Privacy Policy

Bliss Now Recovery ("we", "our", "us") is a DHA-licensed integrative recovery clinic operating within UFC Gym, Dubai Silicon Oasis. We are committed to protecting your privacy and handling your personal data in accordance with applicable laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and Dubai Health Authority regulations.

1. Information We Collect

We may collect and process the following categories of personal data:

• Identity information: full name, date of birth, gender, nationality, and Emirates ID or passport number (where required for clinical records)
• Contact information: phone number, email address, and residential address
• Health and wellness information: lifestyle assessments, appointment history, practitioner notes, treatment preferences, and recovery progress
• Insurance information: policy details and claims data submitted for reimbursement purposes
• Booking and scheduling data: appointment dates, times, services selected, and assigned practitioners
• Payment information: transaction records processed through our payment providers
• Communications: records of correspondence including WhatsApp messages, emails, and phone calls where you contact us
• Website usage data: browsing activity, device information, and interaction data collected through cookies and analytics tools

2. Purpose of Data Collection

Your personal data is collected and processed for the following purposes:

• Providing clinical care, treatment planning, and recovery management
• Scheduling and managing appointments
• Processing payments and insurance reimbursement claims
• Communicating with you regarding your care, appointments, and follow-ups
• Maintaining clinical records as required by DHA regulations
• Improving our services and patient experience
• Complying with legal and regulatory obligations
• Sending relevant health and wellness information, where you have opted in

3. Legal Basis for Processing

We process your personal data on one or more of the following legal bases: your explicit consent; the necessity of processing for the performance of a contract (such as providing clinical services you have requested); compliance with legal obligations under UAE law and DHA regulations; and the protection of your vital interests in the context of clinical care.

4. Data Sharing

We do not sell, rent, or trade your personal data. Your information may be shared, where necessary and on a strictly need-to-know basis, with the following parties:

• Licensed practitioners and clinical staff within Bliss Now Recovery for the purpose of delivering care
• Bliss Now Life and affiliated entities for coordinated wellness services
• Third-party booking and scheduling platforms used to manage appointments and client records — your data (including name, contact details, appointment history, and practitioner information) is processed and stored on their systems, and these providers are selected for their compliance with industry-standard security practices
• Insurance companies for claims processing and reimbursement, with your consent
• Trusted service partners (including UFC Gym) strictly for service delivery
• Payment processors for transaction handling
• Dubai Health Authority and other regulatory bodies, as required by law
• Legal advisors or law enforcement, where required by applicable law or court order

All data sharing is limited to what is strictly necessary and is governed by appropriate confidentiality arrangements.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Clinical records are retained in accordance with DHA regulations, which require a minimum retention period following your last consultation. Non-clinical data such as marketing preferences and website analytics are retained for shorter periods and deleted when no longer needed.

6. Data Security

We implement appropriate technical and organisational safeguards to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include access controls, encryption of data in transit, secure storage systems, and regular review of our security practices. Access to patient data is restricted to authorised personnel on a need-to-know basis.

7. Your Rights

Under applicable UAE data protection law, you have the right to:

• Access your personal data and obtain a copy of the information we hold about you
• Correct any inaccurate or incomplete personal data
• Request deletion of your personal data, subject to legal and regulatory retention requirements
• Withdraw consent for processing where consent is the legal basis, without affecting the lawfulness of processing carried out prior to withdrawal
• Object to processing of your data for direct marketing purposes
• Request restriction of processing in certain circumstances
• Data portability — receive your data in a structured, commonly used format

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

8. Cookies and Analytics

Our website uses cookies and similar technologies to improve your browsing experience and to collect anonymised usage data. You can manage your cookie preferences through your browser settings. We use analytics services to understand how visitors interact with our website; this data is aggregated and does not identify individual users.

9. International Data Transfers

Where your data is processed by third-party service providers located outside the UAE, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Children's Privacy

We do not knowingly collect personal data from individuals under the age of 18 without the consent of a parent or legal guardian. Where clinical services are provided to minors, consent is obtained from the accompanying parent or guardian.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Consent

By using our services, booking appointments, or submitting your information through our website or other channels, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.