Hesham Al-Khateeb

Consultant Knee & Sports Medicine Surgeon

Privacy Notice


This privacy notice sets out how we, at the clinic of Dr Al-Khateeb, located in Mediclinic City Hospital Dubai, UAE, use and protect any personal information collected or generated in relation to you whilst using our website www.hipandkneeorthopaedics.com

In Dubai, your personal data is protected under the Protection of Personal Data Protection (“PDPL”), which was issued on 26 September 2021.  The PDPL is currently being rolled out and is likely to be operational in 2023.  This Privacy Notice follows the general principles laid out in the EU General Data Protection Regulation (GDPR).


What is collected, the lawful basis and the purpose of processing

The types of personal data collected when you use our website at www.hipandkneeorthopaedics.com

  • Data provided when using our Contact Us form
  • Cookies – please see our Cookie policy or use our Cookie consent tool for more information

When using our Contact Us form, you consent to us processing the personal data provided in order to respond to your enquiry.  We act as a Data Controller for this information.  All data will be processed in Dubai, UAE.

The type of information that you may provide when using the Contact Us form is:

  • Contact data – name, email address, phone number, address
  • Medical service requested
  • General personal information

Requesting a service

We may require certain additional personal information in order to provide the requested medical services.  During our patient registration process, further information will be provided to explain how this additional patient data will be used and the lawful basis for using it.


Data Retention

The retention period for data is determined by the purpose of the processing.  For example, data provided on the Contact Us form will be retained for 18 months.  If you become a patient, the data retention will be explained during our patient registration process.


Supplier Data

If you become a supplier to our practice, you are required to provide us with your contact information and payment details for the performance of our contract together.  This data is stored for as long as you may be a supplier with us and for seven years thereafter for legal reasons.


Links to other websites

This site may contain select links to external sites from time to time.  Care has been taken to ensure that any sites listed on our website are reputable and relevant to our medical services.

As you probably realise, once you use these links, we do not have any control over how that external site may use your personal data, so we cannot be responsible for the protection and privacy of any information you provide whilst visiting those sites.

Please do exercise caution and look at the privacy notices applicable to external sites.


Recipients of your data

Any analytical data collected via cookies is anonymised and used solely by Dr Al-Khateeb for internal analytical purposes. This information is not passed to any other party.  You have the option to opt out of analytical data collected via cookies, by using our cookie consent tool.

We may share your data with third parties as part of a Company sale or restructure, or for other reasons to comply with a legal obligation upon us.


Automated decision making

No automated decisions are made using any personal information collected using this site.



We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we receive from you when using this website or emailing us on the contact details provided.


Geographical location of data processing

All our data is processed in UAE or other locations outside of the European Economic Area (EEA) and United Kingdom (UK).  If you access our website from within these locations, you are giving Dr Al-Khateeb consent to us process your data outside of UK or EEA.


Data Processor agreements

This applies to third party organisations we may use from time to time to manage this website or provide services to you.

We have ensured they have committed to implementing appropriate technical and organisational measures in place to meet their obligations under the Data Protection regulations.


Your rights

You are entitled to ask about the data that is held about you, subject to certain exceptions.  This is called generally referred to as an Access Request.  These should be made by email or in writing to our Data Protection Manager at the following addresses:

Email: drheshamalkhateeb@msn.com

Address: Mediclinic City Hospital,Building 37, Dubai Healthcare City, Dubai

Under PDPL you have the following rights for individuals:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to object
  • Rights in relation to automated decision making and profiling

We make every attempt to ensure you are satisfied with the handling of your data queries or requests.  However, if you remain unsatisfied with our handling of your request you can contact the UAE Data Office.

Last updated: March 2022