Privacy Policy

1. Who We Are

Yeppeun Skin Clinic is a DHA-licensed aesthetic and dermatology clinic at Villa 124, Jumeirah 2, Dubai, United Arab Emirates.

Contact: +971 54 305 0521
Email: reception@yeppeunskinclinic.com

For privacy questions.

2. Information We Collect

Identity and contact data: name, Emirates ID/passport details (when needed for clinical records), phone, email, address.
Booking and enquiry data: appointment requests, preferred times, messages via website forms, WhatsApp, Instagram, email, or phone.
Health and clinical data: medical history, concerns, photos for clinical assessment, treatment notes, consent records, as needed to provide care.
Payment and admin data: invoices, payment confirmations, package details (payment card data is usually processed by payment providers, not stored fully by us).
Technical data: IP address, browser type, device info, cookies/analytics (if enabled on the website).
Marketing preferences: whether you agree to receive offers, newsletters, or for photos to be used in marketing (separate permission where required).

3. How We Collect Information

Directly from you (forms, bookings, consultations, messaging, calls).
From devices/browsers when you visit our website (cookies and similar tools, if used).
From third parties you interact with on our behalf (for example booking tools, payment providers, ad platforms) where allowed.

4. Why We Use Your Information

To respond to enquiries and provide customer service.
To schedule, confirm, remind, and manage appointments.
To deliver clinical care, maintain medical records, and meet professional/regulatory duties.
To process payments, packages, and invoices.
To improve our website, services, and patient experience.
To send service messages (appointment reminders). Marketing messages only where permitted and you have not opted out.
To protect the Clinic, staff, and patients (security, fraud prevention, dispute handling).
To comply with UAE law, DHA and other regulatory requirements.

5. Legal Bases / Lawful Reasons

Depending on the situation, we process data because: it is needed to provide a service you requested; you gave consent (for example marketing or certain cookies); we have a legitimate interest in running and securing the Clinic and website; or we must meet legal and regulatory obligations (including healthcare record-keeping).

6. Health Information

Health-related information is sensitive and is used for care, safety, and legal compliance.
Access is limited to authorised clinical and admin staff who need it.
Website or social media messages are not a secure substitute for in-clinic records. Avoid posting sensitive health details in public comments.

7. Photos and Media

Clinical photos may be taken for your file and treatment planning.
Marketing use of your images (website, ads, social media) requires your separate permission where required.
You may refuse marketing use without affecting necessary clinical documentation.

8. Sharing Your Information

We do not sell your personal information. We may share it only as needed with:

Licensed practitioners and Clinic staff involved in your care.
Service providers (IT, booking, SMS/email, payment, cloud hosting) under appropriate safeguards.
Professional advisers (legal, accounting) when required.
Regulators, courts, or authorities when required by law.
Third-party platforms you choose to use (WhatsApp, Instagram, Google, payment apps) under their own policies.

9. Cookies and Website Analytics

Our website may use cookies or similar technologies for basic function, preferences, and analytics.
You can control cookies through your browser settings. Blocking some cookies may affect site features.
If we use advertising/analytics cookies, we will do so in line with applicable rules and any consent tools we enable.

11. Data Retention

We keep information only as long as needed for the purposes above, including clinical record retention periods required by UAE healthcare rules, booking/payment records, and legal claim periods. When no longer needed, we delete or anonymise data where practicable.

12. Security

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is 100% secure. Please protect your devices and do not share one-time codes or passwords.

13. Children

Our services are generally aimed at adults. Where a minor is treated, we process data with required parental/guardian involvement and in line with Clinic and regulatory rules.

14. Third-Party Links

Our website may link to other sites or apps. Their privacy practices are their own. Review their policies before sharing information with them.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Continued use of the website or services after an update means you acknowledge the revised Policy, unless applicable law requires otherwise.