Privacy Policy

Introduction

This Privacy Policy explains how information is handled on this website, the personal website of Dr. Alejandro Molina, Consultant Urologist & Andrologist, practicing at NMC Royal Hospital Khalifa City, Abu Dhabi, United Arab Emirates. This website is independent of NMC Royal Hospital and does not act on its behalf, except where explicitly stated.

Information We Collect

When you submit the “Book a Consultation” form on this website, we collect your full name and email address, and, only if you choose to provide it, a general topic you’d like to discuss (selected from a short list, such as “Male Hormonal Health” or “General Urology”) — this field is optional, and you may select “Prefer not to say” instead. We do not ask for and do not collect symptoms, a diagnosis, medical history, medications, test results, or clinical records through this website.

We are conscious that, because this is a medical practice’s website, even a general topic selection can be sensitive — it may indicate an area of health interest, even though it is not a diagnosis and is entirely optional. This field is handled with the same access controls as your other contact details (see “Data Security” below), is never combined with the analytics described below, and — as with any data you submit through this form — you may ask us to delete it at any time (see “Your Rights”).

We also record where a visit or enquiry came from — such as the referring website, search engine, or campaign link (UTM parameters) — and, where applicable, which page on this site linked you to the booking page. This is used only to understand which channels bring visitors to the site, not to build a profile of you as an individual.

Standard technical information (such as browser type and general usage data) may also be logged automatically by the hosting infrastructure that serves this website, as is typical for any website.

Cookies and Analytics

This website uses a small number of first-party, non-advertising cookies, none of which are used for advertising or shared with any advertising network. Two remember where a visit first came from and most recently came from (e.g. a search engine, social media, or a specific campaign link), and a third remembers which page linked you to the booking page — these help us understand which channels bring enquiries, expire after 180 days (30 minutes for the booking-referral one), and store only a short code (such as “google_business” or “direct”) and a page path — never your name, email, or phone number. Like the anonymous identifier described below, these are only set once you accept analytics cookies via the banner shown on this site.

A separate anonymous identifier (a random code, not derived from any personal information) is used, subject to your consent below, to count page views and button clicks without identifying you individually. Anonymous, aggregate analytics events (such as a page view or a “Book a Consultation” button click) are only recorded once you accept analytics cookies. No symptom, health, or appointment information is ever sent to analytics, and analytics events are never linked to the contact details you submit through the booking form.

You can change your cookie choice at any time using the “Cookie Settings” link in the footer of this site, which reopens the same banner shown on your first visit.

Where Information Is Processed

This website is built and hosted on Vercel, and booking/lead and analytics data is stored in a database managed by Supabase. These are the specific infrastructure and database providers currently used to run this website. Based on their currently configured regions, the application itself runs in the United States and the database is located in India — both outside the United Arab Emirates. These providers act only on this website’s instructions, as processors, and do not independently use your data for their own purposes. We use them because they provide the technical infrastructure this website runs on, not as a matter of preference for any particular country, and this section will be updated if that infrastructure changes.

Retention

Booking/lead records that do not result in a confirmed consultation are kept for up to 12 months from submission, after which they are eligible for deletion. Analytics data (the anonymous identifier and event records described above) is kept only for as long as reasonably useful for understanding how the site is used for our current operational needs.

This describes our intended retention practice. Automated, scheduled deletion enforcing it is not yet implemented — this is identified as a follow-up operational requirement, not something already running. Regardless of how long information has been held, you may ask us to delete your information at any time (see “Your Rights”).

This retention approach applies only to information collected through this website. It does not apply to your medical records, appointment history, or any clinical information held by NMC Royal Hospital, which are governed by NMC Royal Hospital’s own policies, not this one.

Booking and Third-Party Links

Submitting the booking form creates a record with this practice’s own systems, used to follow up with you and understand where enquiries come from. It does not, by itself, create an appointment. Clicking “Continue to NMC Booking” (and the “View NMC Profile” link) takes you to NMC Royal Hospital’s official platforms, which operate under their own privacy policy. This website does not process appointment scheduling itself and does not have access to any information you provide on NMC Royal Hospital’s systems.

Data Security

Contact details submitted through the booking form — including the optional topic field described above — are stored in a database that is not directly accessible from the browser: all reads and writes happen through this website’s own server, and the database itself is configured to deny direct access entirely, accessible only through that server. Reasonable technical measures are used to help protect this website more generally. As noted above, this website does not collect symptoms, a diagnosis, medical history, medications, test results, or clinical records.

Your Rights

You may have rights in relation to any personal data processed about you under applicable data protection law in the United Arab Emirates, including the right to ask what information we hold about you, to request its correction or deletion, and to withdraw any consent you have given at any time. Withdrawing consent does not affect the lawfulness of anything already done based on it. For analytics cookies specifically, withdrawal is immediate via the “Cookie Settings” link in the footer. For data you submitted through this website’s booking form, contact us using the details below. For information you provide directly to NMC Royal Hospital as part of booking or attending a consultation, such requests should be directed to NMC Royal Hospital.

Submitting the booking form is consent to that specific purpose — being contacted to facilitate your appointment — and is not consent to receive marketing or promotional communications. This website does not send marketing communications, and would only ever do so on the basis of separate, explicit consent obtained for that specific purpose.

Changes to This Policy

This policy may be updated from time to time. The “Last updated” date above reflects the most recent revision.

Contact

For questions about this policy, please use the contact details provided by NMC Royal Hospital for Dr. Alejandro Molina.