Privacy policy
What personal data MediFlow processes, why, with whom it is shared and what rights you have.
Who is responsible
ICSL FZE, Dubai, United Arab Emirates, operating MediFlow (mediflow.ae), is responsible for the processing described here. Contact: hello@mediflow.ae, +971 50 248 0606 (also WhatsApp).
What we process and why
Enquiries and lead forms (including the licence finder): your name, email, phone or WhatsApp number, profession, preferred location and your message, to answer your request and advise you.
Job applications: the details above, the position and your CV, to assess your application and present you to employers only with your agreement.
Orders: your account email, the information you enter in the order form (for example education, specialty, experience, licences) and the documents you upload, to deliver the service you bought, to invoice and to meet legal obligations.
Academy: your learning progress and exam attempts, to provide the course.
Website use: technical log data such as IP address and browser, to run the site securely. Statistics (Google Tag Manager, Google Analytics) load only if you agree in the cookie banner.
Security
Order details, documents and enquiries are stored encrypted on our server. Access is limited to the MediFlow team members who need it for your case.
MediFlow Connect (directory of healthcare professionals)
If you create a MediFlow Connect profile, we process the details you enter (profession, specialty, grade, licence status per authority, years of experience, country of training, current country and city, languages, availability, preferred locations, profile text, optional salary expectation, optional photo and CV) to run the directory and to put you in touch with employers. Legal basis: your consent, which you give separately for each purpose.
Public listing: only the fields you mark as visible to everyone are published, and only with your consent. By default your profile is anonymous (for example "Specialist Orthodontist · trained in Germany · DHA licence"); you may choose to show your initials or your full name. Anonymous profiles are not offered to search engines. Your CV, phone number, email address, city and salary expectation are never published.
Employers: facilities register and are checked by MediFlow before they see more than the public fields. Approved employers see the fields you marked for employers, can shortlist your profile and send you a message through MediFlow. They never receive your contact details unless both you and the employer agree in the conversation. MediFlow can read conversations to mediate and to prevent misuse, and masks contact details in messages until both sides agree.
Invitations: MediFlow may invite professionals it has worked with by email or WhatsApp. These contact lists are private, are never published, and nothing is listed unless you complete and confirm your profile yourself.
Your control: you can edit, unpublish or delete your profile at any time in your account (Portal > Connect profile). Deleting removes the profile, photo, CV, shortlists and conversations. You can withdraw any consent at any time; this does not affect processing before the withdrawal. Profiles are stored encrypted where they contain non-public data, and enquiries created by the directory are kept as described under retention.
Service providers
Ziina processes card payments; we receive only the payment status, not your card details.
Anthropic (Claude) may pre-analyse your CV for the eligibility pre-check or the ATS CV only if you tick the optional box in the order form. A consultant reviews every result.
Our hosting and email providers process data on our behalf under confidentiality obligations.
For the eligibility pre-check we may look up an existing DHA licence number in the public DHA register.
International transfers
Some providers process data outside the United Arab Emirates. We only use providers that commit to appropriate safeguards, and we limit what is shared to what the service needs.
How long we keep data
Enquiries that do not lead to an order are deleted after 24 months. Order data and documents are kept for as long as needed for the service and for the periods required by UAE commercial and tax law. You can ask us to delete your documents earlier when the service is complete.
Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, and a copy of your data, and you can withdraw consent at any time with effect for the future. Write to hello@mediflow.ae. You also have the right to complain to a data protection authority (in the UAE the UAE Data Office; in the EU the authority of your country).
Cookies
We use a session cookie for your account and store your cookie choice in your browser. Statistics cookies are used only with your consent; you can change your choice by clearing the site data in your browser.