Privacy Policy

Effective Date: 1 June 2026
Last Updated: 1 June 2026

This Privacy Policy applies to Doctora Basma Medical Center LLC, a company registered and operating under the laws of the State of Qatar. We are committed to protecting your personal and medical information in accordance with applicable Qatari data protection legislation, including Law No. 13 of 2016 on Personal Data Privacy Protection.

1. Who We Are

Doctora Basma Medical Center LLC ("the Clinic", "we", "us", or "our") is a medical center specialising in dermatology and aesthetic treatments, located at Al Jazira Al Arabiya Street, 52, Doha, Qatar. We operate the website www.basmamedical.qa and provide services under the oversight of the Ministry of Public Health of Qatar (MOPH).

For the purpose of this Privacy Policy, Doctora Basma Medical Center LLC is the data controller of your personal information.

2. Information We Collect

We collect personal information when you interact with us through our website, in person at our clinic, or via telephone or electronic communication. The categories of information we may collect include:

Identity & Contact: Full name, date of birth, gender, nationality, Qatar ID or passport number, phone number, and email address.
Medical & Health Data: Medical history, skin condition details, treatment records, photographs taken for clinical documentation, allergies, and current medications.
Appointment Information: Booking details, consultation notes, and treatment preferences.
Payment Information: Billing details and transaction records. Payment card data is processed by our payment processor and not stored by us directly.
Website Usage Data: IP address, browser type, pages visited, and time spent on the website, collected through cookies and analytics tools.
Communications: Enquiries submitted via our contact form, WhatsApp, or email correspondence.

3. How We Use Your Information

We use your personal information for the following purposes:

To provide medical consultations, diagnoses, and treatments.
To manage your appointments and send reminders or follow-up communications.
To maintain accurate and complete medical records as required by MOPH regulations.
To process payments for services rendered.
To respond to your enquiries and provide customer support.
To send you relevant health tips, promotions, or updates — only where you have given your consent.
To comply with legal and regulatory obligations under Qatari law.
To improve the quality of our services and website experience.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Qatari law:

Contractual necessity: To fulfil the service agreement when you book an appointment or receive treatment.
Legal obligation: To comply with health authority regulations and mandatory medical record-keeping requirements.
Legitimate interests: To operate and improve our clinic and communicate with existing patients.
Consent: For marketing communications or non-essential data uses, where your explicit consent has been obtained.

5. Medical Data & Confidentiality

Your medical records are treated with the highest degree of confidentiality. All clinical staff are bound by professional codes of conduct and applicable Qatari healthcare regulations regarding patient confidentiality. Medical records are never sold, rented, or shared for commercial purposes.

Clinical photographs taken for treatment documentation are stored securely and used solely for your care. They will not be used in any marketing, publication, or research without your separate and explicit written consent.

6. Sharing Your Information

We do not sell your personal data. We may share your information in limited circumstances with:

Treating healthcare professionals involved in your care, including external specialists or laboratories, where clinically necessary.
Ministry of Public Health (MOPH) and other regulatory bodies when required by law or for licensing and inspection purposes.
Technology service providers who assist us in operating our website, booking system, and communications, subject to data processing agreements.
Payment processors to facilitate secure financial transactions.
Legal authorities when compelled by a court order or applicable Qatari law.

7. Data Retention

We retain medical records for a minimum of ten (10) years following your last visit, or as required by MOPH regulations. Website usage data is retained for up to twenty-four (24) months. Marketing consent records are retained until withdrawn.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data management policies.

8. Cookies & Website Analytics

Our website uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. We use:

Essential cookies: Necessary for the website to function correctly.
Analytics cookies: To understand how visitors use our site. Data is collected in an aggregated, anonymised form where possible.
Functional cookies: To remember your language preference and other settings.

You may manage or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of certain features.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include encrypted data storage, access controls, and staff training on data privacy obligations.

No method of data transmission over the internet is entirely secure. While we take all reasonable precautions, we cannot guarantee absolute security of data transmitted to our website.

10. Your Rights

Under Law No. 13 of 2016 on Personal Data Privacy Protection, you have the following rights regarding your personal data:

Right of access: To request a copy of the personal data we hold about you.
Right of correction: To request correction of inaccurate or incomplete data.
Right of deletion: To request deletion of your data, subject to legal and medical record retention requirements.
Right to withdraw consent: To withdraw marketing consent at any time without affecting prior lawful processing.
Right to object: To object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us using the details below.

11. Children's Privacy

We may treat minor patients in accordance with Qatari healthcare regulations. In such cases, personal and medical data is collected and processed with the knowledge and consent of a parent or legal guardian, who holds all applicable data rights on the minor's behalf until the age of majority.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be published on this page with an updated effective date. We encourage you to review this policy periodically.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy, please contact us:

Doctora Basma Medical Center LLC
Al Jazira Al Arabiya Street, 52
Doha, State of Qatar
Email: info@basmamedical.qa
Phone: +974 5137 0088
Website: www.basmamedical.qa