1. Introduction
Welcome to Al Jazeera Medical Center (“we,” “us,” or “our”). We are committed to protecting the privacy and security of your personal and medical data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our clinics, use our digital services, or interact with us, in strict compliance with the State of Qatar Personal Data Protection Law (Law No. 13 of 2016) and the regulations set forth by the Qatar Ministry of Public Health (MoPH).
By using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
To provide you with safe and effective medical care, we collect specific categories of data. Because health data is highly sensitive, we apply the highest level of security and confidentiality to it.
A. Personal Identification Data
- Full name, date of birth, and gender.
- Qatar ID (QID) number, Passport number, or GCC National ID.
- Contact details (phone number, email address, physical address in Qatar).
- Emergency contact information.
B. Medical and Health Data (Sensitive Data)
- Medical history, family history, and current health conditions.
- Diagnoses, treatment plans, prescriptions, and clinical notes.
- Laboratory results, radiology/imaging reports, and vital signs.
- Allergies and adverse reactions to medications.
C. Financial and Insurance Data
- Health insurance provider details and policy numbers.
- Billing information and payment records (processed securely via our payment gateways).
D. Technical and Usage Data
- IP addresses, browser types, and device information when you use our website or patient portal.
- Appointment booking history and communication logs.
3. How We Use Your Information
We use your data strictly for the purposes for which it was collected. We will not use your data for any incompatible purposes. We use your information to:
- Provide Medical Care: Diagnose, treat, and manage your health conditions.
- Administrative Operations: Schedule appointments, manage patient records, and handle billing.
- Insurance Processing: Process claims and communicate with your health insurance provider.
- Legal & Regulatory Compliance: Fulfill mandatory reporting requirements to the Ministry of Public Health (MoPH), the Supreme Council of Health, and other Qatari regulatory authorities.
- Communication: Send appointment reminders, health alerts, and follow-up care instructions.
- Quality Improvement: Analyze anonymized data to improve our medical services and patient care standards.
4. Legal Basis for Processing
Under Qatar’s Personal Data Protection Law, we process your data based on the following legal grounds:
- Explicit Consent: For processing sensitive health data and sharing it with non-health entities (where legally permissible).
- Performance of a Contract: To fulfill our medical service agreement with you.
- Legal Obligation: To comply with MoPH regulations, national health registries, and Qatari laws.
- Vital Interests: In medical emergencies where processing is necessary to protect your life or the life of another person.
5. Data Sharing and Disclosure
We do not sell your personal or medical data. We only share your information with authorized third parties on a strict “need-to-know” basis:
- Ministry of Public Health (MoPH) & Government Authorities: As required by Qatari law for disease surveillance, national health registries, and regulatory audits.
- Health Insurance Companies: To process your medical claims and verify coverage.
- External Laboratories & Pharmacies: If we refer you for external testing or specialized medications.
- Other Healthcare Providers: If you are referred to a specialist or require continuity of care (with your consent, unless an emergency applies).
- IT and Service Providers: Third-party vendors who provide our Electronic Health Record (EHR) systems, cloud hosting, and IT support. These providers are bound by strict confidentiality agreements and Qatari data protection standards.
6. Data Security
We take the security of your data seriously. Al Jazeera Medical Center implements robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security practices align with the guidelines of the Qatar National Cyber Security Agency (NCSA) and the MoPH’s healthcare IT security standards.
- All medical records are stored in secure, encrypted Electronic Health Record (EHR) systems.
- Access to patient data is strictly restricted to authorized medical and administrative staff on a need-to-know basis.
- We utilize secure, localized servers within the State of Qatar wherever possible.
7. Data Retention
We retain your personal and medical data only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations.
- Medical Records: In accordance with MoPH regulations, medical records are retained for a minimum statutory period (typically 5 to 10 years, depending on the record type and patient age) to ensure continuity of care and legal compliance.
- Financial Records: Retained as required by the Qatar Financial and Tax regulations.
- Once the retention period expires, data is securely anonymized or permanently deleted.
8. Cross-Border Data Transfers
As a general rule, your personal and medical data is stored and processed within the State of Qatar. If it becomes absolutely necessary to transfer your data outside of Qatar (e.g., for specialized international medical consultations), we will ensure that the transfer complies with Article 13 of the Qatar Personal Data Protection Law. This includes obtaining your explicit consent and ensuring the receiving country or entity provides an adequate level of data protection, subject to the approval of the Ministry of Communications and Information Technology (MCIT).
9. Your Rights Under Qatari Law
Under Law No. 13 of 2016, you have specific rights regarding your personal data. You may exercise these rights by contacting our Data Protection Officer (DPO):
- Right to Access: Request a copy of the personal and medical data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Restrict Processing: Request that we limit the use of your data in certain circumstances.
- Right to Withdraw Consent: You may withdraw your consent for data processing at any time. Please note: Withdrawing consent for the processing of medical data may prevent us from providing you with safe and effective medical treatment.
- Right to Complain: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Data Protection Committee at the Ministry of Communications and Information Technology (MCIT).
10. Children’s Privacy
If we provide pediatric care, we collect data from minors. In such cases, we collect and process the child’s data with the explicit consent of their parent or legal guardian, in compliance with Qatari family and medical laws.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or Qatari laws. Any material changes will be communicated via our website, patient portal, or direct notification. The “Last Updated” date at the top indicates when the policy was last revised.
12. Contact Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact our Data Protection Officer (DPO) or Privacy Team:
Al Jazeera Medical Center
- Data Protection Officer / Privacy Team: Al Jazeera Medical Center
- Email: info@aljazeeramc.com
- Phone: +974 7000 9673
- Physical Address: Muaither , Doha, State of Qatar
- Working Hours: Saturday to Thursday, 8:00 AM to 10:00 PM
