Privacy Policy

Last updated: 28 October 2026.

Who we are and what this policy covers

Hope Abilitation Medical Center, LLC (Hope AMC) is responsible for the personal information handled through www.hope-amc.com. This policy covers browsing our website, inquiries, appointment requests, second-opinion requests, our developmental milestone checklist and the third-party features described below. Information handled as part of clinical care may also be subject to separate patient notices and healthcare record requirements.

Contact us about this policy or your information at info@hope-amc.com, by telephone on +971 4 270 3333, or at Kharbash Compound, Villa 3, Jumeirah Road, Billqetair Street, Umm Suqeim 1, P.O. Box 77025, Dubai, United Arab Emirates.

Information you send us

Our inquiry form handles appointment requests, second opinions, questions and feedback. Depending on your request, we collect:

• Your name, email address, telephone number and country code, preferred contact method and language.
• The inquiry topic, selected service or subject, and any message or notes you provide.
• For second opinions, your child's name and date of birth, area of concern or diagnosis, the type of opinion requested, additional information and any medical reports you choose to upload.
• Your acknowledgment of the privacy notice, which is required to submit the form.
• The website page and button that brought you to the form and referral information described below.

Messages, reports and checklist answers can contain sensitive health information about you or your child. Please provide only information relevant to your request and submit another person's information only if you are authorized to do so. These forms are intended for adults, including parents and guardians acting for children.

The developmental milestone checklist

The symptom checker is a developmental milestone checklist that runs in your browser. Selecting an age and answering questions does not by itself submit those answers to our team. As you complete the checklist, the selected age and answers are kept in that tab's session storage so they can be carried to the inquiry form. The form displays a preselected “send my checklist answers” option; you can untick it before submitting.

If you submit with that option selected, the age and answers are included in the clinic's inquiry email and lead record. Your confirmation email includes the selected age group. Session storage normally lasts until the tab or browser session closes; the form also clears the saved checklist after a successful JavaScript-enabled submission. The checklist provides general guidance, not a diagnosis or an automated clinical decision. Browsing the checklist page is still subject to the analytics and advertising choices described below.

How inquiries and reports are processed

We use your inquiry to respond, arrange an appointment or second-opinion review, answer questions and follow up using your contact details and preferred method. Submitting an appointment request does not itself confirm an appointment.

The website uses Cloudflare Email Sending to send the inquiry to our front office and an acknowledgment to your email address. Our team receives inquiries through Hope AMC's email service, Microsoft 365. Uploaded reports are processed by the website to create email attachments. The website does not save a separate report file or upload the report itself to Airtable, but copies remain in the email delivery and mailbox systems; attaching a report is not a temporary or storage-free exchange.

We also record delivered inquiries in Airtable for inquiry management and follow-up. These records include contact and family details, the request, relevant health information you supplied, any submitted milestone answers, submission time, source page, clicked button and referral details. Second-opinion records note the number of reports emailed, rather than containing the report files. Feedback sent under the feedback subject is emailed but is not added to this lead tracker.

To help our team recognize returning contacts, we compare the email address or the final nine digits of the supplied phone number with existing mobile or WhatsApp numbers in the relevant Airtable lead table. A match adds a returning-contact note to the new inquiry; it does not automatically change the earlier record.

Referral information and browser storage

To understand how people find us, the website stores the first visit with a referral source in your browser's local storage under hope-lead-attribution. This can include campaign source, medium and name, the referring website's hostname, the landing-page path and the visit time. It also records which recognized advertising click parameter was present, such as a Google or Meta parameter, rather than copying that parameter's unique click identifier into this particular record.

We use this stored referral for up to 90 days and include it with an inquiry so our team can understand its source and assess marketing channels. After 90 days it is ignored or replaced on a later qualifying visit; local storage does not automatically erase itself at that deadline. Clearing this website's browser data removes the local copy but does not remove referral details already submitted with an inquiry. Advertising services may separately process full click identifiers. Because this record stays in your browser, holds no identifier for you or your device, is not passed by the website to analytics or advertising services and only reaches us with an inquiry you choose to send, it is kept whatever cookie choices you make.

The site also supports a language preference cookie, remembers your cookie choices in a cookie and uses session storage for the milestone checklist. See our Cookie Policy for the storage names, durations and browser controls.

Website analytics, advertising and session replay

The production website uses Google Tag Manager, subject to the choices in our cookie banner described below. Its published containers configure Google Analytics, Google Ads conversion tracking, Meta Pixel, Hotjar, Microsoft Clarity and ClickGUARD. These services help measure visits and inquiries, understand navigation and engagement, assess advertising results and detect invalid advertising traffic. Google and Meta advertising tools may also support audience building and personalized advertising under their own settings and policies.

Depending on the service, trigger and browser settings, data can include IP address, device and browser information, cookie or advertising identifiers, page URLs, referrers, campaign parameters, visit times, link clicks, scrolling and submission events. Hotjar and Microsoft Clarity provide heatmaps and session replay, which can capture page content and interactions to help understand how the website is used. Visiting health-related pages may reveal interests in particular services or conditions.

The website's own successful-inquiry event sends an event name to Tag Manager without adding your typed answers or report contents to that event. This does not mean third-party scripts cannot observe page content or interactions. Their collection, masking, cookies and retention also depend on their configuration and policies.

A cookie banner lets you accept all, reject all non-essential cookies or choose analytics and advertising separately, and Google services are told through Google Consent Mode that analytics and advertising storage, advertising user data and ad personalization are not allowed unless you choose otherwise. Until you choose, only Google Analytics and Google Ads run, without cookies or advertising identifiers; they still send Google limited information about the visit, including the page address and your IP address, which Google uses to estimate visits and advertising results. If you reject, nothing from Google Tag Manager loads from then on. Hotjar, Microsoft Clarity, Meta Pixel and ClickGUARD load only when you allow both analytics and advertising. You can change or withdraw your choice at any time from Cookie Settings at the bottom of any page. The form's privacy acknowledgment is separate from these choices and does not switch tracking on or off. You can also use browser tracking protection, block third-party scripts or cookies, and use providers' privacy controls. Blocking cookies alone may not prevent all network requests or tracking. Further details are in our Cookie Policy.

Embedded content, recruitment and external links

Google Maps embeds can connect to Google when a map loads. YouTube thumbnails can connect to Google before you play a video; video players use YouTube's privacy-enhanced embed domain where supported, but playing or loading external media still shares technical information with its provider. These services may use their own cookies and account information.

Our careers page embeds the Hope AMC recruitment portal hosted by Zoho Recruit. Loading the portal shares technical information with Zoho. Applications, CVs and other details you enter there are handled through that recruitment service for recruitment purposes, rather than through the website's inquiry form.

WhatsApp contact links and social or sharing links take you to external services. If you use them, the service receives the information you send and applies its own privacy terms. Instagram feed images served from our own website do not require an Instagram embed, although clicking through to Instagram connects you to that service. Links to other Hope websites, including the Saudi website, lead to services whose own notices should be consulted.

Hosting, security and other recipients

Cloudflare hosts and delivers the website and processes technical request information, including IP addresses, URLs and request headers, to deliver and protect it. Our form abuse controls use a hashed IP-derived identifier and submission counters in 15-minute windows. Hashing does not make that identifier anonymous. Operational error information may also be processed to diagnose failures.

The recipients described above include our staff handling your request and providers of hosting, email, inquiry management, recruitment, analytics, advertising and embedded content. Information may also need to be disclosed where required by law or to address a legal claim. Providers may process information outside the United Arab Emirates. Contact us for information about the arrangements applicable to your records; this policy does not promise that all website information stays in the UAE.

Retention and security

The 90-day referral period, session-storage lifetime and 15-minute abuse-control window apply to those specific website functions. They are not deletion deadlines for emails, reports, Airtable records or third-party analytics. Inquiry emails and lead records do not have an automatic deletion schedule implemented by the website. Their retention is managed separately, taking account of the request, ongoing care, applicable record-keeping obligations and legal claims. Contact us to ask about the retention or deletion of your information.

We use HTTPS and server-side form validation, upload restrictions and abuse controls to help protect submissions. No website or email service can guarantee absolute security. If you prefer to discuss how to provide sensitive records, contact the clinic by telephone first.

Your choices and privacy requests

You can browse without submitting an inquiry, omit optional reports or notes, untick the checklist-sharing option, and clear or restrict browser storage. Essential form fields and the privacy acknowledgment are required if you choose to submit an inquiry. Clearing browser data does not delete records already received by us or other providers.

Contact info@hope-amc.com to ask what information we hold, request access or correction, ask for deletion or restrictions, object to a use, or withdraw consent where processing relies on it. Depending on the law applicable to you and the processing, you may also have rights to data portability and to complain to the relevant data protection authority. We may need to verify your identity and, for a child's information, your authority to act. Some records may need to be retained under applicable healthcare or other legal requirements; withdrawing consent does not undo earlier lawful processing.

Changes to this policy

We will update this page when our website practices change. The date above identifies the latest revision. Please contact us if you need clarification about a feature or how your information is handled.