Privacy Notice

Sylk Health is operated by Hydra Holding L.L.C-FZ, trade licence 2529593.01, registered at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

General questions: contact@sylkhealth.com. Privacy questions and rights requests: privacy@sylkhealth.com. Complaints: complaints@sylkhealth.com.

We do not have a data protection officer or a representative in the EU or UK.

When you submit a Booking Inquiry through our booking form

• Your email address
• Your preferred language
• The procedure you selected
• Your browser's timezone

We assign an inquiry reference to your request.

When you send a request to a specific provider

• Your email address
• The procedures you selected
• Your phone number, if you choose to give it
• A message of up to 2,000 characters, if you choose to write one

Your consent record

• The cookie categories you chose
• The version of the consent notice you saw
• The date and time you gave consent
• A hashed version of your IP address

We use your information to send your Booking Inquiry to the provider you chose and to answer your questions about it.

Our basis for this: it is necessary to take the steps you asked for. You also give consent at the booking step. We rely on our legitimate interest in keeping the site secure and, only where you consent, in looking at aggregate analytics.

The procedure you select is treated as health data.

We share your information with:

• The provider you chose. This provider is independent of Sylk Health and decides its own use of your information.
• Our processors. Companies that host our systems and send email on our behalf.
• Authorities. Where the law requires it.

We do not sell personal data.

Separately from personal data, we license aggregated provider price data to institutions. That data contains no information about users.

Our systems are hosted outside the UAE. When you submit a Booking Inquiry, we send it to the provider you chose, who may be located in a different country.

Our basis for this transfer: it is necessary to act on the request you made (UAE Federal Decree-Law No. 45 of 2021, Article 23(1)(d)), and you consent to it at the booking step.

If you are in the EU or UK: no adequacy decision covers the provider's country. The transfer rests on your explicit consent and on its necessity for the request you made. You can ask us which safeguards apply by emailing privacy@sylkhealth.com.

We use Google Tag Manager to manage four categories of cookies: essential, functional, analytics, and marketing.

By default, analytics and marketing cookies are switched off. You can turn them on or off at any time using the cookie settings in our footer.

We honour the Global Privacy Control signal: when your browser sends it, analytics and marketing cookies stay off unless you turn them on.

We do not respond to Do Not Track signals.

Google may collect information about your activity across sites only if you allow analytics or marketing cookies.

We keep an inquiry only as long as needed to handle it and delete it on request.

You can ask us for access to your information, to correct it, to delete it, or to withdraw your consent. Email privacy@sylkhealth.com.

If you have a complaint, email complaints@sylkhealth.com first. We acknowledge complaints within 5 business days. You can also complain to your regulator at any time.

• Categories of information we collect and share: see What We Collect and Who Receives It above.
• How to review or correct your information: see Your Rights above.
• How we notify you of changes: see Changes below.
• Effective date: see the date at the top of this page.
• Do Not Track: we do not respond to Do Not Track signals. Other companies, such as our analytics provider, may collect information about your activity across sites if you allow analytics or marketing cookies.

Residents of Washington and Nevada: see our Consumer Health Data Privacy Policy.

If you are in the EU or UK, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

You can complain to a supervisory authority. We do not use automated decision-making, including profiling, to make decisions about you.

If you are in the UK: you may complain to us first, at complaints@sylkhealth.com. We acknowledge UK complaints within 30 days. You may also complain to the Information Commissioner's Office (ICO) at any time.

We are not a covered entity under HIPAA.

We are not a business associate under HIPAA.

We do not receive, hold, or transmit protected health information.

Providers have their own notices under HIPAA.

Sylk Health is established in the United Arab Emirates. We process personal data under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Before we process your data, the law requires us to tell you:

• The purposes of processing: see Why We Use It above.
• The sectors and establishments, inside and outside the UAE, that receive your data: we do not disclose your data to any sector or establishment inside the UAE. Outside the UAE, your data goes to the provider you chose and to our processors. See Who Receives It above.
• The measures that apply to processing your data across borders: see International Transfers above.

You may complain to the UAE Data Office.

This service is not offered to residents of the United Arab Emirates.

If you are in Australia: when you consent at the booking step to your inquiry being sent to a provider overseas, Australian Privacy Principle 8.1 will not apply to that disclosure, and we will not be accountable under the Privacy Act for how the overseas provider handles it.

You can ask to access or correct your information by email to privacy@sylkhealth.com. You can complain to the Office of the Australian Information Commissioner (OAIC).

Sylk Health is not directed at anyone under 18. We do not knowingly collect information from anyone under 18. If you believe we have collected information from someone under 18, contact us at privacy@sylkhealth.com.

We may update this notice. When we do, we update the effective date at the top of this page. If a change is material, we email everyone with an open inquiry at least 30 days before it takes effect.