Effective Date: 9 November 2026
Last Updated: 9 November 2026

drzainabmoalla.com is Dr. Zainab Moalla’s personal professional website, managed by her and her authorised team. The website is not a separately licensed medical practice or healthcare facility.

In this policy, “we”, “us” and “our” refer to Dr. Zainab Moalla and the authorised team managing this website and its enquiries. Dr. Zainab is responsible for decisions about the collection and use of personal information for these website activities.

This policy covers drzainabmoalla.com and longevity.drzainabmoalla.com, including enquiries through advertisements, connected forms, email, telephone and WhatsApp. Clinical care and medical records are managed separately by the treating healthcare facility.

Information we collect

For enquiries, we may collect your name, telephone number, email address, preferred contact method, appointment preferences and the information you choose to include in your message.

Technical information may include your IP address, browser and device type, pages visited, referral source and visit times. We also keep relevant communication preferences, consent records and opt-out instructions.

How we use your information

We use information to:

• Respond to enquiries and share consultation details.
• Coordinate appointment requests and related follow-ups.
• Contact you through your selected communication method.
• Operate, secure and improve the website and enquiry process.
• Measure website and advertising performance using permitted information.
• Meet applicable obligations and handle privacy requests or complaints.

Where consent is required, we request it for the relevant purpose. Agreeing to appointment follow-up does not automatically authorise unrelated promotional messages.

Who can access and process information?

Dr. Zainab and her authorised team: Manage website enquiries, communication preferences and appointment coordination. Access is limited to information needed for assigned responsibilities, within authorised communication and enquiry-management systems.

FAYY Health: Receives relevant information when an appointment or care is being arranged at that facility. Information is shared only as needed for that purpose and with the appropriate permissions or other lawful basis. FAYY Health manages its own patient registration and clinical records under its facility procedures and applicable healthcare requirements.

MediGrow: Provides authorised website, marketing and technical support. Where this work requires access to enquiry information, MediGrow acts on Dr. Zainab’s instructions for the agreed services. This may include managing forms, routing enquiries or supporting communication and hosting systems. It is not the treating healthcare facility or the custodian of clinical records.

Website form submissions are routed to our enquiry-management (CRM) system. Related records may also be held in authorised communication, booking and support systems. Access is limited to assigned responsibilities; website or marketing support does not grant unrestricted access to enquiries or medical records.

Other providers may support hosting, communication or enquiry management under appropriate confidentiality and data-protection arrangements. Information may also be disclosed where legally required or necessary to protect lawful rights.

Website enquiries and clinical records

Website enquiry records are used for communication and appointment coordination. They are separate from clinical records created during assessment, investigation or treatment.

Medical histories, test results, prescriptions and treatment notes are managed by the treating facility, such as FAYY Health where care is provided there. Its privacy procedures, access controls and retention requirements apply.

For clinical-record requests, contact the treating facility. Our enquiry team can help direct you to the appropriate contact.

Sensitive information sent through enquiry forms

General enquiry and advertising forms are intended for contact and appointment details. Please do not submit medical reports, genetic results, identification documents or detailed health histories through them.

If sensitive medical information is received unintentionally, our handling procedure is to:

• Limit further access and avoid unnecessary forwarding or copying.
• Refer the matter to Dr. Zainab or an authorised clinical contact.
• Explain the appropriate secure channel for any further medical information.
• Transfer information to the treating facility only when needed and permitted.
• Arrange removal or redaction from routine enquiry and marketing systems when no longer required, subject to applicable preservation requirements.

Sensitive medical information must not be used to create advertising audiences or included in advertising events, tracking parameters or automated marketing messages.

Online forms and WhatsApp

Enquiries submitted through our website, Facebook, Instagram or connected forms may be received by the authorised team and systems managing your request.

Where you agree to WhatsApp contact, we may send enquiry responses, appointment information and relevant follow-ups. Reply STOP or contact us to stop optional messages. Records required for another lawful purpose may still be retained.

Facebook, Instagram and WhatsApp also process information under their own privacy policies.

Cookies and tracking

Cookies are small files stored by your browser. Cookies and similar technologies can send identifiers and related information to website, analytics or advertising providers. Their use is not limited to the browser cache or the website database.

Analytics and advertising technologies: Google Ads, Meta Ads, Google Annalytics 4. Google Tag Manager manages website tags; each enabled analytics or advertising tool must be listed separately.

Where consent is required, optional analytics and advertising tracking is enabled only after you give permission. You can accept or reject optional tracking and change your choice through. Enquiry contact permission is separate from consent to optional tracking or unrelated promotional messages.

You can also manage cookies through your browser settings. Rejecting optional tracking does not prevent you from submitting an appointment enquiry. Cookie lifetimes and providers’ retention of tracking information are separate from the enquiry-record period below.

Data retention

Different retention periods apply to enquiry records, consent evidence, opt-outs, backups and clinical records:

• Open enquiries: Kept while we respond, arrange an appointment or complete relevant follow-up. Enquiries are closed when resolved, withdrawn or no longer being pursued.
• Closed or withdrawn enquiries: Ordinary website enquiry records are deleted or anonymised no later than 24 months after closure, and earlier when no longer needed, unless a specific legal obligation or unresolved complaint requires longer retention.
• Consent and opt-out records: Limited records may be retained to demonstrate permissions and respect requests not to receive further messages.
• Complaints or legal requirements: Relevant information may be retained for the period necessary to resolve the matter or meet an applicable obligation.

Enquiry deletion is carried out through scheduled manual reviews of the CRM and relevant systems under our control. Restricted backup copies expire within 24 Months; applicable deletions are reapplied if a backup is restored. Marketing permission does not justify indefinite retention. Clinical records are managed separately by the treating facility under applicable healthcare requirements.

Storage, transfers and security

Enquiry information is stored in Website Server. Access is restricted to advertisers for enquiry handling, appointment coordination and agreed technical or reporting support. We use appropriate organisational and technical safeguards. No online system can guarantee absolute security.

Storage and backup locations: United Arab Emirates. International processing must meet applicable requirements. Website enquiry arrangements do not authorise clinical records to be sent to marketing systems or overseas providers. Additional health-data restrictions may apply.

Your choices and rights

Depending on applicable law, you may request information about how your data is used, access or a copy, correction, deletion, restriction or transfer of your data. You may object to direct marketing and withdraw consent where processing relies on it.

These rights are subject to applicable conditions and retention obligations. Withdrawing consent does not invalidate earlier lawful processing. Clinical-record requests are handled by the treating facility; our enquiry team can direct you to the appropriate contact.

To make a request, email info@drzainabmoalla.com with the subject “Privacy Request”. Describe your request and provide the contact details used for your enquiry. We may ask for the minimum information needed to verify your identity; please do not send medical reports or identity documents in your first email.

We will review your request, explain the outcome and identify any information that must be retained and why. You may also raise a concern with the competent data protection authority under applicable law.

External links

Other websites and platforms have their own privacy policies. Please review their notices before providing personal information.

Policy updates

We may update this policy when website activities, providers or applicable requirements change. The latest update date will appear at the top of this page. Where necessary, we will provide a further notice or request fresh consent.

Contact us

Dr. Zainab Moalla and her authorised website team

Privacy requests: info@drzainabmoalla.com

Telephone: +971 56 789 4559

Consultation Location: FAYY Health, The Offices 2, One Central, 6th Floor, Dubai, United Arab Emirates

Website: https://drzainabmoalla.com/