individuals may have rights concerning their personal information, including rights to:

Request access to personal information;
Request correction of inaccurate information;
Request restriction or cessation of processing where applicable;
Withdraw consent where processing is based on consent, subject to legal or operational limitations;
Raise a concern regarding the handling of personal information; and
Exercise other rights available under applicable UAE law.

The UAE Personal Data Protection framework expressly recognises rights relating to correction and restriction or cessation of processing, subject to applicable conditions and exceptions.

10. Cookies

Our website may use cookies or similar technologies to support website functionality, security, performance and analytics.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect some website functionality.

11. Children and Minors

Where laboratory services are provided to a minor, Doctrix may collect and process information relating to the minor as necessary to provide the requested service and in accordance with applicable consent and healthcare requirements.

Where required, a parent, legal guardian or other authorised representative may be involved in providing consent or exercising applicable rights.

12. Data Breaches and Security Incidents

Doctrix maintains procedures for identifying, assessing and responding to information-security and health-information incidents.

Where a data incident occurs, Doctrix will take appropriate action in accordance with applicable legal and regulatory requirements, including any applicable notification obligations.

13. Changes to This Privacy Policy

Doctrix may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or regulatory obligations.