Privacy policy.
How Eastgate Medical Services collects, uses, shares and protects personal data when you use this website or contact us.
We are a medical device and pharmaceutical distributor, not a consumer service. The only personal data this website collects is what you type into our enquiry form — your name, organisation, email, phone number, enquiry type and message.
We use it to answer you and to supply the products or services you ask about. We do not sell personal data, we do not run advertising trackers, and this site sets no cookies of its own.
You can ask us to access, correct or delete your data at any time by emailing info@eastgatemedical.net.
01 Who we are
This website is operated by Eastgate Medical Services ("Eastgate", "we", "us", "our"), a distributor of medical equipment, medical devices and pharmaceutical products established in the State of Qatar in 2016.
For the purposes of Qatar's Law No. 13 of 2016 concerning Personal Data Privacy Protection (the "Data Protection Law"), Eastgate Medical Services is the controller of the personal data described in this policy.
- Registered office
- Barwa Avenue Street, Safwa Building, Block No. 26, 2nd Floor, Office No. 201, PO Box 16283, Doha, Qatar
- Telephone
- +974 4411 2826 · +974 4140 6070
02 Scope of this policy
This policy applies to personal data we process through eastgatemedical.net and through direct correspondence with us by email or telephone in connection with this website.
It does not apply to:
- Our aesthetics microsite at eastgate-aesthetics.com, which publishes its own notice.
- Third-party websites we link to, including the websites of our manufacturing partners, Instagram and LinkedIn. Those services control their own data practices.
- Personal data processed under a separate written agreement — for example a supply contract, tender submission or service-level agreement — where the terms of that agreement govern.
03 Data we collect
Information you give us
When you complete the enquiry form on our contact page, or write to us directly, we collect:
| Data | Required | Why we need it |
|---|---|---|
| Full name | Yes | To address you correctly and route your enquiry. |
| Email address | Yes | To reply to you. |
| Enquiry type | Yes | To route your message to the right business unit. |
| Message | Yes | To understand and answer your request. |
| Hospital / organisation | No | To identify the institution and applicable commercial terms. |
| Telephone number | No | To call you back where that is faster than email. |
You choose what to put in the message field. Please do not send us patient-identifiable information or clinical records through this website. If you need to discuss a specific patient case, contact us by telephone so we can arrange an appropriate channel.
Information collected automatically
Like almost all websites, our hosting provider records standard technical information in server logs when a page is requested — typically the IP address, browser type and version, referring page, and the date and time of the request. These logs are used only to keep the site running, to diagnose faults and to detect abuse or attempted attacks.
Data we do not collect
- We do not collect special categories of data (such as health data) through this website.
- We do not build advertising or behavioural profiles.
- We do not purchase personal data from data brokers for use on this site.
04 How we use your data
We use the personal data described above to:
- Respond to your enquiry and route it to the correct business unit — public tenders, medical equipment and consumables, pharmaceuticals, aesthetics, biomedical service or regulatory affairs.
- Prepare quotations, product availability confirmations and registration status information.
- Arrange product demonstrations, clinical evaluations, installations and user training.
- Provide after-sales support, preventive maintenance and warranty or service-level administration.
- Manage our relationship with you, your institution and our manufacturing partners.
- Comply with our legal, regulatory and record-keeping obligations, including those of the Qatar Ministry of Public Health.
- Protect the security and integrity of our website and business.
05 Our lawful basis
Under the Data Protection Law we process personal data on the following bases:
- Your consent — you tick the consent box before submitting the enquiry form, and you may withdraw that consent at any time.
- Performance of a contract, or steps taken at your request before entering into one — for example preparing a quotation or fulfilling a supply agreement.
- Compliance with a legal obligation — including regulatory, customs, tax and medical device record-keeping duties.
- Our legitimate business interests in operating, securing and improving our business, where those interests are not overridden by your rights.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and we may still need to retain certain records to meet a legal obligation.
07 How long we keep it
We keep personal data only as long as we need it for the purpose it was collected, and then delete it or securely archive it.
| Record | Retention |
|---|---|
| Enquiries that do not lead to business | Up to 24 months from last contact, then deleted. |
| Customer and supplier correspondence | For the life of the relationship, then as required by law. |
| Commercial, tender and accounting records | As required by Qatari commercial and tax law. |
| Medical device traceability, service and vigilance records | As required by the Ministry of Public Health and the relevant manufacturer, which may be well beyond the life of the device. |
| Website server logs | Short-term, in line with our hosting provider's standard practice. |
08 International transfers
Our manufacturing partners and some of our service providers are located outside the State of Qatar, including in Europe, Asia and North America. Where we transfer personal data abroad, we do so in accordance with the Data Protection Law and take reasonable steps to ensure the recipient applies an appropriate level of protection — for example through contractual commitments.
09 Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure and alteration. These include encrypted transport (HTTPS) for data submitted through this website, access controls limiting who inside Eastgate can see enquiry correspondence, and internal governance managed by our Administration and Regulatory Affairs functions.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will act promptly and notify you and the competent authority where the law requires it.
11 Your rights
Subject to the conditions and exceptions in the Data Protection Law, you have the right to:
- Be informed about how your personal data is processed — which is the purpose of this policy.
- Access the personal data we hold about you and obtain a copy.
- Request correction of data that is inaccurate, incomplete or out of date.
- Request erasure of your data where we no longer have a lawful reason to keep it.
- Object to or restrict processing in certain circumstances.
- Withdraw consent at any time, where consent is our basis for processing.
- Complain to the competent data protection authority in the State of Qatar.
To exercise any of these rights, email info@eastgatemedical.net with the subject line "Data request". We will respond within the period required by law. We may ask you to verify your identity before we act, so that we do not disclose your data to someone else.
There is no charge for making a request.
12 Product safety reports
As a distributor of medical devices and pharmaceutical products, we have regulatory duties in relation to product safety. If you report an adverse event, a device malfunction, a product complaint or a suspected quality defect, we are required to record it and to pass the relevant details to the manufacturer and, where applicable, to the Ministry of Public Health.
Reports of this kind are handled separately from ordinary enquiries. We record only what is necessary to investigate and to meet our reporting obligations, we minimise any patient-identifying detail, and we retain the record for as long as the applicable regulations require. This processing is necessary for compliance with a legal obligation and to protect public health, and it will continue even if you later withdraw consent for other processing.
13 Children
This website is intended for healthcare professionals, institutional buyers and business partners. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, contact us and we will delete it.
14 Changes to this policy
We may update this policy to reflect changes in our practices, our technology or the law. The current version is always published at this address, and the "last updated" date at the top of the page shows when it last changed. Where a change is significant, we will take reasonable steps to bring it to your attention.
15 Contact & complaints
If you have a question about this policy, want to exercise a right, or wish to complain about how we have handled your personal data, please contact us first — we would rather put it right directly.
- Telephone
- +974 4411 2826
- Post
- Eastgate Medical Services, Barwa Avenue Street, Safwa Building, Block No. 26, 2nd Floor, Office No. 201, PO Box 16283, Doha, Qatar
If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority in the State of Qatar.