Privacy Policy

Last updated 11 September 2026.

First Medical Consultancy ("we", "us") helps healthcare professionals obtain GCC licences, prepare for Prometric examinations and find clinical roles. Doing that means handling a substantial amount of personal and professional information about you, including documents you would not hand to a stranger. This policy explains exactly what we hold, why, and what you can ask us to do about it.

1. Who is responsible for your data

First Medical Consultancy, Dubai, United Arab Emirates, is the controller of the personal data described here. You can reach us at info@firstmedicalconsultancy.com or +971 55 162 7220 for anything in this policy, including a request to see or delete your data.

2. What we collect

Information you give us. Your name, email address, phone number, country of residence, profession and specialty, the authority you are licensing with, and the certificate or qualification tier you hold. If you proceed with a licensing application we also collect the supporting documents that application requires — passport and photograph, degree and transcripts, experience and good-standing certificates, registration certificates and a signed Letter of Authorisation.

Information created by using the site. Your account details if you register, the exams you enrol in and your answers and scores, payment records (we never see or store your full card number — see section 5), messages you send through the contact form or the live chat, and any referral code you use or share.

Information collected automatically. Pages you visit, the site or search that referred you, and general device and browser information. We use this to understand which pages help candidates and which do not.

3. Why we use it

• To deliver the service you asked for — preparing and submitting your licensing application to the relevant authority, arranging DataFlow verification and examination registration, giving you access to the exams you purchased, and putting your profile in front of employers where you have asked us to.
• To communicate with you — application status, documents we still need, exam and appointment reminders, and replies to your enquiries.
• To take payment and issue receipts and invoices.
• To improve the service — understanding where candidates get stuck, and which guidance is worth writing.
• To meet our legal obligations, including accounting records and responding to lawful requests from a regulator.

We rely on your consent for marketing email and for sharing your profile with a named employer; on the performance of our contract with you for everything needed to run your application; and on our legitimate interest in operating and improving the site for analytics.

4. Who we share it with

We share only what a given recipient needs:

• Licensing authorities (DHA, DOH, MOHAP, SCFHS, QCHP, NHRA, OMSB) and DataFlow, where your application is the whole point of the disclosure.
• Prometric and equivalent examination providers, to register you for an examination.
• Hospitals, clinics and recruiters — only where you have asked us to represent you, and we tell you who we are approaching.
• Care Bridge HR Consultancy & Recruitment, our parent company, where your file is handled by the group.
• Service providers who run parts of the platform on our behalf: our hosting and database providers, our email provider, and Stripe for payments. They act on our instructions and may not use your data for their own purposes.

We do not sell your personal data, and we do not share it with advertisers.

5. Payments

Card payments are processed by Stripe. Your card details are entered on Stripe's own payment page and are never transmitted to or stored on our servers. We retain only the outcome of the payment, the amount, and the last four digits of the card for reconciliation.

6. How long we keep it

Licensing files, including the documents you upload, are retained for the duration of your application and for five years afterwards, because licensing authorities can and do query a submission long after it closes. Exam accounts and results are retained while your account is open. Financial records are kept for as long as UAE and UK accounting rules require. Contact enquiries that do not become applications are deleted after two years. You can ask us to delete anything sooner, subject to those legal retention periods.

7. Your rights

You may ask us to give you a copy of the data we hold about you, correct anything inaccurate, delete it, restrict how we use it, or stop using it for marketing. Email info@firstmedicalconsultancy.com and we will respond within 30 days. Every marketing email we send also carries a one-click unsubscribe link. If you are in the UK or EU and are unhappy with our response, you may complain to your data protection authority.

8. Cookies

We use cookies that are necessary for the site to work — keeping you signed in, remembering your cart and carrying a referral code through to checkout — and a small amount of analytics to count page visits and see which sources send us candidates. Blocking cookies in your browser will stop you being able to sign in but will not otherwise prevent you browsing the site.

9. Security

The site is served over HTTPS, documents are held in access-controlled storage, and access to candidate files is restricted to the staff working on them. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority without undue delay.

10. Children

Our services are for qualified healthcare professionals and are not directed at anyone under 18. We do not knowingly collect data from children.

11. Changes to this policy

If we change this policy we will update the date at the top and raise the version number. Where a change materially affects how we use data you have already given us, we will tell you directly.

12. Contact

First Medical Consultancy
Email: info@firstmedicalconsultancy.com
Phone: +971 55 162 7220
Dubai, United Arab Emirates