Effective: 1 March 2025
This Privacy Notice explains how Dr Salam Jibrel Medical Center collects, uses, protects, and shares your personal and medical information in compliance with Bahrain’s Personal Data Protection Law (Law No. 30 of 2018).
1. Who We Are
Dr Salam Jibrel Medical Center (“the Centre”) is the Data Controller for your personal data. We are a private medical centre specialising in fertility treatments, obstetrics, and gynaecology in the Kingdom of Bahrain.
2. Information We Collect
We collect information directly (registration, consultations, forms), indirectly (referring clinicians), and automatically (website browsing):
- Identity & Contact: Full name, date of birth, CPR/passport number, address, nationality, phone, email, emergency contacts
- Medical & Health: Medical history, diagnoses, test results, treatments, medications, allergies, reproductive history
- Financial & Insurance: Insurance provider/policy, payment details, billing address, transaction records
- Technical & Website: IP address, browser/device type, pages visited, referral source, cookie identifiers
- Communications: Enquiry forms, email correspondence, call recordings, feedback, survey responses
3. Special Category (Sensitive) Data
As a fertility centre, much of our data is classified as “sensitive personal data” under the PDPL, including health data, reproductive/sexual health, genetic data, and biometric data (e.g. ultrasound imagery). We only process sensitive data with your explicit written consent, for medical care by a licensed professional, or to protect vital interests.
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Providing medical care and fertility treatments | Medical necessity |
| Appointment management and scheduling | Contractual |
| Communication (reminders, results, enquiries) | Contractual |
| Billing, payment, and insurance claims | Contractual / Legal |
| Regulatory compliance (MOH, NHRA) | Legal obligation |
| Quality, safety, and clinical audit | Legitimate interest |
| Anonymised research and website analytics | Legitimate interest |
| Marketing communications | Consent |
We will never sell your personal data or use it for third-party targeted advertising without explicit consent.
5. Sharing Your Information
We share data only where necessary or legally required, with: your treating clinical team, referring/receiving clinicians, diagnostic and laboratory services, pharmacies, insurance providers (with your authorisation), IT service providers, regulatory authorities, and professional advisors. We do not share data with third parties for their own marketing purposes.
6. International Transfers
Bahrain’s PDPL generally prohibits transfers outside the Kingdom without specific consent. We will always obtain written consent before transferring data abroad unless a legal exception applies.
7. Data Retention
| Record Type | Retention Period |
|---|---|
| Patient medical records | 10 years from last contact |
| Fertility treatment records | 25 years minimum |
| Records relating to a child born from treatment | Until child reaches 25 |
| Financial and billing records | 7 years |
| Enquiry/contact forms (non-patients) | 12 months |
| Website analytics data | 13 months (anonymised) |
8. Data Security
We implement access controls, encryption (TLS/AES), secure physical premises, staff training, third-party due diligence, incident response procedures, and regular security reviews.
9. Your Rights
Under Bahrain’s PDPL, you have the right to:
- Be informed about how your data is used
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase data where no longer necessary
- Object to processing based on legitimate interests or direct marketing
- Withdraw consent at any time
- Restrict processing while a dispute is resolved
- Complain to the PDPA
Contact the DPO to exercise your rights. We respond within 30 days.
10. Cookies
Our website uses cookies. A consent banner appears on first visit. See our Cookie Policy for full details.