1. Who we are
Orvion is a telehealth platform operating in the United Arab Emirates in partnership with a UAE licensed clinic. References to "we", "us" and "our" mean Orvion. References to "you" mean any visitor or patient using our website or services.
2. Information we collect
To provide consultations and dispense medication safely, we collect:
- Identity: name, date of birth, gender, Emirates ID where required by law.
- Contact: email address, mobile number, delivery address.
- Medical: symptoms, conditions, medications, allergies, photographs you choose to share, and the content of any consultation with our physicians.
- Payment: billing details necessary to process payment, processed via PCI compliant payment providers; we do not store full card numbers.
- Technical: device, browser and basic analytics needed to keep the site working and secure.
3. How we use your information
- To match you with a UAE licensed physician and conduct your consultation.
- To issue prescriptions and arrange dispensing through our pharmacy partner.
- To provide ongoing follow up care, customer support and treatment reminders.
- To meet our legal and regulatory obligations under UAE healthcare law.
- To improve the safety, quality and performance of our service.
4. Lawful basis
We process personal and medical data on the basis of (a) the contract between you and Orvion, (b) your explicit consent for sensitive medical information, (c) our legal obligations as a regulated healthcare provider, and (d) our legitimate interest in operating and securing the service.
5. Who can see your information
Your medical records are accessible only to:
- The physician treating you and our clinical support team.
- The licensed pharmacy partner dispensing your prescription.
- Couriers, restricted to delivery information only (no medical content).
- Regulators where we are legally required to disclose.
We do not sell or share medical information with third parties for marketing.
6. International transfers
Where any service provider processes data outside the UAE, we use providers with appropriate contractual safeguards and security certifications.
7. Security
Records are stored encrypted at rest and in transit. Access is role based, logged and audited. We follow the standards expected of UAE regulated health services.
8. Retention
Medical records are retained for the period required under UAE healthcare law (currently a minimum of five years from your last consultation). Marketing data is retained only while you remain subscribed.
9. Your rights
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Request deletion, subject to our regulatory record keeping obligations.
- Withdraw marketing consent at any time using the unsubscribe link in any email.
10. Cookies
We use a minimal set of cookies for site functionality, security, and basic anonymous analytics. You can control cookies through your browser settings.
11. Children
Orvion's medical services are intended for adults aged 18 and over. We do not knowingly collect data from children.
12. Contact
For any privacy question or to exercise your rights, email hello@orvionresearch.com.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be notified by email or a notice on the site before they take effect.