Transparency and trust are core values at Elumia Med Store.
PRIVACY POLICY
Effective Date: 01-05-2026
Elumia Med Store ("we," "us," or "our") is committed to protecting the privacy and security of your personal and professional data.
As a medical marketplace, we collect data necessary to facilitate B2B and B2C transactions: Identity Data: Name, Emirates ID (for verification), professional medical license details (DHA/MOHAP), and trade license for clinic accounts. Contact Data: Billing address, clinic/delivery address, email, and phone number. Financial Data: We do not store full credit card details on our servers. All payments are processed via Stripe or Nomod. We only receive transaction confirmations and partial card info (last 4 digits). Technical Data: IP address, browser type, and usage patterns on elumiamedstore.com.
We process your information based on the following legal grounds: Contractual Necessity: To process orders, manage deliveries via EMX, and handle payments. Legal Obligation: To verify medical licenses before selling regulated drugs or equipment. Legitimate Interest: To improve our marketplace offerings and notify clinics about new "Aesthetic" or "Emergency" equipment arrivals.
We only share your data with essential partners to complete your service: Logistics Partner (EMX): We share your delivery address and contact person details for shipment fulfillment. Payment Providers (Stripe/Nomod): Your payment data is shared directly with these providers to facilitate secure checkout and "Buy Now, Pay Later" installments (Tabby/Tamara). Regulatory Authorities: We may share data with MOHAP or DHA if required for compliance audits regarding medical supply chains.
In accordance with UAE commercial and health laws: Transaction Records: Kept for at least 5 years to comply with audit and record-keeping regulations. Medical License Data: Kept as long as your account is active to ensure continued eligibility for professional-grade purchases.
Under Federal Decree-Law No. 45 of 2021, you have the right to: Access: Request a copy of the personal data we hold about you. Correction: Request that we update any inaccurate clinic or personal information. Erasure: Request the deletion of your data (subject to legal retention requirements for medical sales). Restriction: Request that we stop using your data for marketing (e.g., newsletters).
We implement industry-standard encryption and security protocols (SSL/TLS) to protect data in transit. Access to sensitive clinic data is restricted to authorized Elumia personnel only.
For any privacy-related inquiries or to exercise your data rights, please contact: Data Protection Officer Elumia Med Store Email: info@elumiamedstore.com