Privacy Policy

This Privacy Policy (the “Policy”) explains how Innovative Health MENA (Licence no. 1109564), trading as Global Innovative Health (“Global Innovative Health”, “GIH”, “we”, “us” or “our”), collects, uses, discloses and safeguards personal information, including when you visit or interact with the following websites and online services that link to or incorporate this Policy (together, the “Sites”):

• https://www.globalinnovativehealth.com (our main website);
• https://www.globalinnovativehealth.com/solutions (our curated digital health solutions showcase); and
• https://intel.globalinnovativehealth.com (our Sector News Intelligence news and newsletter subscription service, the “Intel Service”).

This Policy also applies to personal information we obtain when you interact with us in other contexts, including when you contact us, request information or services from us, subscribe to our communications, or attend or register for events we host or attend. It describes your choices regarding our use of your personal information, the ways in which we protect that information, and how you may contact us about our privacy practices.

This Policy has been prepared with reference to the Data Protection Law, DIFC Law No. 5 of 2020 and Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL), and, where it applies to individuals in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018. It may be augmented by jurisdiction-specific addenda from time to time.

The term “personal information” (also referred to as “personal data”) means any information relating to an identified or identifiable natural person. Please read this Policy carefully to understand our views and practices regarding how we handle personal information.

1. Who We Are and Our Responsibility

Innovative Health MENA (Licence no. 1109564), trading as Global Innovative Health, of P.O. Box 29588, Dubai, United Arab Emirates, is responsible for processing your personal information as described in this Policy, for and on behalf of itself and the various entities operating as part of Global Innovative Health.

For the purposes of applicable data protection law, Global Innovative Health is typically the “controller” of any personal information provided to us, meaning that we determine how and why your personal information is processed. Very occasionally, and only on specific engagements, we act as a “processor”, meaning that we process personal information solely on the documented instructions of another controller or as otherwise permitted by law.

We are committed to safeguarding the privacy of the personal information that we process in the course of our business, including the personal information we receive from you. If you have any questions about our approach to data protection that are not addressed in this Policy, please contact us using the details in the “Contact Us” section below.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, for example when you complete an online contact or enquiry form, message us via WhatsApp from our Sites, register or subscribe to the Intel Service, sign up to receive our newsletter or updates, or register for or attend an event. The personal information you may choose to provide includes, for example:

• Name, job title or role, and the organisation or employer you represent;
• Contact details, including email address, telephone or mobile number, and physical or postal address;
• For the Intel Service, the account information we hold, namely your first and last name, email address, and organisation name, together with your login credentials and your subscription and communication preferences;
• The content of enquiries, feedback, and other communications you send to us, together with any information you choose to include;
• Information relating to the matter or opportunity on which you are seeking our services; and
• Where relevant to an engagement, identification information to verify your identity and, where applicable, bank account or other financial information.

2.2 Information We Collect from Third Parties

We may receive information about you from third parties and other sources, including professional networking platforms such as LinkedIn, event organisers and co-hosts, other parties to a matter in which we are involved, technology platform operators used in our business, other organisations you have dealings with, regulators or government authorities, and publicly available records. This may include your name, role, employer, contact details, and professional or company information. We may combine this information with information we have collected from other sources.

2.3 Information We Collect Automatically

When you use the Sites, we and our service providers may automatically collect certain information about your device and your use of the Sites. This information may include unique device identifiers, Internet Protocol (IP) addresses, approximate location derived from your IP address, browser type and settings, language preferences, operating system details, referring URLs, the pages you view, the length of your visits, and other interaction data. We collect this information using cookies and similar technologies, as described in the “Cookies and Analytics” section below.

2.4 No Obligation to Provide Personal Information

You are not required to provide personal information to us. However, if you choose not to provide certain information, we may be unable to respond to your enquiry, provide access to the Intel Service, deliver the communications you have requested, or otherwise provide the services or benefits made available through the Sites.

3. Cookies and Analytics

Cookies are small files placed on your device by a web server that enable a website to recognise your device and remember certain information. We use cookies and similar technologies to operate the Sites, to remember your preferences, and to understand how the Sites are used so that we can improve them.

Our /solutions showcase presents a cookie banner that allows you to accept all cookies or to permit essential cookies only. Where required by applicable law, we will obtain your consent before setting non-essential cookies, and you can change your preferences at any time.

We use Google Analytics to understand how visitors use the Sites, for example by recording a unique visitor identifier, the date and time of visits, session details, traffic sources, and pages viewed. Most browsers allow you to be notified when you receive a cookie, and to reject or disable cookies. If you restrict cookies, some features of the Sites, such as personalisation or staying signed in to the Intel Service, may not work as intended.

4. How We Use Your Information

We use the personal information we collect through the Sites and our other interactions with you for a number of purposes, including to:

• Provide, operate, maintain, and improve the Sites and the Intel Service, and customise your online experience;
• Create and administer Intel Service accounts, authenticate users, and manage subscriptions;
• Respond to your enquiries, comments, requests, and communications, and provide support;
• Deliver newsletters, market developments, information about our services, and other communications you have requested or that we are permitted to send you;
• Manage our business relationship with you or your organisation, including intake, onboarding, and record-keeping;
• Monitor, analyse, and understand trends, usage, and activity on the Sites in order to improve our services;
• Maintain the security of our systems, prevent fraud or misuse, and protect our rights and those of others; and
• Comply with applicable laws, regulations, and legal process, including anti-money laundering, sanctions, and regulatory obligations.

Where we intend to use your personal information for a purpose not described in this Policy, we will provide notice at the time of collection.

5. Legal Grounds for Processing

Where applicable data protection law requires a legal basis for processing personal information, we rely on one or more of the following grounds, as relevant to the circumstances:

• Consent: where you have given your consent, for example when you subscribe to the Intel Service or opt in to receive marketing communications. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Performance of a contract: where processing is necessary to provide a service you have requested, such as setting up and administering your Intel Service subscription, or to take steps at your request before entering into a contract.
• Legitimate interests: where processing is necessary for our legitimate interests, such as operating and securing the Sites, understanding and improving our services, and promoting our business, provided these interests are not overridden by your rights and interests.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation to which we are subject.

6. Newsletters and Marketing Communications

We operate a communications and mailing programme through which we inform subscribers and contacts about our services, publications, events, and sector intelligence, including via the Intel Service newsletter. These communications may contain tracking technologies that help us understand engagement and improve the relevance of what we send.

You can opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in our emails, by updating your preferences within the Intel Service, or by contacting us at dp@globalinnovativehealth.com. Opting out of marketing will not affect service or transactional communications relating to any subscription or engagement you hold with us.

7. Payments and Subscriptions

Access to certain features of the Intel Service is provided on a paid subscription basis. All payments are taken and processed by a third-party payment service provider (for example, Stripe or a comparable payment platform), which acts as a separate controller of your payment data. Your payment and card details are provided directly to, and processed by, that provider under its own privacy terms and security standards.

Global Innovative Health does not collect, receive, or store your payment card or billing details. We receive only limited confirmation from the provider that a subscription has been paid for and is active, which we use to administer your account and your access to the Intel Service.

Our legal basis for administering your subscription is the performance of our contract with you, and, where applicable, compliance with our legal, tax, and accounting obligations. We encourage you to review the privacy notice of our payment provider to understand how it handles your payment data.

8. How We Disclose Your Information

We do not sell, rent, or otherwise make your personal information commercially available to third parties. We may disclose your personal information in the following circumstances:

• Group entities: with entities operating as part of Global Innovative Health, including our team in the United Kingdom and our partners in the Middle East region, for the purposes described in this Policy.
• Service providers: with third parties who provide services on our behalf, such as website and IT hosting, cloud infrastructure and security, analytics, email and newsletter delivery, event management, and professional advisers including lawyers and accountants. These providers are permitted to use your personal information only as necessary to perform services for us.
• Payment provider: our subscription payments are handled by a third-party payment service provider (for example, Stripe or a comparable platform). You provide your payment details directly to that provider; we may share limited information, such as your email address, so that your payment can be matched to your subscription. We do not receive or store your payment card details.
• Events: where you register to attend an event, your name and organisation may appear on a delegate list, and photographs or video taken at the event may capture your image; we will make this clear in materials relating to the specific event.
• Legal and regulatory: where necessary to comply with the law, a court order, regulatory requirement, or legal process, or to establish, exercise, or defend legal rights.
• Corporate transactions: in connection with a merger, acquisition, reorganisation, financing, or sale or transfer of some or all of our business or assets, in which case personal information may be transferred to the parties involved.

We may use and disclose aggregated or de-identified information, which does not identify any individual, without restriction.

9. Cross-Border Transfers of Your Information

Global Innovative Health operates across the United Arab Emirates, the United Kingdom, and other markets in the Middle East, Africa, and internationally. As a result, your personal information may be transferred to, stored in, or accessed from countries other than the one in which you are located, including transfers between our UAE and UK operations and to service providers acting on our behalf. The data protection laws of those countries may differ from those of your own country.

Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection, including, where required, by putting in place appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms recognised under applicable data protection law. You may request further information about the safeguards we apply by contacting us using the details below.

10. How We Secure Your Information

We maintain appropriate administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, and alteration. Although we use reasonable efforts to protect your information, transmission over the internet is not completely secure, and we cannot guarantee the security of information transmitted to us over the internet.

11. How Long We Keep Your Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including for the duration of any subscription, business relationship, or engagement, unless a longer retention period is required or permitted by law. Records of your subscription and of payments made for it are retained for the periods required by applicable tax and accounting law; we do not hold your payment card details. We may also retain information as necessary to establish, exercise, or defend legal rights. When personal information is no longer required, we will securely delete or anonymise it.

12. Your Rights

Depending on your location and the applicable data protection law, you may have some or all of the following rights in relation to your personal information:

• Access: to request access to, and a copy of, the personal information we hold about you;
• Rectification: to request that inaccurate or incomplete personal information be corrected or completed;
• Erasure: to request the deletion of your personal information in certain circumstances;
• Restriction and objection: to request that we restrict processing, or to object to processing carried out on the basis of our legitimate interests;
• Portability: to receive certain personal information in a structured, commonly used, and machine-readable format, or to have it transferred to another controller;
• Withdraw consent: to withdraw your consent at any time where we rely on consent to process your personal information; and
• Complain: to lodge a complaint with the relevant supervisory authority, such as the Commissioner of Data Protection in the DIFC, the UAE Data Office, or, for individuals in the United Kingdom, the Information Commissioner’s Office.

To exercise any of these rights, please contact us using the details below. We may ask you to verify your identity before responding, and we will respond in accordance with applicable data protection law.

13. Third-Party Links and Social Features

The Sites may contain links to, and features that interact with, websites, applications, and services operated by third parties, including social networks and messaging services such as WhatsApp and LinkedIn. We do not control these third parties and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service before providing your personal information to them.

14. Children’s Privacy

The Sites are intended for business and professional audiences and are not directed at children. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will delete it in accordance with applicable law.

15. Changes to this Policy

We may update this Policy from time to time. If we make changes, we will revise the effective date at the top of this Policy, and, where the changes are material, we will provide a more prominent notice. We encourage you to review this Policy periodically to stay informed about our privacy practices.

16. Language

This Policy is prepared in English. In the event of any conflict between the English-language version and any translation, the English-language version shall prevail to the fullest extent permitted by applicable law.

17. Contact Us

If you have any questions about this Policy or our processing of your personal information, or if you wish to exercise your rights, please contact us:

Last updated: July 2026