Privacy Policy

We collect information necessary to provide safe, reliable healthcare services:

• Account details: name, email, mobile number, password (stored hashed), preferred language, and city.
• Identity and verification (providers): PMDC registration number, nursing license, CNIC, degrees, certificates, and documents you upload during onboarding.
• Health and booking data: appointment details, medical intake forms, chat messages with providers, home-visit addresses, visit notes, prescriptions where applicable, and reviews.
• Payment data: transaction amounts, payment status, and gateway references from JazzCash or EasyPaisa. We do not store your wallet PIN or full payment credentials.
• Video consult metadata: session join/leave times and appointment linkage. Video is delivered through our video provider; we do not record consultations unless explicitly disclosed and consented to.
• Technical data: device type, browser, IP address, cookies, and usage logs used for security, fraud prevention, and service improvement.
• Location data: approximate or precise location when you request home visits or when geo features are enabled, with your permission.

We use your information to:

• Create and manage your account and authenticate you securely.
• Facilitate bookings, video consultations, Sunday free consults, and home-care visits.
• Verify provider credentials (PMDC, nursing licenses) before listing or dispatch.
• Process payments, refunds, and provider payouts.
• Send appointment reminders, OTP codes, and service notifications.
• Provide customer support and resolve disputes.
• Improve platform safety, detect abuse, and comply with applicable law.
• Generate anonymised or aggregated analytics that do not identify you.

We process personal data based on your consent, contractual necessity (to deliver the service you request), legal obligations, and legitimate interests such as fraud prevention and platform security.

Health-related data receives heightened protection. By booking a consult or home visit, you consent to sharing relevant medical information with the assigned provider for your care. You may withdraw marketing consent at any time; withdrawing consent for essential processing may limit our ability to provide services.

We do not sell your personal or health data. We may share information with:

• Healthcare providers you choose to book (doctors, nurses) — only what is needed for your care.
• Payment processors (JazzCash, EasyPaisa) to complete transactions.
• Infrastructure and service providers (hosting, database, video, SMS/OTP) under strict confidentiality obligations.
• Law enforcement or regulators when required by applicable Pakistani law or a valid legal process.
• Professional advisers (lawyers, auditors, insurers) bound by confidentiality.

Sensitive personal fields such as name, email, and phone are encrypted at rest. We use industry-standard safeguards including HTTPS, access controls, and audit logging for administrative actions.

Data may be stored on secure cloud infrastructure. Where data is processed outside Pakistan, we apply appropriate contractual and technical safeguards.

We retain data for as long as your account is active and as required for medical record-keeping, tax, and legal obligations. You may request deletion subject to limits described in Section 8.

We use essential cookies for authentication and session management. Optional analytics or preference cookies, if introduced, will be disclosed in an updated version of this policy.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in or booking.

Our services are intended for users aged 18 and over. A parent or legal guardian may create and manage an account on behalf of a minor where permitted by law, and must provide consent for any telemedicine or home-care service involving a child.

Subject to applicable law, you may:

• Access a copy of personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data, except where retention is legally required (e.g. financial records, unresolved disputes).
• Object to or restrict certain processing.
• Lodge a complaint with us at the contact below.

For privacy questions, data access, or deletion requests, email support@zindagicare.pk. We aim to respond within 15 business days.

This policy is governed by the laws of Pakistan. We may update this policy from time to time; material changes will be posted on this page with a revised date.