PRIVACY POLICY
MSH INTERNATIONAL
Publisher
MSH INTERNATIONAL MENA, a group of companies operating across the Middle East and North Africa region, undertakes to ensure the protection, confidentiality and security of your personal data, in compliance with applicable UAE and regional data protection laws and regulations.
Depending on the jurisdiction and the services provided, personal data may be processed by one or more of the following entities, all operating under the MSH International MENA umbrella and aligned with its data protection standards:
- MSH International (Dubai) Ltd, licensed and regulated by the Dubai Financial Services Authority (DFSA) in the Dubai International Financial Centre (DIFC) for the provision of Insurance Management;
- MSH International LLC, operating in the Emirate of Dubai and licensed and regulated by the Central Bank of the United Arab Emirates (CBUAE) for the provision of Medical Billing Services and Claims Settlement Services;
- Mobility Saint Honore International For Medical Insurance Claims Management LLC, operating in the Emirate of Abu Dhabi and licensed and regulated by the Central Bank of the United Arab Emirates (CBUAE) for the provision of Medical Billing Services and Claims Settlement Services;
- MSH International QFC LLC, licensed and regulated by the Qatar financial Centre (QFC) for the provision of Medical Billing Services and Claims Settlement Services;
Together, these entities ensure that personal data processing activities are conducted in accordance with MSH International MENA’s privacy and security standards, including ADHICS and other applicable regional regulatory requirements.
Where applicable, it also complies with the United Arab Emirates Federal Decree‑Law No. 45 of 2021 on the Protection of Personal Data, Federal Decree-Law No. 2 of 2019 Concerning the Use of Information and Communication Technology (ICT) in Health Fields, the Data Protection Law, DIFC Law No. 5 of 2020, the Sultanate of Oman Personal Data Protection Law (Royal Decree No. 6/2022), the State of Qatar Personal Data Privacy Protection Law No. 13 of 2016 and the Qatar Financial Centre Authority Data Protection Regulations 2021.
This policy applies to all individuals whose personal data is processed by us in this context, including insured members and their dependents
Why do we process your personal data ?
We only process your personal data for specific, explicit and legitimate purposes. MSH INTERNATIONAL MENA, as data controller, processes personal data for the following purposes:
- Performance of the policy (administrative and financial aspects)
- Creation of the client account
- Claims management
- Quality survey to assess your level of satisfaction and improve it
- Compliance with legal requirements
- Management of complaints
The legal ground for personal data processing is the performance of the policy. Statistical and anonymization processing is based on a legal ground linked to MSH INTERNATIONAL MENA’s legitimate interest in improving its services.
Applicable Law
This website is governed by the laws of the United Arab Emirates, including DIFC regulations where applicable. Any litigation will be tried before the competent UAE courts or arbitration bodies.
Disclaimer
The information contained in this website is for general information purposes only. It is subject to change without notice by MSH INTERNATIONAL MENA makes no warranty as to the accuracy of this content. Furthermore MSH INTERNATIONAL MENA does not accept liability to any person for the information provided on this website or lack of detailed information.
How long do we keep your personal data ?
We will only keep your personal data for the period required for the purposes specified in this Privacy Policy on the protection of your personal data. Then, it will be deleted or anonymized when it is no longer necessary.
Where is your personal data processed ?
Your personal data may be processed both within and outside your jurisdiction, always subject to contractual and legal obligations on confidentiality and security, in compliance with applicable data protection laws and regulations.
We will take appropriate measures to ensure that your personal data is transferred outside your jurisdiction only under conditions that provide an equivalent level of protection to that required under the applicable laws.
Who are the recipients of your personal data ?
Your personal data may be processed both within and outside your jurisdiction, always subject to contractual and legal obligations on confidentiality and security, in compliance with applicable data protection laws and regulations.
We will take appropriate measures to ensure that your personal data is transferred outside your jurisdiction only under conditions that provide an equivalent level of protection to that required under the applicable laws.
Where is your personal data processed ?
Your personal data may be processed both within and outside your jurisdiction, always subject to contractual and legal obligations on confidentiality and security, in compliance with applicable data protection laws and regulations.
We will take appropriate measures to ensure that your personal data is transferred outside your jurisdiction only under conditions that provide an equivalent level of protection to that required under the applicable laws.
What are your rights?
In accordance with the applicable regulations, you have the following rights:
- The right to access your data: You can request to see all the personal information we hold about you and understand how it is being used. We will provide you with a copy of this data so you can verify its accuracy..
- The right to rectify your data: If any of your personal information is incorrect, incomplete, or outdated, you can ask us to correct or update it. This ensures that your records are always accurate.
- The right to erasure (right to be forgotten): You can ask us to delete your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent, except where the law requires us to retain it.
- The right to restrict the processing: You can request that we temporarily limit the way we use your data, for example while a dispute over accuracy is being resolved, or if you object to processing for certain purposes.
- The right to object: You may object to the processing of your personal data for specific reasons related to your situation. You also have an absolute right to opt out of any processing for direct marketing or profiling related to marketing.
- The right to withdraw your consent: If you previously agreed to allow us to process your personal data, you can withdraw this consent at any time. Withdrawing consent will not affect the lawfulness of processing that occurred before you withdrew it.
- The right of portability: Where technically feasible, you can request that we provide your personal data in a structured, commonly used electronic format, or transfer it directly to another service provider of your choice.
To exercise the rights listed above, you can send a request in writing as indicated in the “HOW TO CONTACT US” section. Any request should be submitted together with a proof of identity (copy of your identity card, for example).
In accordance with the applicable regulations, you can also lodge a complaint with the relevant supervisory authority, including:
- UAE Submit a Complaint – Sanadak
- Qatar Individuals | National Cyber Governance and Assurance Affairs
How is your data secured ?
We ensure that your data is processed in total security and confidentiality, in particular when some operations are carried out by our IT service providers. To this end, appropriate technical and organizational measures are taken to prevent the loss, misuse, alteration and deletion of your personal data.
How to contact us ?
If you have any questions regarding the use of your personal data under this Privacy Policy, you can email our Data Protection Officer at: compliance@msh-intl.com who will make their best efforts to answer them in a timely manner.