Legal

Privacy Policy

A plain-English explanation of how we handle your information. The short version: this website has no database and we don't store your data — the contact form simply emails your details to our team so we can get back to you.

Last updated: 16 May 2026

This Privacy Policy explains how cliniMetrics, a service of CS Business Technologies FZ LLC ("cliniMetrics", "we", "us", or "our"), handles personal data in connection with the website https://www.clinimetrics.ae/ (the "Site"). It is written to align with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and reflects data protection principles common across the GCC.

01 Summary

We've kept this deliberately simple because our handling of data is simple:

No database, no stored profiles. This Site does not run a database and does not store visitor or customer records. When you submit the contact form, the details are sent to us as an email so a person can reply to you — nothing is written to a data store on the Site.

The rest of this policy gives the detail required by the PDPL and explains the limited situations where third parties (such as our email and analytics providers) are involved.

02 Scope & Legal Basis

This policy applies to personal data we process about visitors to this Site and prospective customers who contact us through it. It is grounded in the principles required by the PDPL — lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

Where a clinic operates within a UAE financial free zone (such as the DIFC or ADGM) or another GCC jurisdiction, additional or differing data protection rules may apply to that clinic's own activities. This policy governs our handling of data as described here; it does not replace the privacy obligations a clinic owes to its own patients.

03 Who We Are (Data Controller)

For personal data submitted through this Site, the data controller is:

04 Personal Data We Collect

Information you submit through the contact form

When you request a demo or contact us, you choose to provide:

  • Your name
  • Clinic or organisation name
  • Email address
  • Phone number

To help us respond and to deter automated abuse, the email generated by the form also includes basic technical context: the submission date and time, the originating IP address, and an approximate country derived from that IP address. A Google reCAPTCHA check is performed at submission to confirm the request is not automated.

Information collected automatically by analytics

Like most websites, the Site uses analytics tools that collect standard technical and usage data such as IP address, browser and device type, pages viewed, and time and date of visit. This is described further in Section 14.

05 How We Use Personal Data

We use the information you submit only to:

  • Respond to your demo request, quote, or enquiry and arrange a demonstration
  • Communicate with you about your request and the Service
  • Protect the form against spam and automated abuse

We use analytics data only to understand, in aggregate, how the Site is used and to improve it. We do not sell personal data, and we do not use the contact details you submit for unrelated third-party marketing, consistent with UAE consumer protection rules restricting the use of consumer data for marketing without consent.

06 Lawful Basis for Processing

Under the PDPL we rely on a lawful basis for each activity:

  • Consent — when you choose to submit the contact form, and for non-essential analytics/cookies; you may withdraw consent at any time
  • Legitimate interests — to secure the Site and the form against abuse, and to understand aggregate usage, where not overridden by your rights
  • Legal obligation — where processing is required to comply with applicable law

07 No Database & No Data Storage

This is central to how cliniMetrics operates and we want to be explicit about it:

  • The Site does not operate a database. There is no account system and no stored record of visitors or enquiries on the Site.
  • Submitting the contact form does not save your data to the Site. It generates an email to our team containing the details you entered, purely so a person can contact you back.
  • Once that email is delivered, your information lives only in our email inbox as ordinary business correspondence, handled like any email you might send us directly.
  • A confirmation email may also be sent to the address you provide, so you have a record that your request was received.

In short: we don't build profiles, we don't retain a searchable store of your data, and there is no website database to breach. Your enquiry is treated as an email and nothing more.

Because the information is held only as email correspondence, "retention" simply means our normal handling of business email. You can ask us to delete the email containing your details at any time (see Section 11).

08 Sharing & Service Providers

We do not sell or trade personal data. A limited number of third parties are necessarily involved in delivering the Site:

  • Email delivery — our email/SMTP provider transmits and stores the enquiry email as part of normal email service
  • Google reCAPTCHA — used to verify form submissions are human and block automated abuse
  • Google Analytics & Tag Manager — used for aggregated website analytics
  • Authorities — only where disclosure is required by law, regulation, or valid legal process

Note: Google reCAPTCHA and Google Analytics involve Google processing technical data under its own terms. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

09 International Data Transfers

We are based in the United Arab Emirates. The enquiry email is processed wherever our email provider operates, and analytics/reCAPTCHA data may be processed by Google outside the UAE or your country of residence. Where personal data is transferred across borders, we rely on providers that offer an adequate level of protection or apply appropriate safeguards, consistent with the PDPL's cross-border transfer requirements. By submitting the form you understand your details may be transmitted and processed in this way.

10 Security

We apply technical and organisational measures proportionate to our limited processing, including encryption of the Site in transit (HTTPS), server-side validation of form input, anti-abuse protections (reCAPTCHA, rate limiting, and anti-forgery tokens), and restricting access to the enquiry inbox to authorised personnel.

No method of transmission or electronic storage is completely secure, so while we use commercially reasonable measures we cannot guarantee absolute security. If a personal data breach occurs that is likely to cause harm, we will act and make notifications in line with applicable UAE data protection requirements.

11 Your Rights

Subject to applicable law and certain exceptions, you have the following rights under the PDPL and aligned GCC frameworks:

Right to accessAsk whether we hold an email containing your data and request a copy.
Right to rectificationAsk us to correct inaccurate details you sent us.
Right to erasureAsk us to delete the email containing your enquiry.
Right to restrictAsk us to limit how we use your information in certain cases.
Right to objectObject to processing, including any profiling or marketing.
Right to portabilityReceive the details you provided in a usable format.
Right to withdraw consentWithdraw consent at any time, without affecting prior lawful processing.
Right to complainLodge a complaint with the competent supervisory authority.

To exercise any right, contact us using the details in Section 16. Because your data is held only as email correspondence, requests are usually straightforward to action. We may need to verify your identity and will respond within the timeframe required by applicable law.

12 The cliniMetrics Dashboard Solution

cliniMetrics is a clinic performance dashboard built around the operational metrics a clinic chooses to track. The solution is not designed as a patient medical-records system, and we do not operate a central database of clinic or patient data on this Site or through it.

Where a clinic uses the dashboard, the clinic remains responsible, as controller, for the lawfulness of the data it chooses to work with and for its obligations to patients — including under the UAE Federal Law No. 2 of 2019 concerning the use of ICT in health fields and other applicable healthcare and confidentiality laws. We support clinics in understanding the data-handling model during onboarding so it fits their own compliance position.

For clinics: ensure your own patient privacy notices and consents cover the operational use of data within a performance dashboard. We're glad to assist your assessment during onboarding.

13 Children's Data

This Site and our sales process are directed at clinic management professionals, not children, and we do not knowingly collect personal data from children through this Site. If you believe a child has provided personal data via this Site, contact us and we will delete the relevant email.

14 Cookies & Analytics

The Site uses cookies and similar technologies to operate correctly, secure the form, and understand usage. This includes Google Analytics and Google Tag Manager for aggregated analytics, and Google reCAPTCHA to protect the form from automated abuse. These do not create a stored profile of you on our Site.

You can control or delete cookies through your browser settings. Disabling some cookies may affect how the Site functions. Where required, non-essential analytics technologies are used on the basis of your consent, which you may change at any time.

15 Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or in applicable law, including developments under the PDPL and its executive regulations. We will post the updated policy here and revise the "Last updated" date above. Where changes are significant, we will provide a more prominent notice. Please review this page periodically.

16 Contact & Complaints

For any question about this Privacy Policy, to exercise your rights, or to ask us to delete the email containing your enquiry, please contact us:

cliniMetrics — CS Business Technologies FZ LLC

info@clinimetrics.ae

If you are not satisfied with our response, you may have the right to lodge a complaint with the UAE Data Office or the competent data protection authority in your jurisdiction.