Privacy Policy
Aafia EMR is a product operated by Aafia Technologies W.L.L., registered in the Kingdom of Bahrain. We provide cloud-based electronic medical records (EMR) and clinic management solutions for healthcare providers across the GCC. We are committed to protecting patient privacy, safeguarding clinical data, and handling all information in full compliance with applicable healthcare regulations.
Aafia EMR Privacy Policy
This Privacy Policy describes how personal and clinical information is collected, used, stored, and shared when you use the Aafia EMR platform, visit our website at https://aafiaemr.com , or subscribe to any of our services (collectively, the "Platform").
Information we collect
When you use the Platform, we collect information necessary to provide our healthcare software services. This includes data you provide directly and data collected automatically:
- Account Information – Your name, email address, clinic name, phone number, and professional credentials provided during registration.
- Patient Data – Patient records, medical histories, prescriptions, lab results, and appointment details entered by authorised clinic staff. This data is processed solely on behalf of your clinic.
- Billing Information – Payment method details, invoicing records, and subscription information required to process your plan payments.
- Device & Usage Data – IP address, browser type, operating system, access times, and pages viewed to improve platform performance and security.
- Cookies – Small data files placed on your device to maintain sessions and preferences. (Learn more about cookies)
How we use your information
We use collected information to:
- Provide, maintain, and improve the Aafia EMR platform and its features
- Process subscription payments and generate invoices
- Send service notifications, updates, and security alerts
- Provide technical support and respond to your enquiries
- Comply with legal obligations and healthcare regulations in Bahrain and the GCC
- Detect, prevent, and address fraud, abuse, or security issues
Important note on patient data:
- Patient data entered into Aafia EMR belongs to your clinic. We act as a data processor on your behalf.
- We do not access, sell, or use patient health records for marketing or any purpose unrelated to providing the service.
- All clinical data is encrypted at rest and in transit using AES-256 encryption.
Sharing your information
We do not sell your personal or clinical data. We may share limited information with trusted third parties only as necessary:
- Cloud Infrastructure – Hosting providers with data centres in the GCC region to ensure data residency compliance.
- Payment Processors – Secure payment gateways (e.g., Stripe, Benefit Pay) to handle subscription billing.
- Legal Authorities – When required by law, regulation, or valid legal process issued by Bahraini or GCC authorities.
Data security
We implement industry-standard security measures to protect your data, including 256-bit SSL encryption, role-based access controls, regular security audits, automated backups, and compliance with NHRA (Bahrain) and HIPAA-aligned security practices. Our infrastructure maintains 99.9% uptime with redundant systems.
Your rights
Under Bahrain's Personal Data Protection Law (PDPL) and applicable GCC regulations, you have the right to:
- Access, correct, or request deletion of your personal information.
- Export your clinic data at any time in standard formats.
- Withdraw consent for non-essential data processing.
- To exercise these rights, please contact us at privacy@aafiaemr.com
Data retention
We retain your account and billing data for the duration of your subscription and for a period of 5 years thereafter as required by Bahraini commercial law. Patient data is retained according to your clinic's data retention settings and can be exported or deleted upon written request after account closure.
Children's privacy
Aafia EMR is a professional healthcare platform intended for use by licensed medical practitioners and clinic administrators. It is not directed at individuals under the age of 18.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify active subscribers of material changes via email or in-app notification at least 30 days before they take effect.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@aafiaemr.com.
Last updated: May 2025
Ready to transform your clinic?
Join leading healthcare providers in Bahrain on Aafia EMR. Get a personalised demo or a 14 Day free trial.
-
No Credit Card Required
-
Free For 14 Day Trial.
-
Money Back Guarantee.