1. Who we are
Baseline Bloods is operated by [to be confirmed], licensed by [to be confirmed] under licence [to be confirmed].
Registered address: [to be confirmed].
For privacy questions, contact us at [to be confirmed].
2. What we collect
- Booking details: your name, the phone number your WhatsApp message comes from, your area and collection address, your preferred date and slot, and the panel you choose.
- Health information: your sample, your results, your report, and anything you tell our clinicians, including consultation notes.
- A child's details and results, provided by their parent or guardian.
- Payment details, handled by our payment provider. We don't store full card numbers.
- Basic website data: technical logs, and preferences such as light or dark mode saved on your device.
3. How we use it
We use your information to arrange your collection, process your sample, prepare and deliver your report, have a physician review it and follow up urgent results.
We also use it to run consultations, provide support, and send retest reminders if you ask for them.
We use it to meet our legal and regulatory duties, and we improve the service using de-identified data.
4. Legal basis
We rely on your consent (explicit consent for health data), on providing the service you asked for, on our legal obligations, and on your vital interests when a result needs urgent attention.
You can withdraw consent at any time. That doesn't undo what's already been done, but we may not be able to continue the service.
6. Where it's stored
Your health data is stored and processed in the UAE, as UAE health data law requires, except where the law allows otherwise.
7. How long we keep it
We keep health records for at least 25 years after your last test, as UAE law requires.
We keep everything else only as long as we need it: [to be confirmed].
8. How we protect it
Access is limited to people who need it. Our staff and partners are bound by confidentiality obligations, and we use technical safeguards suited to health data.
9. Your rights
You can ask to access, correct or delete your data (except health records we must legally keep), to restrict or object to processing, to receive a copy, and to withdraw consent.
You can also complain to the UAE Data Office or to the health authority in your emirate: DHA in Dubai, or MOHAP in the Northern Emirates.
How to ask, and how quickly we respond: [to be confirmed].
10. Children
A parent or guardian consents and acts for anyone under 18. This website isn't aimed at children.
11. Marketing
We only send marketing with your consent, and you can opt out at any time.
13. Changes
If we change this policy, we'll update the date above and tell you about significant changes.
14. Contact
WhatsApp: [to be confirmed]
Email: [to be confirmed]
Registered address: [to be confirmed]