Clinics share sensitive data with their suppliers
Unclear retention rules create legal risk for the clinic. We state what we collect when you contact us, why we hold it and when we delete it.
We answer every data request within 30 days. Version dated 1 August 2026.
Who controls your data
Branday Medical Marketing FZ-LLC, licence 47024835, registered at FDCW1044, Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates, controls the data collected when you contact us.
You reach our data contact through any channel listed on this website. We answer data requests within 30 days.
How you can reach us
This website does not collect data through forms. You contact us directly, by WhatsApp, by phone call, or by Telegram, using the contact details listed on this website.
Because these are personal messaging and calling channels, what you send us is private correspondence between you and BRANDAY, not data submitted through an automated system.
What we collect
When you write to us on WhatsApp or Telegram, we receive your phone number, your profile name and photo if you have set one, and the text of your messages.
When you call us, we receive your phone number and the content of the call.
We collect no patient data through any channel. Please do not send patient records, medical histories or images of patients to us.
Our server logs record your IP address, your browser type and the pages you open when you visit this website. We keep these logs for 12 months for security and traffic analysis.
Why we process it
We process your details to answer your enquiry, to prepare a diagnostic, to send a proposal and to meet our record keeping duties in the United Arab Emirates.
Our legal basis is your consent, given when you message or call us first, and our contractual and legal obligations once we start work together.
We send marketing email only to clinics that ask for it. Every marketing email carries an unsubscribe link.
How long we keep it
We keep enquiry data from WhatsApp, Telegram and phone calls for 24 months from your last contact with us, then we delete it.
We keep contract and invoice records for 5 years, as UAE commercial record keeping rules require.
We delete project working files within 30 days of a written deletion request, except records we must retain by law.
Who else sees it
We share data with the processors that run our website hosting and our analytics.
Each processor works under a written agreement that limits use of the data to our instructions.
Some processors store data outside the United Arab Emirates. In those cases we rely on contractual safeguards that meet UAE cross border transfer requirements under Federal Decree Law 45 of 2021.
We never sell your data and we never pass it to advertisers.
Your rights
Under UAE data protection law you may request access to your data, correction of inaccurate data, deletion, restriction of processing, transfer of your data to another provider, and withdrawal of consent.
Send any request through any channel listed on this website, with the words Data request. We verify your identity before we act, then we respond within 30 days.
If you consider our response inadequate, you may raise a complaint with the UAE Data Office.
Cookies
We use functional cookies that keep the site working and analytics cookies that count visits.
You block or delete cookies in your browser settings. The site works without analytics cookies.
Security
We encrypt data in transit with TLS, we limit access to the people working on your project, and we review access rights every quarter.
If a breach affects your data, we notify you and the UAE Data Office without undue delay.
Changes to this policy
We update this policy when our processing changes. The version date sits at the top of this page.
Material changes appear on this page before they take effect.