Privacy Policy

Information We Collect

We collect the following categories of personal information directly from you when you interact with our website:

• Appointment bookings: your name, email address, phone number, preferred date and time, selected treatment, and any message you choose to include.
• Account registration and login: your name, email address, phone number (optional), and a password, which we store in encrypted (hashed) form.
• AI chatbot conversations: your name, email address, and the full text of your conversation with our chatbot, including any treatment preferences you choose to share.
• Treatment planner: your name, email address, and the answers you provide, used to generate a personalized treatment plan.
• WhatsApp messages: if you contact us via WhatsApp, we receive your name, phone number, and the content of your messages through our messaging integration.
• Session information: when you log in to an account, our systems are capable of recording technical session details, such as IP address and browser/device information, for security purposes.

How We Use Your Information

We use the information described above to:

• Schedule, confirm, and manage your appointments with our doctors and staff.
• Create and manage your account, where applicable.
• Respond to you through our AI chatbot and generate personalized treatment plan suggestions.
• Communicate with you about your appointments, enquiries, or messages sent via WhatsApp.
• Maintain the security of our website and accounts and prevent misuse.
• Comply with our legal and regulatory obligations as a medical clinic operating in Dubai, UAE.

Legal Basis for Processing

We process your personal information on the basis of your consent — for example, when you submit a booking form, register an account, or start a chatbot conversation — and our legitimate interest in operating the clinic, communicating with patients, and keeping our services secure.

Le Rêve Clinic is based in Dubai, United Arab Emirates, and primarily processes personal information in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL"). If you access our website from outside the UAE, your information may be processed in the UAE, and by using our website you consent to this transfer.

Third-Party Services We Use

We share limited personal information with the following third-party service providers, solely to operate the features described above:

• OpenAI — processes the text of your AI chatbot conversations and treatment-planner answers in order to generate responses and recommendations.
• Chakra / WhatsApp Business Platform — relays WhatsApp messages between you and our team.
• Pusher — delivers real-time message and appointment notifications to our staff dashboard; it does not track website visitors.
• Neon (our database hosting provider) — stores our database, including the personal information described in this policy, on secure servers.
• Google Maps — if you view the map embedded on our Contact Us page, Google may receive standard technical information about that request, governed by Google's own privacy policy.

We do not sell your personal information, and we do not use advertising networks or social-media tracking pixels on this website.

Data Retention

We currently retain appointment records, chatbot conversations, and treatment plans for as long as your account or patient record remains active with us, so our doctors and staff have continuity of care and accurate history. If you would like your information deleted sooner, contact us using the details below and we will action your request, subject to any medical record-keeping obligations we may have under UAE healthcare regulations.

Data Security

We take reasonable technical and organizational measures to protect your personal information, including encrypting passwords, restricting database access to authorized staff, and transmitting data over secure (HTTPS) connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on applicable law, you may have the right to access, correct, or request deletion of the personal information we hold about you, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details in the "Contact Us" section below; we will respond to verified requests within a reasonable time.

Children's Privacy

Our website and services are intended for adults seeking aesthetic and medical consultations. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Cookies

Our website uses a small number of cookies and similar technologies to keep you logged in and to remember your chatbot session. For full details on the cookies we use and how to manage them, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top of this page when we do. We encourage you to review this page periodically.