Privacy Policy

1. Introduction

Aman Hospital respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Aman Hospital collects, uses, stores, shares and protects personal information when you:

• visit amanhospital.org;
• request or book an appointment;
• contact the hospital;
• subscribe to hospital communications;
• submit an enquiry or referral;
• interact with our website, advertisements or digital services.

This Privacy Policy applies primarily to information collected through the Aman Hospital website. It supplements, but does not replace, any separate patient privacy, medical confidentiality or clinical-record notices provided to patients when receiving healthcare services.

Aman Hospital processes personal information in accordance with applicable laws and regulations, including Qatar Law No. 13 of 2016 Concerning Personal Data Privacy Protection.

Where applicable, Aman Hospital also complies with the European Union General Data Protection Regulation, or GDPR, including its requirements concerning transparency, lawful processing, health information, data-subject rights, international data transfers, cookies and consent.

2. Who We Are

The data controller responsible for the personal information described in this Privacy Policy is:

Aman Hospital
F Ring Road
Zone 47, Building 412
PO Box 8199
Doha, Qatar

Telephone: +974 4400 4400
Email: info@amanhospital.org

In this Privacy Policy, “Aman Hospital,” “we,” “us” and “our” refer to Aman Hospital.

3. Personal Information We Collect

Depending on how you interact with the website, we may collect the following categories of personal information.

Contact and identification information

This may include:

• full name;
• telephone or mobile number;
• email address;
• sex;
• date of birth or other date information entered in an appointment form;
• preferred contact or callback time;
• language preference;
• country or location information.

Appointment and healthcare-related information

When you request an appointment, referral or healthcare service, we may collect:

• whether the appointment is for you or another person;
• whether you have previously visited Aman Hospital;
• preferred doctor, department or medical specialty;
• preferred appointment date or time;
• reason for your visit;
• symptoms, medical concerns or other information you voluntarily provide;
• communications relating to your appointment request.

Information concerning your health, physical condition, psychological condition, medical history, symptoms or treatment may be classified as sensitive personal information, health data, special-category personal data or personal data of a special nature.

Please provide only the information reasonably required to process your request.

The website appointment form should not be used for medical emergencies or for submitting detailed medical records unless Aman Hospital specifically requests them through an approved secure channel.

Enquiry and communication information

When you contact us, we may collect:

• the contents of your enquiry;
• correspondence and communication history;
• complaints, feedback or service requests;
• information submitted through contact, referral, recruitment or feedback forms.

Marketing and subscription information

Where you subscribe to hospital news, healthcare information, offers or other communications, we may collect:

• your email address or telephone number;
• your communication preferences;
• records of your consent;
• information about whether you opened or interacted with a communication.

Website and device information

When you use the website, we may automatically collect:

• Internet Protocol address;
• browser type and version;
• device type and operating system;
• approximate location derived from your IP address;
• website pages viewed;
• links and buttons selected;
• referral source;
• date and time of visits;
• session and cookie identifiers;
• website performance information;
• error and security information;
• advertising and conversion information.

We may collect this information using cookies, pixels, server logs and similar technologies. Further information is available in our Cookie Policy.

4. How We Collect Information

We may collect personal information:

• directly from you when you complete a website form;
• when you request or manage an appointment;
• when you call, email or otherwise communicate with us;
• when another person submits an appointment request on your behalf;
• automatically from your browser or device;
• through Google Analytics 4, Google Tag Manager, Meta Pixel and similar technologies, subject to your cookie preferences;
• from authorised healthcare providers, insurers, referral partners or service providers where permitted by law;
• from publicly available sources where legally permitted.

Where you provide information about another person, you confirm that you are authorised to provide that information and that you have informed the person about how their information may be used.

5. How We Use Personal Information

We may use personal information to:

• process appointment and callback requests;
• contact you regarding an appointment or enquiry;
• identify the appropriate doctor, department or service;
• provide healthcare and patient-support services;
• create, maintain or update patient records where appropriate;
• respond to questions, complaints and feedback;
• manage referrals and communications with healthcare providers;
• provide website functionality;
• maintain the safety and security of our website and systems;
• prevent fraud, misuse and unauthorised access;
• understand how visitors use the website;
• measure website and campaign performance;
• improve our services, content and user experience;
• send marketing communications where you have consented;
• comply with healthcare, legal, regulatory, auditing and reporting obligations;
• establish, exercise or defend legal claims;
• protect the vital interests, safety or wellbeing of patients and other persons.

We will not use information submitted through an appointment request for unrelated advertising without an appropriate legal basis and, where required, separate consent.

6. Legal Grounds for Processing

Depending on the circumstances and applicable law, we process personal information on one or more of the following grounds.

Consent

We may rely on your consent for:

• optional cookies;
• website analytics;
• advertising and marketing pixels;
• newsletter subscriptions;
• electronic marketing communications;
• processing health information submitted through an appointment form where explicit consent is required.

You may withdraw your consent at any time by contacting us at info@amanhospital.org.

Withdrawal will not affect processing that took place lawfully before consent was withdrawn.

Providing a requested service

We may process information where necessary to:

• respond to an appointment request;
• take steps requested by you before providing healthcare services;
• communicate with you about the service you requested;
• fulfil our obligations to patients and website users.

Healthcare and medical purposes

Where permitted by applicable law, health information may be processed where necessary for:

• medical diagnosis;
• provision of healthcare or treatment;
• management of healthcare services;
• patient safety;
• continuity of care;
• compliance with professional confidentiality obligations.

Legal obligations

We may process information where necessary to comply with:

• healthcare and medical-record requirements;
• regulatory and reporting obligations;
• court orders and lawful government requests;
• accounting, auditing and legal requirements;
• information-security and incident-reporting obligations.

Legitimate interests

Where permitted by law, we may process information for legitimate interests such as:

• operating and improving the website;
• responding to enquiries;
• protecting systems and preventing fraud;
• maintaining appropriate business records;
• understanding general website performance.

We will not rely on legitimate interests where your rights, freedoms and interests override those interests, particularly where sensitive health information is involved.

Vital interests

In limited circumstances, information may be processed where necessary to protect the life, health or safety of an individual.

7. Health and Sensitive Personal Information

Health information requires a higher level of privacy and security protection.

Aman Hospital will process health information and other personal data of a special nature only:

• for specific and legitimate purposes;
• where permitted by applicable law;
• where appropriate consent or another lawful ground exists;
• using appropriate confidentiality and security safeguards;
• with access limited to authorised personnel;
• in accordance with applicable regulatory permissions and healthcare requirements.
• Information entered into the “Reason for Visit” field should be limited to what is necessary to arrange the appointment.

We do not intentionally use identifiable health information submitted through appointment forms for behavioural advertising, profiling or marketing purposes.

8. Cookies, Analytics and Advertising Technologies

The website may use:

• Google Analytics 4;
• Google Tag Manager;
• Meta Pixel;
• website security and performance tools;
• other cookies, pixels, tags and similar technologies.

These tools may collect device identifiers, cookie identifiers, IP information, pages viewed, referral information, interactions and conversion events.

Non-essential analytics and advertising technologies will be activated according to your cookie choices and where consent is legally required.

Google Tag Manager is used to manage website tags. Tags deployed through Google Tag Manager must respect the consent preferences recorded through our cookie-management system.

Further information is available in our Cookie Policy.

9. Marketing Communications

We may send you marketing communications only where permitted by applicable law.

Where consent is required, marketing consent will be:

• optional;
• separate from consent required to process an appointment;
• specific to the relevant communication channel;
• capable of being withdrawn at any time.

You may unsubscribe by:

• using the unsubscribe link in an email;
• following the instructions in a message;
• changing your communication preferences;
• emailing info@amanhospital.org.

Withdrawing marketing consent will not affect appointment, patient-care or service-related communications.

10. Sharing Personal Information

We may share personal information with:

• authorised Aman Hospital doctors, nurses and employees;
• appointment, patient-support and administrative teams;
• affiliated entities where required to provide the requested service;
• healthcare professionals and referral partners;
• insurers and payment administrators where relevant and authorised;
• website-hosting and information-technology providers;
• appointment-management and customer relationship management providers;
• email, SMS, telephone and communication providers;
• cybersecurity, backup and disaster-recovery providers;
• analytics and advertising providers, including Google and Meta, where appropriate consent has been provided;
• professional advisers, auditors, insurers and legal representatives;
• government authorities, regulators, courts and law-enforcement agencies where legally required;
• a purchaser, investor or successor in connection with a genuine business restructuring, subject to appropriate confidentiality safeguards.

Service providers may process personal information only for authorised purposes and must apply appropriate confidentiality, privacy and security measures.

Aman Hospital does not sell patient information.

11. International Data Transfers

Some technology, analytics, hosting, communication and advertising providers may process information outside Qatar.

Where personal information is transferred internationally, Aman Hospital will take appropriate steps required by applicable law, which may include:

• assessing the recipient and destination;
• using contractual data-protection safeguards;
• limiting the information transferred;
• applying encryption or pseudonymisation;
• obtaining consent where required;
• ensuring that health-data and special-nature-data requirements are satisfied;
• implementing GDPR-approved transfer safeguards where GDPR applies.
• Where GDPR applies, these safeguards may include Standard Contractual Clauses, adequacy decisions or another legally recognised transfer mechanism.

Information processed by international providers may also be subject to the laws of the countries in which those providers operate.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, healthcare, regulatory, security and dispute-resolution requirements.

Retention periods are determined based on:

• whether the information forms part of a patient or medical record;
• the status of an appointment or enquiry;
• healthcare record-retention obligations;
• consent and communication preferences;
• limitation periods for legal claims;
• regulatory and audit requirements;
• information-security requirements.

An appointment request that results in treatment may become part of the relevant patient or clinical record and may be retained under the hospital’s medical-record retention schedule.

Marketing information is normally retained until you unsubscribe or withdraw consent. We may retain a minimal suppression record to ensure that we respect your request not to receive future marketing.

Cookie and analytics retention periods are described in the Cookie Policy and may also depend on the relevant provider’s configuration.

13. Data Security

Aman Hospital uses appropriate administrative, physical and technical measures designed to protect personal information against:

• unauthorised access;
• accidental or unlawful disclosure;
• loss or destruction;
• alteration;
• misuse;
• unauthorised transfer.

These measures may include:

• encrypted communications;
• access controls;
• confidentiality obligations;
• staff training;
• network and application security;
• backups;
• monitoring and logging;
• vendor-security requirements;
• incident-response procedures;
• periodic security assessments.

No internet transmission or storage system can be guaranteed to be completely secure.

You should avoid submitting unnecessary medical information through ordinary website forms or email.

14. Your Privacy Rights

Depending on applicable law and the circumstances, you may have the right to:

• be informed about how your information is processed;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• withdraw consent;
• object to certain processing;
• request deletion where legally permitted;
• request restriction of processing;
• request a portable copy of certain information where GDPR applies;
• object to direct marketing;
• lodge a complaint with the relevant authority;
• be informed of certain inaccurate disclosures or personal-data breaches where required.

These rights may be limited where information must be retained for:

• patient safety;
• medical-record obligations;
• public-health requirements;
• legal or regulatory compliance;
• professional confidentiality;
• legal claims;
• the protection of another person’s rights.

We may need to verify your identity before responding to a privacy request.

To exercise your privacy rights, contact:

Email: info@amanhospital.org
Telephone: +974 4400 4400

Please include sufficient information to help us identify you and understand your request. Do not send unnecessary medical information by ordinary email.

15. GDPR Rights

Where the GDPR applies to the processing of your personal information, you may have the right to:

• access your personal information;
• correct inaccurate information;
• request deletion of your information;
• restrict how your information is processed;
• object to processing based on legitimate interests;
• object to direct marketing;
• receive certain information in a portable format;
• withdraw your consent at any time;
• complain to an applicable European data-protection supervisory authority.

You may also have rights concerning decisions based solely on automated processing where such decisions produce legal or similarly significant effects.

Aman Hospital does not intend to make significant healthcare or appointment decisions based solely on automated processing through the website.

16. Complaints

We encourage you to contact Aman Hospital first so that we can investigate and respond to your concern.

Privacy complaints may be submitted to:

Email: info@amanhospital.org
Telephone: +974 4400 4400

You may also have the right to submit a complaint to:

• the competent privacy authority in Qatar, including the National Cyber Security Agency or National Data Privacy Office; or
• the relevant European data-protection supervisory authority where GDPR applies.

17. Children and Appointments for Minors

The website is not intended to allow children to independently submit sensitive health information without appropriate involvement from a parent, guardian or authorised representative.

Where an appointment is requested for a child, we may take reasonable steps to confirm the authority of the parent, guardian or representative.

Children’s information will receive additional protection in accordance with applicable law.

18. Third-Party Websites

The website may include links to third-party websites, social-media platforms, maps or external services.

Aman Hospital is not responsible for the privacy practices of third parties.

You should review the privacy and cookie policies of third-party providers before providing information or using their services.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, processing activities or legal obligations change.

The updated version will be published on this page with a revised “Last updated” date.

Where changes materially affect how we process personal information, we may provide an additional notice or request new consent where required.

20. Contact Us

For questions about this Privacy Policy, the processing of your personal information or the exercise of your privacy rights, contact:

Aman Hospital
F Ring Road
Zone 47, Building 412
PO Box 8199
Doha, Qatar

Telephone: +974 4400 4400
Email: info@amanhospital.org