Privacy Policy

1Who we are

Vallida Compounding Pharmacy L.L.C (“Vallida”, “we”, “us”, “our”) is a compounding pharmacy licensed by the Dubai Health Authority (facility licence no. 5678428) and certified by the Emirates Drug Establishment for Good Compounding Practice. We are registered with the Dubai Department of Economy and Tourism under trade licence no. 1419399, and located at Unit S-G08, Al Garhoud Business Center, Al Garhoud, Dubai, United Arab Emirates.

We are the controller of the personal data described in this policy.

This policy explains how we collect, use, share and protect personal data when you visit vallida.ae, contact us, place an order, prescribe through us, or receive a medication we have compounded.

2The laws we follow

We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Federal Law No. 2 of 2019 on the Use of Information and Communications Technology in Health Fields, and applicable DHA and EDE requirements for pharmacies and health data.

3Personal data we collect

From healthcare professionals and clinics

• Name, job title, clinic or facility name, professional licence number
• Business email, phone number and address
• Order history, account and billing details

From patients (usually provided by the prescriber)

• Name, date of birth, Emirates ID or passport number where required by regulation
• Contact details and delivery address
• Prescription details, medication, dosage and relevant clinical information
• Records of dispensing, delivery and any reported side effects or complaints

Prescription and clinical information is health data, which is a special category of personal data. We handle it with additional safeguards.

From website visitors and enquirers

• Information you submit through forms, email or WhatsApp (name, contact details, message content)
• Technical data such as IP address, browser type, device information and pages visited, collected through cookies and similar technologies

Payment information

Card payments are processed by our payment provider. We do not store full card numbers.

4How we use personal data

We use personal data to:

• Verify prescriptions and prescriber credentials
• Compound, label, dispense and deliver medications safely
• Provide patient instructions and respond to medication queries
• Manage accounts, invoicing and payments
• Meet our regulatory duties, including record-keeping, pharmacovigilance, product recalls and inspections
• Respond to enquiries and complaints
• Maintain and improve our website and services
• Send professional updates and product information to healthcare professionals, where permitted

We do not sell personal data, and we do not use patient health data for marketing.

5Legal grounds for processing

We process personal data where:

• It is necessary to provide the healthcare services you or your prescriber have requested
• It is necessary to comply with our legal and regulatory obligations
• It is necessary for preventive or occupational medicine, medical diagnosis, or the provision of health care or treatment
• It is necessary to perform a contract with you or your organisation
• You have given consent, for example to receive marketing or for non-essential cookies

Where we rely on consent, you can withdraw it at any time.

6Who we share personal data with

We share personal data only where necessary, with:

• The prescribing doctor or clinic
• The Dubai Health Authority, the Emirates Drug Establishment and other competent authorities, where required by law
• Courier and delivery partners, limited to what is needed for delivery
• Payment processors
• IT, hosting, software and business system providers acting on our instructions
• Professional advisers such as auditors, lawyers and insurers
• A buyer or successor in the event of a sale or restructuring of our business, subject to confidentiality

All service providers are bound by confidentiality and data protection obligations.

7Where your data is stored

Health data is stored within the United Arab Emirates, in line with UAE health data law. Other personal data is stored primarily in the UAE. If any personal data is transferred outside the UAE, we will only do so where permitted by law and with appropriate safeguards in place.

8How long we keep it

We keep personal data only as long as necessary for the purposes above and to meet legal requirements. Pharmacy and dispensing records are retained for the periods required by UAE health regulations, which for health records is at least 25 years from the date of the last procedure. Website and enquiry data is kept for 12 months unless an ongoing relationship requires longer.

9Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, staff confidentiality obligations and training. Access to patient data is restricted to staff who need it for their role.

10Your rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to delete your data, where we are not legally required to keep it
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your data in a structured format
• Object to direct marketing at any time

Some rights are limited where we must keep records for regulatory or patient safety reasons. To exercise any right, contact us using the details below. We will respond within 30 days and may need to verify your identity.

If you are not satisfied with our response, you may complain to the UAE Data Office or the Dubai Health Authority.

11Cookies

Our website uses essential cookies to function and, with your consent, analytics cookies to understand how it is used. You can manage cookies through your browser settings and our cookie banner.

12Children

Our website is not directed at children. We process the personal data of minors only where a medication has been prescribed for them, and only as provided by the prescriber or a parent or guardian.

13Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date of the last update shown at the top.

14Contact us