Healthcare Pakistan obtains personal data (as defined in data protection law) about data subjects in a variety of ways when Clients visit our website, use our Services, (including our online booking engine), or deal with us by email or on the phone. We may process (obtain, use, store and transfer) the following information:
for example, (but not restricted to) information on healthcare providers, professionals, staff belonging to the hospital, practice, clinic or other entity;
Client and Patient Identity data:
for example, (but not restricted to) first and last name, username or similar identifier, marital status, title, date of birth and gender;
Client and Patient Contact information:
for example, (but not restricted to) address, email address and telephone numbers.
Patient healthcare information:
depending on the information recorded by our Clients, this may include demographic information, medical records, prescriptions, test results, correspondence between
Patients and Clients, and other medical information;
Client Profile data: including your username and password and other information relating to your account with us;
Client Usage data: we automatically receive and record information when you visit our website, such as your IP address and information stored in cookies on your computer hard drive. We process special categories of data (also known as "sensitive personal data") about Patients in the provision of our Services.
We only process such data to provide our Services and do so under the instructions of our Clients, under our Terms of Service. Our Clients are responsible for obtaining the necessary consent from Patients for us to process their personal data and special categories of data. In addition to the above categories of personal data and special categories of data, to assist us in improving our products and services, we monitor aggregated data that is collected by our Services and may share this with third parties collectively and in an anonymous way.
If the user wishes to contact or engage with a Doctor, Healthcare Pakistan maintains an online platform enabling the following activities:
the User to electronically make an initial and further appointment with the Doctor
the Doctor and the User to communicate with each other through a messaging system
the Doctor and the User to communicate with each other through a voice and video conferencing system
the rendering of invoices by the Doctor to the User
payment of invoices by the User to the Doctor
Healthcare Pakistan is not a provider of medical or diagnostic services. Other than maintaining the Platform, Healthcare Pakistan has no input, involvement or influence on the interaction between the User and the Doctor.
Healthcare Pakistan enters into a contract with the Doctor which governs the appearance of the Doctor within Healthcare Pakistan and the charges made by Healthcare Pakistan to the Doctor for the Platform.
Use of information
We will only use personal data when the law allows us to. Most commonly, we will use personal data in the following circumstances and rely on these lawful bases for processing your personal data:
o Legitimate interests: Where it is necessary for our legitimate interests (or those of a third party) and the data subjects’ interests and fundamental rights do not override those interests: the personal data we obtain is used to operate our business efficiently.
o Where we need to comply with a legal or regulatory obligation. Please note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.
Storage and protection
We will only retain personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. We hold personal data in electronic databases, such as our customer relationship management system. All payment details are stored with our payment provider. None of the client's payment details is stored by Healthcare Pakistan.
Under certain circumstances, you have rights under data protection law, in relation to your personal data, including to request access, correction, erasure, restriction of processing and data portability. If you wish to exercise any of these rights, please contact us, using the contact details below.
Changes to this policy
We may review and amend this Policy from time to time. We will post updated versions of the Policy on our website.
Questions or Complaints
If you have any questions about this Policy or the way that we handle your personal data, please let us know at firstname.lastname@example.org.