Privacy Notice

This Privacy Notice explains how BioBlend Compounding Pharmacy collects, uses, discloses and protects your personal and health information when you use our website, patient portal, prescriber portal and clinical services. It applies alongside our Health Data Notice and Terms of Use.

1. Who We Are

1. BioBlend Compounding Pharmacy ("BioBlend", "we", "us") is a licensed pharmacy operating in Dubai, United Arab Emirates.
2. We are the controller of your personal data for the purposes described in this Notice.
3. For any privacy question you may contact us at hello@bioblend.ae or our address in Al Jaddaf, Dubai.

2. Information We Collect

We collect the following categories of information:

• Identity data — name, date of birth, gender, Emirates ID or passport (where required for regulated products).
• Contact data — email address, phone number, delivery address, emirate.
• Account data — login credentials (stored securely, never as plain text), account history and preferences.
• Health data — prescriptions, medical conditions, allergies, current medications, lab results, screening responses and uploaded documents.
• Transaction data — orders, payments, invoices, delivery and fulfillment records.
• Technical data — IP address, browser type, device identifiers and usage analytics gathered automatically when you use the Site.
• Communications data — messages you send us via the portal, forms or direct channels.

3. Sensitive Health & Pharmacy Data

1. Health, prescription and clinical information is treated as sensitive private data under UAE law and handled with the highest level of protection.
2. This information is essential to dispense medicines, compound preparations and provide clinical pharmacy services; it is processed only where necessary for those purposes or with your consent.
3. Access is restricted using row-level security so that each user only sees the minimum data necessary for their role.
4. We never sell health data. We do not use it for unrelated marketing.

4. How We Use Your Information

We process your information for the following purposes:

1. Pharmacy services — reviewing prescriptions, compounding, dispensing, monitoring safety and arranging delivery or pickup.
2. Account & verification — registering and authenticating your account, verifying age, identity and eligibility for regulated products.
3. Clinical coordination — coordinating with your prescriber, clinic or laboratory where needed to fulfil an order.
4. Payment & billing — processing payments, issuing invoices and managing corporate accounts.
5. Communication — sending service updates, status notifications and responding to your requests.
6. Compliance — meeting regulatory, licensing, audit, recall and pharmacovigilance obligations under UAE law.
7. Improvement & security — operating, securing and improving the Site, detecting fraud and preventing abuse.

5. Lawful Basis

We rely on the following lawful bases for processing under UAE data protection law: your consent, the performance of a contract (our pharmacy service to you), legal obligations as a licensed pharmacy, and our legitimate interests in operating securely and in line with regulatory standards. Where consent is required, you may withdraw it at any time without affecting the lawfulness of prior processing.

6. How We Share Information

We only share information with:

• Pharmacy and clinical staff — to review, compound and dispense your prescriptions.
• Prescribers and clinics — where you ask us to coordinate, or where clinical review requires it.
• Couriers and delivery partners — limited to what is needed to fulfil delivery (name, address, phone, cold-chain handling).
• Regulators and authorities — where required by UAE law, licence or lawful authority.
• Service providers — vendors hosting or supporting our platform under appropriate confidentiality and data-protection terms.

Where we share sensitive health data, we apply the minimum necessary principle and require recipients to protect it to an equivalent standard.

7. International Data Transfers

1. Your data is primarily processed within the United Arab Emirates.
2. Where a vendor or partner processes data outside the UAE, we take measures to ensure an equivalent level of protection through contractual safeguards.
3. We do not transfer sensitive health data outside the UAE unless necessary to provide you a service or as required by law, and only with appropriate safeguards.

8. Data Retention

1. We retain personal data only for as long as necessary for the purposes set out in this Notice and to meet legal, regulatory and pharmacy record-keeping requirements.
2. Prescription, dispensing and compounding records are retained for the period required by UAE pharmacy regulations.
3. When data is no longer needed, we anonymise or securely delete it, unless retention is required by law.

9. Security

1. We implement technical and organisational measures to protect your data, including access controls, encryption in transit, row-level security and audit logging.
2. Access to health and prescription data is restricted to authorised roles on a minimum-necessary basis.
3. No method of transmission or storage is fully secure; we continuously work to improve safeguards but cannot guarantee absolute security.
4. In the event of a personal data breach affecting you, we will notify you and the relevant authority as required by UAE law.

10. Cookies & Analytics

1. We use essential cookies to operate the Site and keep you logged in.
2. We use analytics to understand usage and improve services; analytics data is aggregated where possible and does not identify individuals.
3. You can control cookies through your browser settings; disabling some cookies may affect Site functionality.

11. Marketing & Communications

1. With your consent, we may send wellness and pharmacy updates by email or other channels.
2. You may unsubscribe at any time using the link in our communications or by contacting us.
3. Health and prescription content is never included in marketing previews.

12. Your Rights

Subject to UAE law and pharmacy obligations, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion where retention is not legally required.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent UAE data-protection authority.

To exercise any right, contact us at the details in section 14. We may need to verify your identity before responding and may apply legal exceptions where required for pharmacy and regulatory compliance.

13. Children's Privacy

Our services are not directed to children under 18 without the involvement of a parent or legal guardian. Where a prescription applies to a minor, it is processed under the account and supervision of the adult responsible for their care, and only to provide the pharmacy service.

14. Contact & Data Protection Officer

BioBlend Compounding Pharmacy Wasl Sports Club Shops, Al Nawras Street, Al Jaddaf PO Box 33233, Dubai, United Arab Emirates Phone: +971 4 222 2500 Email: hello@bioblend.ae

For privacy questions or to exercise your rights, please write to us at the email above with the subject "Privacy Request".

15. Changes to This Notice

We may update this Notice from time to time. The "Last updated" date at the bottom indicates the latest revision. Continued use of the Site after a change constitutes acceptance of the updated Notice.