App Privacy Policy

Use of your personal information

The Cleveland Clinic Abu Dhabi app (our App) may interact with your sensitive data to provide certain features, such as video visits or mobile appointment check-in. The first time you try to use any of these features, we will ask for your consent within the App and will only allow you to use a feature if you give consent. You do not have to provide consent if you do not want to allow the App to interact with your data as requested. The App is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your personal information to make your use of the App possible.

How we use your location data

Our App offers location-based check-in for in-person appointments. The first time you try to use any features that use your location, we will ask for your consent within the App and will only access your location if you give consent. You do not have to provide consent if you do not want to allow the App to use your location. We do not store your location data.

How we share your personal information

Your sensitive data may be shared with other healthcare organization’s as well as Malaffi (the Abu Dhabi Health Information Exchange) for the purposes of your healthcare if you provide your consent. You do not have to provide consent if you do not want to allow our App to share your personal information.

Some of our features rely on sharing your sensitive data with our vendors, such as Enghouse Vidyo, Inc. for video visits, and Salucro Healthcare Solutions, LLC when you make online payments for our services. All such vendors are prohibited from using your personal information except to provide these services to Cleveland Clinic Abu Dhabi, and they are required to maintain the confidentiality of your personal information.

We also collect non-personal information in aggregate that cannot be traced back to a specific individual. Such information is used to determine the number of visitors to the App, and other key indicators of App usage to create a better experience for users to this App. This information does not identify you personally.

Security of your personal information

We use measures to protect your personal identifiable and Confidential Health Information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction in accordance with applicable UAE Laws. We use measures designed to protect other information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.

Retention and deletion of your personal information

We only keep your personal information for as long as we need it. This depends on several factors:

• How long you’ve been a patient with us, the types of medical services we have provided to you, any relevant events and when you’ll stop being a patient.
• How long it’s reasonable to retain your personal data to show we’ve met the obligations we have to you and by law.
• Any periods set by law or recommended by regulators, professional bodies or associations.
• Any time limits for making a legal claim and any ongoing legal proceedings.

To comply with UAE health data laws, we retain your sensitive data for at least 25 years after your treatment. In some cases we may need to retain your sensitive data for longer, for example:

• For reasons of public health, for example to protect the public against a pandemic.
• For research and archiving purposes, for example where your medical records have been used as part of a clinical trial with your informed consent.
• For investigations or the establishment, exercise or defence of legal claims, for example in relation to a complaint about the treatment you have received.
• For other cases permitted or required by law.

When we have no ongoing legitimate business need or legal reason to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate them from any further processing until deletion is possible.

How to contact us

If you have any questions about this Privacy Policy or our practices, please email us at [email protected]