Privacy Policy

MedProp is a confidential investment platform that connects healthcare property owners (Sellers) and investors (Buyers) in the UAE's healthcare sector. As part of operating this platform, we collect and process certain personal and business information.

Protecting this information is central to our service. Our platform is built on a principle of anonymity between Buyers and Sellers — neither party has direct access to the other's personal data. All interactions are coordinated through MedProp's Admin team.

We collect information in the following categories:

MedProp uses your information to:

• Create and manage your account and verify your identity.
• Review and approve or reject listing submissions and viewing requests.
• Coordinate viewing appointments between Buyers and Sellers through our Admin team.
• Send platform notifications regarding listing status, appointment confirmations, and updates.
• Maintain secure records of all documents submitted for compliance and audit purposes.
• Improve platform functionality and user experience.
• Comply with applicable UAE legal obligations.

We will not use your information for unsolicited marketing without your explicit consent.

A core principle of MedProp is the protection of identity between Buyers and Sellers. Neither party will have access to the other's personal profile, uploaded documents, or contact details at any stage of the process unless both parties have consented to mutual disclosure at an appropriate transactional stage.

Only MedProp's Admin team has visibility into both Buyer and Seller information, and this access is strictly limited to facilitating platform operations. Admins are bound by confidentiality obligations.

Publicly visible listing information is limited to: facility type, general location, investment range, and a short description. No personal information about Sellers is displayed on public listings.

All documents uploaded to MedProp — including proof of funds, NDAs, LOIs, trade licenses, and ownership certificates — are stored securely using encrypted cloud storage.

We implement industry-standard security measures including:

• Encryption of files at rest and in transit.
• Access controls that restrict document access to authorised Admin personnel only.
• Secure file handling practices compliant with UAE data protection standards.

While we take every reasonable precaution to protect your data, no system is completely immune to security risks. We encourage you to use strong passwords and report any suspicious activity immediately.

MedProp does not sell, rent, or trade your personal data to third parties. We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party providers who assist in operating the platform (e.g., cloud storage, authentication services) under strict data processing agreements.
• Legal obligations: Where required by UAE law, court order, or regulatory authority.
• Business transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred, with prior notice provided.
• With your consent: In any other circumstance where you have provided explicit consent.

MedProp uses cookies and similar tracking technologies to maintain session state, improve platform performance, and enhance your experience. These include:

• Strictly necessary cookies: Required for platform functionality such as login sessions and security.
• Analytical cookies: Used to understand how users interact with the platform so we can improve it.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the platform.

We retain your personal information for as long as your account is active or as needed to provide our services. Uploaded documents and transaction records may be retained for a longer period to comply with UAE legal and regulatory requirements.

If you close your account, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law or for legitimate business purposes such as dispute resolution.

Depending on your jurisdiction and applicable law, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal obligations.
• Objection: Object to certain types of data processing.
• Portability: Request a portable copy of your data in a structured format.

To exercise any of these rights, please contact us at the details provided in Section 13. We will respond to all requests within a reasonable timeframe in accordance with applicable law.

MedProp uses the following third-party services to operate the platform. Each is governed by their own privacy policies:

• Cloudinary: Used for secure file and document storage.
• Google OAuth: Used for sign-in via Google accounts.
• MongoDB Atlas: Used as the primary database for user and listing data.

MedProp is not responsible for the privacy practices of these third-party providers. We encourage you to review their respective policies.

MedProp is intended solely for use by adults aged 18 years and older. We do not knowingly collect personal information from minors. If we become aware that personal data has been collected from a person under 18, we will take steps to delete that information promptly.

MedProp may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will revise the "Last updated" date at the top of this page and, where changes are material, notify users via their dashboard or registered email.

Your continued use of the platform after any changes take effect constitutes your acceptance of the updated policy.

If you have any questions, requests, or concerns about this Privacy Policy or how your data is handled, please reach out to us: