Legal & Compliance

Privacy Policy

How Embryo Links collects, uses and protects your personal information.

Last updated: 27 May 2026

Plain English summary: We are a UAE company operating internationally. We only collect information you give us directly to handle shipping logistics (name, contact details, clinic details, and required identity or governmental documents where customs authorities or health ministries demand them). We never sell your data. We store it securely, use it only to provide our cryogenic transport services, and delete it when we no longer need it. You can ask us to see, correct or delete your data at any time.

1. Who We Are

Embryo Links is an international specialist biological courier service. We transport embryos, eggs, sperm, stem cells, cord blood, clinical specimens, vaccines and biologics for fertility clinics, hospitals and private individuals worldwide. We are a trading name of Embryo Links FZE LLC, a company legally registered and established in the United Arab Emirates (UAE).

Data Controller:
Embryo Links FZE LLC (trading as Embryo Links)
Registered Address: Ajman Free Zone, United Arab Emirates
Licence No. 262539851888
Email: info@embryolinks.com

2. What Information We Collect

Information you give us directly

  • Name and contact details (email address, phone number)
  • Shipment details (collection address, delivery address, type of biological material)
  • Clinic or hospital name, department, and point of contact
  • Any special handling instructions you provide
  • Messages or enquiries submitted via our contact form or WhatsApp
  • Identity and regulatory verification data — copies of passports, national identity documents, national Ministry of Health clearances, or diplomatic and specialist courier permits where strictly mandated by regional border authorities, transit hubs, or regulatory health bodies to verify lawful custody and clear international shipments. This data is collected solely for that regulatory purpose and is not used for any other purpose.

Information collected automatically

  • Pages visited on our website and time spent on each page
  • Browser type and device type (desktop / mobile)
  • Country of origin (not precise location)
  • How you arrived at our website (e.g. search engine, direct link)

We collect this automatically using Google Analytics (GA4), a third-party analytics service operated by Google LLC. We do not use advertising cookies or social media tracking pixels. You can opt out at any time — see our Cookie Policy.

Information we do NOT collect

  • Payment card details — we handle payments by invoice or bank transfer only
  • Sensitive clinical health records, medical treatment histories, or genetic data files
  • Information about children beyond what is strictly required for clinic-to-clinic custody documentation

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide our courier service — scheduling, routing, chain-of-custody documentation and delivery confirmation
  • To communicate with you — responding to enquiries, sending shipment updates, and confirming bookings
  • To comply with legal obligations — export/import documentation required by border controls, customs authorities, and applicable international transit regulations
  • To improve our service — understanding how our website is used so we can make it more helpful

We do not use your information for marketing unless you have specifically asked us to keep you updated.

4. Legal Basis for Processing

UAE Base (PDPL): In accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, data processing is authorised for the performance of a contract (delivering the requested logistics service) and fulfilment of applicable regulatory legal obligations.

UK & EU clients (GDPR): Where we intentionally offer our specialist services to, or interface with, clinics and individuals located within the United Kingdom or the European Union, we process their personal data in active compliance with the UK GDPR and EU GDPR (Regulation (EU) 2016/679) respectively. The primary lawful bases are contractual performance and compliance with applicable health authority and customs shipping requirements.

5. Who We Share Your Information With

We share your information only when necessary:

  • Receiving clinics and laboratories — to complete the handover of your shipment
  • Customs and regulatory authorities — where legally required for import/export clearance
  • Cloud service providers — secure storage and productivity suites (e.g. Google Workspace, Microsoft 365) operating under strict data processing agreements
  • Corporate communications channels — instant messaging platforms used for client updates (e.g. WhatsApp Business). Communications routed through WhatsApp utilise Meta's infrastructure and are handled in accordance with their enterprise end-to-end encryption and security frameworks

We never sell, rent or trade your personal information to any third party for marketing or commercial purposes.

6. International Transfers

Our primary administrative operations are based in the United Arab Emirates. Data collected internationally is consolidated and processed through our UAE headquarters. We implement modern security measures — including data encryption at rest and in transit — to ensure personal data remains protected to high global privacy standards.

Where data subjects are located within the UK or the EU, we ensure that transfers to our UAE infrastructure are protected by appropriate safeguards, including the use of approved Standard Contractual Clauses (SCCs) where required, to guarantee that your information retains an equivalent level of protection to European data protection standards.

7. How Long We Keep Your Information

  • Enquiries and quotes — 12 months from last contact
  • Shipment records — 7 years (required for legal and regulatory compliance)
  • Marketing preferences — until you withdraw consent
  • Website analytics — 26 months (aggregated, not personally identifiable)

8. Your Rights

Depending on your location, you hold rights over your personal data under the UAE PDPL, UK GDPR, or EU GDPR frameworks:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete records
  • Right to erasure — request deletion of your data where we have no remaining legal or operational grounds to retain it
  • Right to restrict or object to processing — pause or oppose processing under specific circumstances
  • Right to data portability — where applicable under GDPR, receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at info@embryolinks.com. We will respond to all verified requests within 30 days.

9. Cookies

Our website uses cookies to help us understand how visitors use the site. We use only essential and analytics cookies — no advertising or social media tracking cookies are set without your consent.

You can find full details in our Cookie Policy.

10. Website Security

Our website is served over HTTPS (encrypted). We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

11. Links to Other Websites

Our website may contain links to third-party websites (for example, the HFEA website or partner clinics). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to check this page periodically.

13. Complaints

If you believe your data has been handled incorrectly, please contact us first at info@embryolinks.com so we can investigate and resolve your concern directly.

If your concern relates to UAE PDPL processing, you may escalate to:

UAE Data Office
Website: tdra.gov.ae
Governed by Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL)

If you are a resident of the United Kingdom and your complaint relates to processing governed by the UK GDPR, you retain the right to lodge a formal complaint with:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

14. Contact Us

For any privacy-related questions or to exercise your rights: