Your privacy matters. This Privacy Policy explains how AXOMED ("AXOMED", "we", "us") collects and handles your personal information when you use our telehealth platform in the Islamic Republic of Pakistan. We handle your data in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016 (PECA 2016), the data protection principles recognized in Pakistan, and our professional confidentiality obligations to patients.

1. Information We Collect

Information you provide

• Account details: name, phone number, email address, city.
• Health information: assessment answers, symptoms, medical history, medications, lab results.
• Payment information: processed securely by licensed payment gateways (JazzCash, Easypaisa, card networks). We do not store full card numbers.
• Communications: messages exchanged with our care team on WhatsApp and in-app.

Information collected automatically

• Device and browser information, IP address, and basic usage analytics to improve the platform.

2. How We Use Your Information

• To provide, operate and improve our telehealth services.
• To match you with licensed healthcare providers and coordinate your treatment plan.
• To process orders, prescriptions, pharmacy fulfillment and delivery.
• To verify your identity (e.g., OTP-based verification).
• To send service communications, order updates and support messages.
• To comply with legal and regulatory obligations in Pakistan.

3. Legal Basis and Consent

We process your personal data on the basis of your consent (provided when you create an account and complete assessments), the performance of the healthcare services you request, and our legitimate interests in operating a secure platform — always subject to your rights and Pakistani law. You may withdraw consent at any time by contacting us, subject to legal and contractual limits.

4. Sharing of Information

We do not sell your personal or health data. We share information only where necessary:

• With licensed doctors, pharmacists, couriers and partner laboratories involved in your care.
• With payment gateways to process your transactions.
• With service providers (hosting, analytics, messaging) bound by confidentiality obligations.
• With authorities where required by Pakistani law or court order.

5. Data Security

• Health data is encrypted in transit and at rest to the extent feasible with our technology stack.
• Access to patient data is role-based and limited to personnel who need it for your care.
• We maintain security controls aligned with PECA 2016 and industry best practices, including audit logging of administrative actions.
• In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

6. Data Retention

We retain personal data only as long as necessary to provide services, comply with medical record-keeping and legal obligations (including tax and health regulations in Pakistan), and resolve disputes. When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information.
• Deletion: request deletion of your data, subject to legal and medical record-keeping requirements.
• Restriction / objection: ask us to limit processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format where technically feasible.
• Complaint: lodge a complaint with us or the relevant authority in Pakistan.

To exercise any of these rights, email support@axomed.com.pk. We respond within 30 days.

8. WhatsApp and Communications

AXOMED is a WhatsApp-first support platform. By providing your phone number you consent to receive service-related messages via WhatsApp, including order updates and care-team communications. You can opt out of non-essential messages at any time.

9. Cookies and Analytics

Our website may use cookies and similar technologies for functionality and basic analytics. You can control cookies through your browser settings. We do not use third-party advertising trackers.

10. Children's Privacy

AXOMED services are intended for individuals aged 18 and above. We do not knowingly collect data from children under 18. If you believe a minor has provided us data, contact us and we will delete it.

11. Third-Party Links

Our platform may link to third-party websites (e.g., payment gateways). We are not responsible for their privacy practices. Please review their policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published here with the "Last updated" date. Material changes will be communicated through the platform.

13. Contact Us

Privacy questions or requests? Contact our Data Protection contact: support@axomed.com.pk or WhatsApp +92 302 6853443, or write to AXOMED, Model Town, Lahore, Pakistan. We treat privacy requests confidentially and respond promptly.