Privacy and Data Protection Policy

Document Ref: FSG-MAR-POL-002

This Privacy and Data Protection Policy establishes the principles, requirements, and controls governing the collection, processing, storage, retention, disclosure, and protection of personal information obtained through the official online platform. We aim to ensure compliance with applicable data protection and privacy laws while safeguarding the confidentiality, integrity, and security of our Users’ information.

1. Purpose

The purpose of this policy is to outline our commitment to privacy and data protection, ensuring all personal data collected through the Website is managed lawfully, transparently, and securely in accordance with relevant regulatory standards.

2. Scope

This policy applies to:

  • All Users accessing or using the official Website.
  • All personal data collected through the Website and associated digital services.
  • All employees, contractors, third-party service providers, and authorized personnel handling personal information on behalf of the laboratory.
  • All systems, databases, applications, and technologies used to collect, process, store, or transmit User information.

3. Responsibilities

3.1. Laboratory Responsibilities

The laboratory shall:

  • Collect and process personal data lawfully, fairly, and transparently.
  • Implement appropriate technical and organizational security measures to protect data.
  • Safeguard User information against unauthorized access, disclosure, alteration, or destruction.
  • Retain information only as necessary for legal, operational, and business purposes.
  • Ensure third parties handling User data comply with strict privacy obligations.
  • Update this Privacy Policy periodically when regulatory or operational requirements change.

3.2. User Responsibilities

Users shall:

  • Provide accurate, complete, and up-to-date information when utilizing our platform.
  • Review the Privacy Policy periodically to stay informed about data practices.
  • Maintain the confidentiality and security of their own devices and internet access.
  • Understand and accept the use of cookies and tracking technologies while using the Website.
  • Refrain from providing false, misleading, or unauthorized third-party information.

4. Definition of Terms and Acronyms

4.1. Technical Terms

  • Applicable Laws: All laws, regulations, rules, and legal requirements applicable to the operation and use of the Website, including electronic transactions, cybersecurity, privacy, and intellectual property laws in the UAE and other relevant jurisdictions.
  • Content: Any information, text, images, graphics, videos, audio, software, code, documents, data, links, or other materials available on, uploaded to, or transmitted through the Website.
  • External Sites: Third-party websites, applications, or online platforms linked to or accessible through the Website.
  • Intellectual Property: Legally protected creations of the mind including copyrights, trademarks, patents, logos, trade names, software, designs, trade secrets, and proprietary information owned or licensed by the organization.
  • Minor: Any individual under the age of eighteen (18) years.
  • Cookies: Small text files stored on a User’s device by the Website to improve functionality, user experience, analytics, or security.
  • Data Breach: Unauthorized access, disclosure, alteration, loss, theft, or destruction of personal or confidential information.
  • Unauthorized Access: Access to the Website, systems, data, or Content without explicit permission or beyond authorized rights.

4.2. Acronyms

  • FSG: First Stem Cell and Genomics Laboratory.
  • UAE: United Arab Emirates.
  • HTTPS: Hypertext Transfer Protocol Secure (Encrypted web communications).
  • TRA: Telecommunications and Digital Government Regulatory Authority.
  • PII: Personally Identifiable Information.

5. Related Policies & Documentation

This privacy policy operates in conjunction with the following corporate documents:

  • FSG-MAR-POL-001: Website Terms and Conditions Policy
  • FSG-MAR-POL-003: Service Payment and Refund Policy
  • FSG-MAR-POL-004: Service Return and Cancellation Policy

6. Core Procedures & Data Handling

6.1. Information Collection

  • Personal information provided voluntarily by Users (including names, contact details, clinical inquiries, and communications) may be collected.
  • Technical and usage information (such as IP addresses, browser types, and navigation paths) is collected automatically during Website access to optimize user experience.
  • Information may be securely obtained from authorized third-party service providers and partners where legally permitted.

6.2. Use of Information

Collected information is strictly utilized to:

  • Provide, maintain, and improve Website services and clinical platform operations.
  • Respond efficiently to User inquiries, support requests, and clinical consultation protocols.
  • Process registrations, portal accounts, and essential corporate communications.
  • Conduct secure analytics, diagnostic performance, and service monitoring.
  • Comply fully with legal, medical, and regulatory obligations within the UAE.
  • Detect, prevent, and mitigate fraud, unauthorized activities, or potential cybersecurity incidents.

6.3. Data Retention & Erasure

  • Personal information is retained only as long as necessary for operational, legal, analytical, backup, and business continuity purposes.
  • Data retention periods strictly comply with local legal and medical operational requirements.
  • Users may request the correction or structural deletion of their personal information where permitted by applicable healthcare and data laws.

6.4. Data Sharing and Disclosure

  • Personal information may be shared strictly with authorized service providers, corporate affiliates, or legal authorities when necessary to fulfill services.
  • We reserve the right to disclose information to comply with legal obligations, judicial proceedings, investigations, or lawful government requests.
  • Non-identifiable, aggregated demographic information may be shared with partners for broader analytics and reporting purposes.

6.5. Cookies and Tracking Technologies

  • The Website utilizes cookies and similar secure tracking technologies to enhance user interaction, persistent sessions, and overall features.
  • Users possess the right to disable cookies through individual browser settings; however, certain premium Website features or secure portals may become unavailable.
  • Third-party analytics tools, including Google Analytics, are implemented to evaluate compiled website usage trends securely.

6.6. Structural Security Measures

  • The laboratory implements strict technical, administrative, and physical safeguards (including encryption, secure firewalls, antivirus protection, monitoring systems, and access restrictions) to protect User data.
  • Despite our comprehensive efforts, no digital transmission or storage system can be guaranteed absolute protection against evolving global cyber threats beyond reasonable technical control.

6.7. External Third-Party Links

  • The Website may contain navigational links to external third-party platforms.
  • The laboratory is not responsible for the privacy practices, tracking methods, or content hosted on external sites. Users access third-party platforms at their own risk.

7. Policy Updates & Governance

  • We reserve the right to amend, adjust, or update this Privacy Policy at any given time to align with technical or legal developments.
  • Updated versions become active immediately upon publication on the Website. Continued usage of the platform constitutes implicit acceptance of the active policy.

8. Regulatory References

This policy framework is built in alignment with:

  • United Arab Emirates Federal Data Protection Regulations.
  • UAE ICT and TRA Digital Governance Regulations.
  • Applicable local Cybersecurity and Electronic Transactions Laws.
  • International Healthcare Data Protection Best Practices.

9. Contact & Support

By accessing or utilizing this Website, you acknowledge and agree to the terms outlined in this Privacy and Data Protection Policy. If you do not agree with these terms, please discontinue the use of our digital platforms immediately. For privacy queries, please reach out via our official contact channels.