Privacy Policy

Last updated 11 September 2026.

First Medical Consultancy ("we", "us") helps healthcare professionals obtain GCC licences, prepare for Prometric examinations and find clinical roles. That work involves handling a large amount of personal and professional information about you, including sensitive identity and qualification documents. This policy sets out what we hold, why we hold it, and what you can ask us to do about it.

1. Who is responsible for your data

First Medical Consultancy, Dubai, United Arab Emirates, is the controller of the personal data described here. You can reach us at info@firstmedicalconsultancy.com or +971 55 162 7220 about anything in this policy, including a request to see or delete your data.

2. What we collect

Information you give us. Your name, email address, phone number, country of residence, profession and specialty, the authority you are licensing with, and the certificate or qualification tier you hold. If you proceed with a licensing application, we also collect the supporting documents that application requires: passport and photograph, degree and transcripts, experience and good-standing certificates, registration certificates and a signed Letter of Authorisation.

Information created by using the site. Your account details if you register, the exams you enrol in together with your answers and scores, payment records (we never see or store your full card number, as explained in section 5), messages you send through the contact form or the live chat, and any referral code you use or share.

Information collected automatically. Pages you visit, the site or search that referred you, and general device and browser information. We use this to see which pages are useful to candidates.

3. Why we use it

• To deliver the service you asked for. Preparing and submitting your licensing application to the relevant authority, arranging DataFlow verification and examination registration, giving you access to the exams you purchased, and putting your profile in front of employers where you have asked us to.
• To communicate with you. Application status, documents we still need, exam and appointment reminders, and replies to your enquiries.
• To take payment and issue receipts and invoices.
• To improve the service. Seeing where candidates get stuck and what guidance we should add.
• To meet our legal obligations, including accounting records and responding to lawful requests from a regulator.

We rely on your consent for marketing email and for sharing your profile with a named employer. We rely on the performance of our contract with you for everything needed to run your application. For analytics, we rely on our legitimate interest in operating and improving the site.

4. Who we share it with

We share only what a given recipient needs:

• Licensing authorities (DHA, DOH, MOHAP, SCFHS, QCHP, NHRA, OMSB) and DataFlow, in order to process your application.
• Prometric and equivalent examination providers, to register you for an examination.
• Hospitals, clinics and recruiters, only where you have asked us to represent you. We tell you who we are approaching.
• Care Bridge HR Consultancy & Recruitment, our parent company, where your file is handled by the group.
• Service providers who run parts of the platform on our behalf: our hosting and database providers, our email provider, and Stripe for payments. They act on our instructions and may not use your data for their own purposes.

We do not sell your personal data and we do not share it with advertisers.

5. Payments

Card payments are processed by Stripe. Your card details are entered on Stripe's own payment page and are never transmitted to or stored on our servers. We retain only the outcome of the payment, the amount, and the last four digits of the card for reconciliation.

6. How long we keep it

Licensing files, including the documents you upload, are retained for the duration of your application and for five years afterwards, because licensing authorities may query a submission long after it closes. Exam accounts and results are retained while your account is open. Financial records are kept for as long as UAE and UK accounting rules require. Contact enquiries that do not become applications are deleted after two years. You can ask us to delete anything sooner, subject to those legal retention periods.

7. Your rights

You may ask us to give you a copy of the data we hold about you, correct anything inaccurate, delete it, restrict how we use it, or stop using it for marketing. Email info@firstmedicalconsultancy.com and we will respond within 30 days. Every marketing email we send also carries a one-click unsubscribe link. If you are in the UK or EU and are unhappy with our response, you may complain to your data protection authority.

8. Cookies

We use cookies that are necessary for the site to work, such as keeping you signed in, remembering your cart and carrying a referral code through to checkout. We also use a small amount of analytics to count page visits and see which sources send us candidates. Blocking cookies in your browser will stop you signing in, but you will still be able to browse the site.

9. Security

The site is served over HTTPS, documents are held in access-controlled storage, and access to candidate files is restricted to the staff working on them. If a breach ever affects your data, we will tell you and the relevant authority without undue delay.

10. Children

Our services are for qualified healthcare professionals and are not directed at anyone under 18. We do not knowingly collect data from children.

11. Changes to this policy

If we change this policy, we will update the date at the top and raise the version number. Where a change materially affects how we use data you have already given us, we will tell you directly.

12. Contact

First Medical Consultancy
Email: info@firstmedicalconsultancy.com
Phone: +971 55 162 7220
Dubai, United Arab Emirates