Privacy notice
Pink Caravan is run by Friends of Cancer Patients (FOCP), Sharjah, UAE. This notice explains what personal data we collect, why, who sees it, how long we keep it and the rights you have under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
Last updated: 29 September 2026
What we collect
For screening: your name, Emirates ID, date of birth, nationality, emirate, marital status, mobile numbers, email, your medical and family history, the clinical examination and mammography findings, and your signature on the consent form. For service bookings: the organisation, contact person, email and mobile. At the clinic door: your name and WhatsApp number for the queue.
Why we use it
To register and screen you, to produce and deliver your report, to refer you for follow-up care when needed, to run the visitor queue, to arrange bookings, and to keep the clinical record the law requires. Anonymised results, which can no longer identify you, are used for research and statistics only if you agree on the consent form.
Who sees it
Only the Pink Caravan staff involved in your care (nurse, doctor, mammographer, radiologist, clinic administrator), each limited to what their role needs. Every access to a record is logged. We do not sell your data or use it for marketing.
Where it is stored
Your records are stored on servers in the United Arab Emirates, encrypted in transit and at rest. Emirates ID, signatures and free-text clinical notes are additionally encrypted inside the database.
Messages sent outside the UAE
Queue updates, report notifications and login codes are sent by WhatsApp through our messaging provider and Meta Platforms, whose servers may be outside the UAE. Only your mobile number, name, a reference number and a link are sent, never your results. You can stop these messages at any time from the patient portal; your report stays available there.
How long we keep it
Medical records are kept for at least 25 years, as required by UAE Federal Law No. 2 of 2019 on the use of ICT in health fields. Queue entries are deleted after 90 days, one-time login codes after one day, and the contact details of closed bookings are anonymised after two years.
Your rights
You can ask to: receive a copy of your data in a machine-readable format; correct inaccurate data; have data erased where the law allows (medical records must be kept); restrict or object to processing; withdraw your consent; and learn how any automated decision was reached. No decision about you is made by automated processing alone.
If something goes wrong
If a breach affects your data, we will notify you and the UAE Data Office and tell you what we are doing about it. You can complain to us at any time, and you also have the right to complain to the UAE Data Office.