Privacy Consent Form

• At myAster Platform (hereinafter referred to as “The Company,” “We,” or “Us”), the protection of your Personal Data is an essential part of our commitment to delivering high-quality care. We understand the importance of maintaining your Privacy and are committed to managing your Personal Data with the highest level of integrity and transparency.
• We collect, use, and disclose your Personal Data in a responsible manner, in accordance with applicable laws and regulations. This includes Processing information to provide our services effectively, meet regulatory and legal obligations, and support operational requirements that enhance your experience with us. Your consent plays a vital role to comply with the obligations stated herein above
• All Staff members who come in contact with your Personal Data are aware of the sensitive nature of the data that you have disclosed to us. They are all trained in the appropriate use and protection of your Personal Data. In this consent form, we have outlined what The Company is doing to ensure that:
• Only necessary information is collected about you
• We only share information with your Consent
• Storage, retention and destruction of your Personal Data complies with the existing legislation and Privacy Protocols
• Our Privacy Protocols comply with Privacy legislation, standards of the applicable regulatory bodies and the laws.

• What Personal Data we collect

• We collect Personal Data which identifies you such as your Name, Email ID, Contact Details, Gender, Appointment Details etc. This further includes both Sensitive Personal Data (financial data, biometric data, genetic data, skin type, family personal information etc.) and Patient Health Information (Medical Records, Test reports, Prescriptions etc.)

• Use of Personal Data

• Your Personal Information may be used or processed for various purposes including but not limited to the following:
• To Provide you with medical, diagnostic, and healthcare services.
• To contact you via phone, SMS, WhatsApp or email for appointments, technical issues, payment reminders, deals and offers and other announcements.
• To send promotional communications via SMS, WhatsApp, email, and other channels, and to support related services such as customer support, marketing, analytics, advertising, and performance tracking etc.
• To carry out insurance-related purposes, including claims processing, verification, and billing.
• To support and enhance our Corporate Social Responsibility (CSR) initiatives.
• To transfer information about you if we are acquired by or merged with another company,
• To share with our business partners for provision of specific Services you have ordered so as to enable them to provide effective Services to you.
• To perform studies, research, and analysis for improving our information, Services, and technologies.
• To manage financial transactions and invoice etc.
• To comply with legal and regulatory requirements.
• To carry out obligations related to any agreement you have with us
• By signing the consent section of this Patient Consent Form, you have agreed that you have given your informed consent to the collection, use and/or disclosure of your Personal Data for the purposes that are listed.

• Sharing and transferring of Personal Data

• Basis your consent, you authorize us to exchange, transfer, share, your Personal Data within the myAster Platform affiliates/agents/third party service providers/partners/authorities, Health Information Systems (HIS) and from your country to any other countries across the world for legal documentation, insurance processing, marketing purposes, or for providing our services for the purposes specified under this consent form or as may be required by applicable laws and regulations.
• We may share your information with authorized third-party vendors and service providers that help us with specialized services, including customer service, email deployment, business analytics, marketing (including but not limited to advertising, attribution, deep-linking, direct mail, mobile marketing, optimization and retargeting) advertising, performance monitoring, hosting, and data processing. These authorized third-party vendors are subject to risk assessment test and will not use your information for purposes other than those related to the services they are providing to us. All such data sharing is conducted in accordance with applicable data localization requirements, security protocols, and applicable regulatory standards.
• If you choose to engage in public activities on the third-party sites that we link to, you should be aware that any information you share there can be read, collected, or used by other users of these sites and forums. You should use caution in disclosing personal information while participating in these areas. We are not responsible for the information you choose to submit in public areas.
• Please note that, in line with regulatory requirements and basis your consent, all health-related data is securely shared with government-mandated Health Information Exchanges (HIEs) such as NABIDH, MALAFFI and other applicable platforms to support better care coordination and public health outcomes.

• Special Considerations for Children’s Privacy

• The Company is committed to protecting the privacy of children. If you are a parent or legal guardian, by signing this consent form, you authorize The Company to collect, use, and disclose Personal Data regarding your child. The data will be used solely for the purposes of providing healthcare services and treatment. We ensure that all Personal Data is stored securely and will be shared only with necessary healthcare providers.

• Security

• The security of your Personal Data is important to us. We have adopted and maintained reasonable technical and organizational security measures and procedures including rigorous third-party risk assessments, strong access controls and information sharing on a need-to-know basis, encryption of Personal Data, secure storage of Personal Data, rapid data breach management procedures, etc. to ensure that the Personal Data collected is secure at rest and in transit. We restrict access to your Personal Data to our and our affiliates’ employees, agents, third-party service providers, partners, and agencies on a need-to-know basis and absolutely limited to the purposes as specified above in this Policy.

• Retention

• myAster Platform will retain your personal information for as long as necessary, in accordance with the required timeframe and in compliance with the internal Data Retention Policy.

• Your Rights

• We will respect your legal rights in relation to your Personal Data. myAster Hospital is committed to protecting them and ensuring compliance if you wish to exercise any of the rights. You may refer to The Company’s Privacy Policy to further understand any of these rights:
• Right to obtain Information - Right to request information about the Personal Data we hold about you.
• Right to withdraw consent - Right to withdraw consent from further Processing your Personal Data.
• Right of Grievance Redressal - Right to grievance redressal where your exercise to request your rights is refused.
• Right of Data Portability - Right to request a copy of your Personal Data transferred to you or another party in a machine-readable and easy-to-read format.
• Right of Correction - Right to request correction of your Personal Data if the information is incorrect.
• Right of Erasure - Right to get your Personal Data erased or removed at any time.
• Right to Restrict Processing - Right to restrict the Processing of your Personal Data.
• Right to Object - Right to object to the Processing of your Personal Data if such Processing is not necessary.
• Right not to be subject to Automated Decision-Making - Right to not be subject to a decision solely based on automated Processing, including profiling, which significantly affects you.

• Contact Us and Grievance redressal

• In case of any query and concerns, you may contact our Group Data Protection Officer:
• DPO Details: [email protected]
• Contact No: +971565037221
• Or you can write to us/post at:
• The Data Protection Officer,
• Aster DM Healthcare Limited.
• Official Address: 33rd Floor - Aspect Tower, Business Bay, P.O. Box: 8703 - Dubai - U.A.E
• If you have any questions, concerns, or complaints regarding our compliance with the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us. We will investigate and attempt to resolve complaints and disputes and will make every reasonable effort to honour your wish to exercise your rights as quickly as possible and, in any event, within the timescales provided by data protection laws.

• Patient Consent

• I have reviewed the above information that explains how myAster Platform will use my Personal Data, and the steps myAster Platform is taking to protect my information.
• I agree that myAster Platform can collect, use and disclose Personal Data as mentioned above and under the myAster Platform’s Privacy Policy (Refer to the QR code attached)
• I agree that my health care provider that participate in the NABIDH HIE may disclose my health information to the NABIDH system and my health information may be shared with all health care provider participants of the NABIDH that are involved in my care in Emirate of Dubai.
• I agree that myAster Platform can collect, use and disclose Personal Data for marketing and promotional activities.

• Disclaimer

• The Company is committed to protect your privacy. To respect your preferences, we provide multiple ways to opt out of receiving marketing and promotional communications. You can do this at any time using the unsubscribe or opt-out links provided in our emails and messages. If you wish to withdraw your consent for marketing or for the sharing of information via NABIDH or exercise any of your rights as stated above, you can do so by writing to us through an email at [email protected]