Privacy Policy
Version 2.0 | Effective Date: 6 October 2026
1. About this policy
This Privacy Policy explains how the Emirates Oncology and Radiotherapy Association ("EORA", "we", "us") collects and uses personal data through eora.ae, including the membership application, the contact form, the newsletter, and event information pages. It applies to visitors, applicants, members, speakers and faculty.
EORA is a non-profit medical association licensed by the Department of Community Development, Abu Dhabi (License No. NPO-A-M-098). It is prepared under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
2. Who is responsible for your data
EORA is the data controller. We decide why and how your personal data is used.
Wiredin Events LLC is our data processor. Wiredin (Dubai, Trade License No. 952713) builds and runs this website and the membership system for us, and manages EORA events. It handles your data only on EORA's written instructions, under a data processing agreement. Wiredin does not use EORA member data for its own purposes, does not add it to its own contact databases, and does not use it for its own marketing.
Where EORA runs an event with its own registration page, that page carries a short notice of its own.
3. What we collect
| Where | What we collect |
|---|---|
| Visiting the website | Technical data such as IP address, browser, device, pages visited and time of visit. See the Cookie Notice. |
| Contact form | Name, email, organization and your message. |
| Newsletter | Email address and your subscription preferences. |
| Membership application | Name, date of birth, gender, nationality, emirate of residence, mobile number, email, professional category (for example doctor, resident, nurse, pharmacist, technician, student), speciality, workplace, professional licence number and issuing authority, Emirates ID number and a copy of the Emirates ID, and your application status. |
| Member account | Sign-in email and an encrypted password. We never see your password. |
| Administration | A record of which authorized administrator viewed or changed an application, and when. |
We do not ask for patient information or health data about you. We do not knowingly collect data from anyone under 18.
4. Why we use your data, and the legal basis
| Purpose | Basis |
|---|---|
| Review and decide your membership application, and run your membership | Needed to take steps at your request and to manage your membership |
| Verify your identity using your Emirates ID | A regulatory requirement: EORA is required by the Department of Community Development, Abu Dhabi to hold verified identity details of its members. If you do not provide it, we cannot complete your membership. |
| Answer your contact form message | Your request |
| Send the newsletter | Your consent, given when you subscribe. You can withdraw it at any time using the unsubscribe link. |
| Tell members about EORA conferences, webinars and community programs | Needed to deliver your membership. Every message has an unsubscribe link. |
| Keep the website secure and working | EORA's legitimate need to protect its systems and data |
| Comply with law, a regulator's request or an inspection | Legal obligation |
5. How we use your Emirates ID
Your Emirates ID is used only to verify who you are and to meet the Department of Community Development requirement. In addition:
- Only a small number of named, authorized administrators can open it. Every time it is viewed, the access is logged.
- The ID number is masked in administrator lists and never appears on public pages, in emails or in logs.
- It is never used for marketing, never shared with sponsors, exhibitors or other third parties, and never used to build profiles.
- The copy is stored separately from the rest of your membership record, in a private storage area that is not reachable from the public website.
6. Who we share data with
- Wiredin Events LLC, as our processor, as described in Section 2.
- Technology providers that host the website and database, store files and deliver email on our behalf. They are bound by contract to protect your data and use it only for these services.
- The Department of Community Development, Abu Dhabi and other UAE authorities, where the law, a licence condition or a lawful request requires it.
We do not sell personal data. We do not share member details with sponsors or exhibitors. Reports to sponsors, where we give them, are aggregate and do not identify individuals.
7. Where your data is stored and international transfers
Membership records and Emirates ID copies are held in private, access-restricted storage under EORA's control, managed on its behalf by Wiredin, and are protected in transit and at rest.
Some technology providers operate servers outside the United Arab Emirates. Where personal data is transferred abroad, we use only providers that give contractual commitments and safeguards consistent with the PDPL.
8. How long we keep it
| Data | Kept for |
|---|---|
| Membership record | While you are a member, then up to 24 months after membership ends, unless the law requires longer |
| Emirates ID copy | While your membership is active, then deleted within 90 days after it ends |
| Rejected or withdrawn applications, including any ID copy | Deleted within 30 days of the decision |
| Contact form messages | Up to 24 months |
| Newsletter subscription | Until you unsubscribe |
| Administrator access logs | Up to 24 months |
| Website technical logs | Up to 12 months |
If a regulator or the law requires a longer period, we keep the data for that period only.
9. Security
We use access controls, role-based administrator accounts, activity logging and encrypted connections. Administrators are limited to those who need access. No system is completely secure, but we work to prevent unauthorized access and will notify you and the relevant authority of a breach where the law requires.
10. Your rights
Under the PDPL you may ask us to give you access to your data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent you have given. Some rights are limited where we must keep data to meet a legal requirement, for example identity records required by the Department of Community Development.
To use these rights, email secretariat@eora.ae. We may need to confirm your identity first and will reply without undue delay. If you are not satisfied, you may complain to the UAE Data Office.
11. Cookies
Our use of cookies is described in the EORA Cookie Notice.
12. Changes to this policy
We may update this policy. The current version and its effective date are always shown on this page. Where a change materially affects how we use your data, we will tell members directly.
13. Contact
Emirates Oncology and Radiotherapy Association, License No. NPO-A-M-098, secretariat@eora.ae. Processor: Wiredin Events LLC, privacy@wiredin.ae.