Privacy Policy

Yoyime Clinic respects your privacy. As a healthcare provider, we understand that the information you share with us — about your identity, your health, your treatments and your payments — is personal, and in many cases sensitive. This Privacy Policy explains what information we collect, why we collect it, how we protect it, who we may share it with, and the choices and rights available to you.

It covers information collected through our website, WhatsApp, phone calls, email, online forms, appointment booking channels, clinic visits, consultations, treatment records, payment channels and related services. We handle this information with confidentiality and care, guided by the principles of applicable UAE data protection law — including the UAE Personal Data Protection Law — and the confidentiality expectations that apply to healthcare providers in Dubai.

Yoyime Clinic
Yoyimé Clinic – 106 Salah Al Din St, Deira, Dubai, United Arab Emirates
Website: https://yoyimeclinic.com
Phone: +971 4 884 3396
WhatsApp: +971 50 225 7535
Email: hello@yoyimeclinic.com

This Policy applies to:

• visitors to our website;
• patients receiving consultations, treatments or services at the clinic;
• prospective patients making enquiries;
• anyone booking, changing or cancelling appointments;
• anyone contacting us through WhatsApp, phone, email, social media or online forms; and
• anyone purchasing or using offers, packages, vouchers or clinic services.

This Policy should be read together with our Terms & Conditions and any consent forms you sign at the clinic.

We collect only the information we need to provide safe care and run the clinic properly. Depending on how you interact with us, this may include:

A. Identity and Contact Information

• Name
• Phone number and WhatsApp number
• Email address
• Nationality, where required
• Emirates ID or passport details, where legally or clinically required
• Age or date of birth, where required

B. Appointment and Enquiry Information

• The service or treatment you are interested in
• Preferred appointment date and time
• Branch or location preference, if applicable
• The details of your enquiry
• Your communication history with the clinic

C. Health and Treatment Information

• Medical history and dental history
• Allergies and current medication
• Pregnancy or breastfeeding status, where relevant to treatment
• Skin type and skin conditions
• Previous treatments and procedures
• Clinical notes, assessments and treatment plans
• Signed consent forms
• Pre-treatment and post-treatment (aftercare) instructions
• Before-and-after clinical photographs, where required for your care and taken with your consent

D. Payment and Billing Information

• Invoices and receipts
• Payment confirmations and transaction references
• Payment method used
• Instalment provider information (such as Tabby), if applicable

Card payments are processed by banks and licensed payment providers. Full card details are handled by those providers as part of processing your payment. Yoyime Clinic does not store full card numbers on its own systems.

E. Website and Technical Information

• IP address, device type and browser
• Pages visited, time spent and referral source
• Cookies and similar technologies
• Analytics data about how the website is used

F. Marketing and Communication Information

• Your consent and communication preferences
• Responses to campaigns or offers
• Reviews and testimonials you choose to share
• Messages sent to our social media accounts
• Your promotional opt-in or opt-out status

We collect information directly from you and through the tools we use to serve you, including: website and booking forms; WhatsApp messages; phone calls; email; social media messages; in-clinic registration; consultation and consent forms; payment links and payment confirmations; third-party booking, payment or CRM platforms used by the clinic; and analytics tools such as Google or Meta tools, where applicable.

We use your information for clear, practical purposes connected to your care and our services:

• To respond to your enquiries and messages
• To book, confirm, change and manage appointments
• To confirm your identity where needed
• To provide consultations and treatments
• To assess your medical suitability for treatments
• To create and update your treatment plan
• To create and maintain your patient records
• To process payments and issue invoices and receipts
• To provide aftercare guidance and follow-up
• To send appointment confirmations, reminders and service messages
• To receive, review and respond to complaints
• To meet our legal, regulatory and record-keeping obligations
• To review and improve our services and patient experience
• To send marketing communication — only where permitted and, where required, with your consent
• To protect the clinic, our patients and our staff from fraud, misuse or unsafe behaviour

Health information deserves — and receives — a higher standard of care:

• All health and treatment information is treated as confidential.
• Access is limited to authorised clinical and administrative staff who need it to deliver or support your care, manage bookings, process payments, meet compliance obligations or assist you.
• Health data is never used for marketing purposes without your consent.
• Clinical photographs are handled carefully, stored as part of your medical record, and used for assessment, treatment planning and progress tracking.
• Any use of your images or treatment details for marketing or social media requires your separate written consent, and you are free to refuse — refusing will never affect your care.

• By submitting a form, booking an appointment, contacting the clinic or receiving our services, you allow us to process your information for the service-related purposes described in this Policy.
• Certain treatments require separate, specific medical consent, which will be explained and documented before the treatment is performed.
• Clinical photography requires your consent where applicable, and marketing use of any image always requires separate written consent.
• Marketing communication requires your consent where applicable law requires it.
• You may withdraw your consent at any time by contacting us. Withdrawal will not affect processing that has already lawfully taken place, and please note that withdrawing certain consents may limit our ability to provide some services — for example, we cannot perform a treatment without the required medical consent, and we must retain medical records for legally required periods even after consent is withdrawn.

We use the channels you contact us on — including WhatsApp, phone calls, SMS and email — to send service-related communication such as:

Promotional messages are sent only where permitted and, where required, with your consent, and you may opt out of them at any time (see Clause 14).

Please note that WhatsApp is a third-party platform with its own security practices and privacy policy. While it is a convenient way to book and communicate, we recommend that you avoid sending unnecessary sensitive or detailed medical information over WhatsApp unless our team asks for it as part of your care.

• appointment confirmations and reminders;
• treatment instructions and preparation guidance;
• invoices and payment confirmations;
• aftercare messages and follow-up; and
• important service updates.

• Clinical photographs or videos may be taken for assessment, treatment planning, progress tracking and your medical records, with your consent.
• Use of your photos, videos, name or treatment details for marketing, social media or promotional purposes requires your separate written permission, requested and documented before any such use.
• You may refuse marketing use at any time — including after previously agreeing — and your refusal will never affect your treatment or how you are cared for.
• Testimonials and reviews must be voluntary and truthful, and you will never be pressured to provide one.
• Clinical photographs that form part of your medical record may need to be retained by the clinic for legally required record-keeping periods, even where marketing consent is refused or withdrawn.

Yoyime Clinic does not sell patient data. We share information only when necessary, only what is needed, and only with parties who are required to protect it:

• Authorised doctors, nurses, therapists and clinic staff involved in your care or its administration
• Laboratories, imaging providers or referral doctors, where required for your treatment
• Payment gateways, banks and instalment providers (such as Tabby), where you choose those payment methods
• Insurance providers, where applicable and where you use insurance (see Clause 20)
• IT, CRM, website, booking and cloud service providers who support our systems under appropriate confidentiality obligations
• Delivery or courier providers, if products are delivered to you
• Legal, accounting or other professional advisors, where needed
• Government, regulatory or healthcare authorities, where the law requires it
• Emergency contacts or emergency services, where necessary to protect your safety or the safety of others

Serving you involves certain third-party platforms and tools — which may include WhatsApp, Google Maps, Google Analytics, Meta platforms (Facebook and Instagram), payment gateways, booking systems, CRM systems, and email or SMS providers.

Each of these platforms operates under its own privacy policy and security standards, which we encourage you to review. While we choose our providers with care, we are not responsible for the independent data practices of third-party platforms.

Our website may use cookies and similar technologies to:

• make the website function properly;
• remember your preferences;
• understand how visitors use the website through analytics; and
• support advertising measurement through marketing pixels, where applicable.

You can control or delete cookies through your browser settings; disabling some cookies may affect how parts of the website work.

• With your consent where required, we may send you offers, educational content, service updates and clinic news by WhatsApp, SMS, email or other channels.
• You can unsubscribe or opt out of promotional communication at any time by contacting us or using the opt-out option provided. Service messages necessary for your care (such as appointment confirmations and aftercare instructions) will still be sent.
• Our medical advertising is handled responsibly: we do not use patient health data for marketing without consent, and our marketing does not guarantee treatment results — outcomes are individual and are discussed honestly during consultation.

We protect your information using reasonable administrative, technical and physical safeguards, including:

Honesty matters here too: no method of transmission or storage can be guaranteed to be completely secure, and we do not promise absolute security. We work to protect your information with appropriate care, and we recommend that you also use secure channels and avoid sharing unnecessary sensitive information online.

• access controls, so records are available only to authorised staff who need them;
• secure storage of physical and electronic records;
• confidentiality practices and obligations for our team; and
• careful selection of service providers who support our systems.

• We keep information for as long as necessary for treatment, legal, regulatory, accounting, complaint-handling and operational purposes.
• Medical records are retained for the periods required by applicable UAE healthcare regulations, which may be substantial.
• Marketing-related records are kept until you opt out, or as needed to evidence compliance with your preferences.
• When information is no longer needed, it is deleted, anonymised or securely archived.

Some of the service providers that support our website, communications or administration may store or process data outside the UAE. Where cross-border processing is involved, we take reasonable steps to ensure your information remains protected to an appropriate standard.

We treat health-related information with particular care in this respect, recognising that UAE law places specific requirements and restrictions on storing and transferring health data outside the country.

Subject to applicable law, you may request:

To make a request, contact us using the details in Clause 21. We will respond within a reasonable time and may need to verify your identity first. Please note that some requests may be refused or limited where medical, legal, regulatory or record-retention obligations apply — for example, medical records cannot be deleted before their legally required retention period ends. Where we limit a request, we will explain why.

• Access — a copy of the personal information we hold about you
• Correction — updating of inaccurate or incomplete information
• Withdrawal of consent — where processing is based on your consent
• Deletion — erasure of your information, where legally permitted
• Restriction or objection — limits on certain processing, where applicable
• Marketing opt-out — an end to promotional communication at any time
• Information — an explanation of how your data is used

• Information about patients under the age of 18 (or as otherwise defined under applicable UAE law) is collected with the involvement of a parent or legal guardian.
• Guardian consent may be required before consultations or treatments are provided to a minor.
• Minors' information is handled with particular care and used only for the purposes necessary for their care, safety and our legal obligations.

If insurance services are offered or used at Yoyime Clinic, relevant information — such as identity details, treatment information and billing records — may be shared with your insurance provider for eligibility checks, approvals, claims processing and billing. Such sharing is limited to what the insurance process requires.

If you have a question about this Policy, want to access or correct your information, wish to withdraw marketing consent, or want to raise a privacy concern or complaint, please contact us. We will review your request professionally and respond fairly.

Privacy Contact: Clinic Administration
Email: hello@yoyimeclinic.com
Phone: +971 4 884 3396
WhatsApp: +971 50 225 7535
Address: Yoyime Clinic, Yoyimé Clinic – 106 Salah Al Din St, Deira, Dubai, United Arab Emirates

If you remain unsatisfied after our internal process, you may refer the matter to the competent authorities in the UAE.

Our website may contain links to third-party websites and platforms. Yoyime Clinic is not responsible for the privacy practices or content of external sites. We encourage you to read the privacy policy of any website you visit.

We may update this Policy from time to time — for example, to reflect changes in our services, systems, providers or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. Your continued use of our website or services after an update means you have had the opportunity to read the revised Policy. Where a change significantly affects how your information is used, we will take reasonable steps to bring it to your attention.

Yoyime Clinic
Yoyimé Clinic – 106 Salah Al Din St, Deira, Dubai, United Arab Emirates
Phone: +971 4 884 3396 | +971 50 225 7535
WhatsApp: +971 50 225 7535
Email: hello@yoyimeclinic.com
Website: https://yoyimeclinic.com

Your privacy matters to us. Yoyime Clinic is committed to handling patient information with care, confidentiality and respect — because trust is part of good healthcare, not separate from it.