Legal
Last updated: September 2026
SiZa Healthcare ("SiZa Healthcare", "SiZa", "we", "our", or "us") is a healthcare provider licensed by the Dubai Health Authority (DHA). We provide home healthcare services including doctor visits, nursing services, laboratory services, IV therapy, pediatric visits, elderly care, and related healthcare services.
We are committed to protecting the privacy, confidentiality, and security of personal information and health information entrusted to us.
Depending on the services you use and your relationship with us, we may collect different categories of information.
This may include:
When you use our healthcare services, we may collect and process health information necessary for the provision and management of healthcare, including:
Health information is treated as confidential and is subject to additional safeguards applicable to healthcare information.
Where applicable, we may collect:
Payment card information may be processed through authorized payment service providers.
We may retain information contained in communications with us, including:
When you use our website, we may automatically collect certain technical information, such as:
We use this information primarily to operate, secure, maintain, and improve our website and services.
Because SiZa Healthcare provides healthcare services, we may process sensitive health information as part of providing medical care.
Health information may be collected directly from you, from your authorized representative, from healthcare professionals, from hospitals or clinics, from laboratories, from insurers, from authorized healthcare systems, or from other sources where permitted or required by applicable law.
We process health information only for appropriate healthcare, administrative, legal, regulatory, safety, insurance, or other lawful purposes.
Access to patient health information is restricted to authorized persons who require access for legitimate purposes, including healthcare professionals involved in the patient's care, authorized administrative personnel, and other persons or organizations where access or disclosure is permitted or required by applicable law.
DHA's health-information policies require healthcare entities to protect the confidentiality and privacy of protected/personal health information and to maintain appropriate controls over health-information sharing.
We may use personal and health information for purposes including:
We may process personal information where permitted or required under applicable UAE laws and regulations.
Depending on the circumstances, processing may be necessary for:
Where processing is based on consent, you may have the right to withdraw your consent, subject to applicable law and any circumstances in which we are legally required or permitted to continue processing the information.
Withdrawal of consent does not necessarily affect processing that occurred lawfully before the withdrawal.
Depending on the service and applicable requirements, we may obtain consent or authorization from the patient, parent, guardian, legal representative, or other authorized person.
Patient consent may cover, where applicable:
Certain processing may be permitted or required by law without separate consent.
Where applicable to our services, SiZa may participate in authorized health information exchange processes, including NABIDH, in accordance with applicable DHA requirements and patient consent requirements.
DHA has issued requirements concerning the inclusion of NABIDH health-information access consent within the general consent process used by healthcare facilities in Dubai.
NABIDH is Dubai's health information exchange platform that enables the secure exchange of medical records between connected healthcare providers.
Where applicable to SiZa Healthcare and permitted or required by DHA and other applicable regulations, patient health information may be submitted to, accessed through, or exchanged using authorized healthcare information systems, including NABIDH.
Such access or sharing may support:
Access to health information through such systems is subject to applicable authentication, authorization, privacy, security, consent, and access-control requirements.
NABIDH's policies are designed to restrict access to authorized users and limit information exchange to the minimum necessary for the intended purpose.
We do not sell your personal information.
We may disclose or share personal and health information where permitted or required by applicable law, or where necessary to provide or manage healthcare services.
Depending on the circumstances, information may be shared with:
Information may be shared with accredited or authorized laboratories, diagnostic providers, radiology providers, or other healthcare service providers where necessary to perform or coordinate services.
Where applicable, information may be shared with:
We may disclose information to DHA, other competent health authorities, government entities, law-enforcement authorities, courts, or other authorized bodies where required or permitted by applicable law.
We may use carefully selected third-party service providers to support our operations, including:
Such providers may only access information to the extent reasonably necessary to provide their services and are expected to maintain appropriate confidentiality and security safeguards.
Where reasonably necessary to protect a patient's life, health, safety, or vital interests, relevant information may be disclosed to emergency medical services, hospitals, healthcare professionals, caregivers, or other authorized persons.
Where a doctor or other authorized healthcare professional determines that a patient requires hospital assessment, emergency treatment, admission, specialist care, or other services that cannot appropriately be provided at home, SiZa Healthcare may coordinate or facilitate referral or transfer to an appropriate healthcare facility.
Relevant medical information may be shared with the receiving healthcare provider to support safe and effective continuity of care, subject to applicable law and healthcare requirements.
SiZa Healthcare may provide healthcare services to children and minors.
Where services are provided to a child or minor, we may collect and process information relating to the child as necessary to provide healthcare, maintain medical records, protect the child's health and safety, comply with legal requirements, and manage healthcare services.
Where required, we will obtain consent or authorization from a parent, legal guardian, or other legally authorized representative.
We take reasonable and appropriate technical, administrative, physical, and organizational measures to protect personal and health information against unauthorized access, disclosure, alteration, loss, misuse, destruction, or other unlawful processing.
Depending on the nature of the information and our systems, safeguards may include:
No electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted over the internet.
We maintain procedures for identifying, assessing, managing, and responding to suspected or confirmed personal-data and health-information security incidents.
Where required by applicable law or regulatory requirements, we will notify the relevant authorities and/or affected individuals in accordance with applicable requirements.
We retain personal and health information only for as long as reasonably necessary for the purposes described in this Privacy Policy and for periods required or permitted by applicable UAE laws, DHA requirements, healthcare recordkeeping obligations, insurance requirements, regulatory requirements, accounting requirements, and legal obligations.
Medical and healthcare records may be subject to specific retention requirements. Accordingly, a request to delete personal information does not necessarily mean that SiZa Healthcare can immediately delete medical records or other information that we are legally or professionally required to retain.
When information is no longer required and there is no legal, regulatory, clinical, or legitimate business reason for retaining it, we will take reasonable steps to securely delete, destroy, or anonymize it in accordance with our applicable policies.
Some of our technology, service, professional, or operational providers may process information from locations outside the United Arab Emirates.
Where personal information is transferred or processed outside the UAE, we will do so only where permitted by applicable law and subject to applicable requirements and safeguards concerning cross-border transfers.
Where appropriate, we may use contractual, technical, organizational, or other safeguards to protect personal information during such processing.
Our website may use cookies and similar technologies to:
Some cookies may be provided by third-party service providers.
You may be able to control or disable certain cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website.
Where our website uses analytics, advertising, or other non-essential technologies, their use will be subject to applicable law and our configuration of those services.
We may contact you regarding:
These communications may be sent by telephone, SMS, email, WhatsApp, or other communication channels you have provided or that are otherwise permitted.
Where required by applicable law, promotional or marketing communications will be sent based on appropriate consent or communication preferences.
You may request to stop receiving non-essential marketing communications by contacting us or using the unsubscribe mechanism provided in the relevant communication.
Stopping marketing communications will not prevent us from sending essential communications relating to healthcare services, appointments, safety, billing, or other necessary matters.
Subject to applicable UAE laws and healthcare regulations, you may have rights relating to your personal information, including the right to:
These rights are subject to legal, regulatory, healthcare, public-health, contractual, and other applicable limitations.
For example, we may be required or permitted to retain certain medical or health information for patient safety, continuity of care, public-health, regulatory, legal, insurance, or medical-record purposes.
The UAE Personal Data Protection Law recognizes data-subject rights while also providing circumstances in which erasure rights may be restricted, including certain health and public-health information held by private facilities.
To exercise a privacy or data-protection right, please contact us at support@sizahealthcare.ae, +971-58-818-9967, or (04) 583 9520, or write to us at 607, Al Barsha Business Center, Al Barsha 1 , Dubai.
To protect patient confidentiality, we may need to verify your identity before processing certain requests.
If you are making a request on behalf of another person, we may require evidence that you are legally authorized to act on that person's behalf.
We will review and respond to requests within the period required by applicable law and regulatory requirements.
All patient information is treated as confidential and is handled in accordance with applicable UAE laws, DHA requirements, professional obligations, and SiZa Healthcare's internal policies.
Our healthcare professionals, employees, contractors, and relevant service providers are expected to maintain the confidentiality of information accessed in connection with their duties.
Access to patient information is limited according to role, legitimate purpose, authorization, and applicable access-control requirements.
Our website may contain links to third-party websites, applications, social media platforms, payment services, or other external services.
If you follow a link to a third-party website or service, that third party's own privacy policy and terms may apply.
SiZa Healthcare is not responsible for the privacy practices, content, security, or policies of third-party websites or services that we do not control.
We may update this Privacy Policy from time to time to reflect:
The updated Privacy Policy will be published on this website with the revised "Last Updated" date.
We encourage you to review this Privacy Policy periodically.
This Privacy Policy is governed by the applicable laws and regulations of the United Arab Emirates and the Emirate of Dubai, including applicable healthcare and data-protection requirements administered or issued by competent authorities.
Nothing in this Privacy Policy is intended to limit any mandatory rights or protections available to individuals under applicable law.
If you have questions, concerns, complaints, or requests relating to this Privacy Policy or the handling of your personal or health information, please contact us:
We take privacy and patient confidentiality seriously and will review privacy-related enquiries in accordance with applicable laws, regulations, and healthcare requirements.
