Privacy policy

1. Data Controller

MEDYRAH BRIDGE – FZCO, IFZA Business Park, Dubai Digital Park, PO Box 342001, Dubai, United Arab Emirates. Privacy contact: info@medyrah.com.

2. Data We May Collect

• Identification and contact data provided in the form, such as name, surname, email, phone number, and country of residence.
• Chosen category: doctor, healthcare professional, or health science student, and basic professional or academic data requested by the form.
• Language, communication preferences, and consent records.
• Technical and security data, such as date and time, IP address where lawful, browser, device, and email verification events.

Medical records, bank details, or full professional documentation are not requested via this provisional link. Patient data must not be entered.

3. Purposes and Legal Bases

• To process and manage the requested registration, verify email, and prepare for future profile activation: performance of the request and pre-contractual or contractual measures, as applicable.
• To protect the form, prevent fraud, maintain acceptance records, and defend claims: legitimate interests and legal obligations.
• To send news, events, courses, benefits, or promotions: consent where required.
• To comply with legal orders and address rights: legal obligation.

4. Recipients

Data may be processed by contracted providers for hosting, forms, email, security, support, and consented analytics, subject to confidentiality and data protection duties. Identifiable profiles will not be shared with hospitals, clinics, universities, recruiters, or other institutions during this provisional phase without specific subsequent authorization or another valid legal basis.

5. International Transfers

MEDYRAH is established in the United Arab Emirates and may use providers located in other countries. Where applicable regulations require it, valid transfer mechanisms and appropriate safeguards will be employed, such as contractual clauses, assessments, and supplementary technical measures.

6. Retention

Registration data will be retained while MEDYRAH prepares and manages the launch and for an initial maximum of 24 months from the last interaction, unless the individual subsequently completes their account, requests deletion earlier, or there is a legal obligation or need to retain evidence for claims. Consent records may be retained for the period necessary to demonstrate compliance. Backups will be deleted according to the provider’s secure cycle.

7. Rights

According to applicable law, individuals may request access, copy, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Withdrawal does not affect prior processing. Requests should be sent to info@medyrah.com and may require identity verification. Complaints may also be filed with the competent data protection authority.

8. Security, Minors, and Changes

MEDYRAH will apply measures proportionate to the risk, such as encryption in transit, access control, credential protection, backups, and incident management. The link is not intended for individuals under 18 years of age. Material changes to this policy will be communicated through appropriate means.