Legal
Privacy Policy
How Vatican Physiotherapy Center collects, uses and protects your personal and health information.
This policy explains what Vatican Physiotherapy Center does with information about you — whether you visit physiotherapyhelp.com, enquire about an appointment, or come to the clinic for treatment.
Effective from 15 September 2026. We are the controller of this information. Our clinic is at Office No. 809, Fakhruddin Properties, Abraj Street, Sheikh Zayed Road, Dubai, United Arab Emirates.
The law this policy follows
We are based onshore in Dubai, so the following apply to us:
- Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, in force since 2 January 2022
- Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields, and its implementing regulations
- Dubai Health Authority regulations governing licensed health facilities and patient records
Where those rules give you stronger protection than this policy describes, the law applies.
What we collect
If you only browse the website. Pages you visit, the approximate region you visit from, your device and browser type, and how you reached us. This arrives through cookies and analytics and is not linked to your name.
If you contact us or request an appointment. Your name, email address, telephone number, the service you’re interested in, and anything you choose to write in the message field.
If you become a patient. A clinical record: your medical history, the findings of your assessment, measurements taken during treatment, your treatment plan and progress, correspondence with your doctor or surgeon, insurance and Emirates ID details, and appointment and payment history.
If you apply for a job. Your CV and the information in it, and anything discussed during interview.
You don’t have to give us any of it. But we can’t treat you without a clinical record, and we can’t process an insurance claim without your policy details.
Why we hold it, and on what basis
We use your information to assess and treat you, to run your appointments and billing, to answer your enquiries, to claim from your insurer where you ask us to, to meet our record-keeping obligations to the Dubai Health Authority, and to improve how the clinic runs.
Under the PDPL, our default basis for processing is your consent, which you give when you complete our intake forms. We also rely on the exceptions the law allows, including where processing is necessary to protect your vital interests, to meet a legal obligation, to provide a health service, or to establish or defend a legal claim.
We do not sell your information. We do not use your clinical record for marketing.
Health information gets extra protection
Your clinical record is sensitive personal data. Only the therapists treating you and the administrative staff who need it for scheduling, billing or insurance can see it. Access is logged.
The Health Data Law requires that health data relating to health services provided in the UAE is stored and processed inside the UAE, unless one of the exceptions set out by the Ministry of Health and Prevention applies. Our clinical systems are hosted accordingly. Where a supplier outside the UAE is involved in any part of that processing, we rely on one of those exceptions and keep a record of which one.
Please don’t send clinical details through the website form or by email. Ordinary email is not a secure channel and is often hosted outside the country. Tell us the service you need and we’ll take the clinical history properly at your appointment.
Who else sees it
We share your information only where we need to:
- the therapist treating you, and clinic staff handling your appointment
- your insurer or its claims administrator, where you ask us to bill them
- your doctor, surgeon or other treating clinician, with your consent
- the Dubai Health Authority, the Ministry of Health and Prevention, or another regulator, where the law requires it
- our IT, hosting and accounting suppliers, who are bound to confidentiality and may only act on our instructions
- a court or law-enforcement authority, where we are legally obliged
Nobody else. We don’t pass your details to advertisers or data brokers.
Cookies and analytics
physiotherapyhelp.com uses cookies to keep the site working, to remember your preferences, and to understand which pages people find useful. You can refuse or delete cookies in your browser settings; the site will still work, though some things may be less convenient.
If we run analytics or advertising tools, they are listed in the cookie banner and you can decline them there. Analytics data is not connected to your clinical record.
How long we keep it
We keep patient records for at least the minimum period the Dubai Health Authority requires for licensed facilities, counted from your last appointment, and longer where a claim or investigation is open.
Enquiries that don’t turn into appointments are deleted within [XX] months. Unsuccessful job applications are deleted within [XX] months unless you ask us to keep them on file. Accounting records are kept for the period required by UAE tax and commercial law.
Your rights
Under the PDPL you can ask us to:
- tell you what information we hold about you and give you a copy
- correct anything inaccurate or incomplete
- delete information we no longer have a lawful reason to keep
- restrict or stop a particular use of it
- transfer it to another provider in a structured, machine-readable format
- stop processing based on consent, by withdrawing that consent
Two limits worth knowing. Withdrawing consent doesn’t undo processing we already carried out lawfully. And we can’t delete a clinical record while the law still requires us to retain it — in that case we’ll restrict its use instead and tell you why.
Write to info@physiotherapyhelp.com or call 04 263 3146. We’ll respond within one month. If you aren’t satisfied, you can complain to the UAE Data Office.
Keeping it safe
Clinical systems sit behind access controls and are available only to named staff. Paper records are locked. The website runs over an encrypted connection. Staff are bound by confidentiality obligations that continue after they leave.
If a breach happens that puts your privacy or security at risk, we will notify the UAE Data Office and, where the law requires it, you.
Children
We treat patients under 18 with the consent of a parent or legal guardian, and the same consent covers their information. The website isn’t directed at children, and we don’t knowingly collect their details through it.
Changes to this policy
If we change how we handle your information, we’ll update this page and change the effective date at the top. Material changes will be flagged on the website.
Contact us
Vatican Physiotherapy Center
Office No. 809, Fakhruddin Properties
Abraj Street, Sheikh Zayed Road
Dubai, United Arab Emirates
Telephone: 04 263 3146
Email: info@physiotherapyhelp.com
Ghazi.nasser@physiotherapyhelp.com
Questions about any of this?
Call the clinic or send us a message and we’ll explain it in plain language.