Regulatory Compliance: Alfalah Diagnostic Labs is certified by the Punjab Healthcare Commission (PHC) and NEQAPP. We treat all diagnostic records and patient identifiable information under strict medical confidentiality guidelines.

Last updated: October 28, 2026 • Version 2.0

1. Introduction

Welcome to Alfalah Diagnostic Labs. We respect your privacy and are committed to protecting your personal health information and digital records. This Privacy Policy informs you how we collect, handle, store, and protect your information when you visit our web portal or use the Alfalah Labs mobile application for diagnostic test bookings, home phlebotomy visits, and Health Store orders.

2. Information We Collect

To provide accurate laboratory testing and order delivery, we collect the following categories of information:

• Patient Identity & Demographics: Full name, age, date of birth, biological sex, and relationship details for dependent profiles (family members). These are mandatory for calculating accurate pathological reference ranges.
• Contact & Delivery Details: Mobile telephone number, email address, residential address, landmark, and GPS coordinates when requesting home blood sample collection or health store product delivery.
• Health & Diagnostic Records: Ordered pathology tests, test booking history, accession numbers, biological specimen tracking, and verified laboratory test reports signed by Consultant Pathologists.
• Doctor Prescriptions & Documents: Legible images or PDF scans of prescriptions uploaded by you for prescription verification, test booking assistance, or medication dispensing.
• Health Store Orders: Purchased diagnostic devices, OTC medicines, surgical supplies, and transaction receipts.
• Device & Technical Diagnostics: Internet Protocol (IP) address, operating system, device model, app version, and login session logs.

3. Biometric Authentication Privacy

The Alfalah Labs mobile application offers optional Biometric Authentication (Fingerprint and Face Unlock) for your security. Your biometric data is processed entirely on your personal device using hardware-backed secure enclaves (such as Android BiometricPrompt or Apple LocalAuthentication). Alfalah Labs never captures, stores, or transmits your biometric data to our servers or any external parties.

4. How We Use Your Information

We utilize patient data strictly for legitimate clinical, diagnostic, and logistical purposes:

• Processing pathology specimens, running laboratory analyzers, and generating digitally signed clinical reports.
• Dispatching certified phlebotomists to your doorstep for home blood and sample collection.
• Delivering health store items, wellness products, and diagnostic monitoring devices.
• Sending critical WhatsApp / SMS notifications regarding OTP verification, order confirmation, sample pickup, and report readiness.
• Providing patient customer service and WhatsApp support desk assistance.

5. Protection of Medical Prescriptions & Health Data

Prescription images and health reports uploaded to or generated within our platform are treated with the highest degree of medical confidentiality:

• Uploaded prescription files are stored on isolated, encrypted cloud storage accessible only by licensed clinical staff and verified pharmacists.
• Zero Health Data Commercialization: We do NOT sell, rent, monetize, or trade patient health records or uploaded prescriptions with third-party advertisers, data brokers, or commercial entities under any circumstances.

6. Third-Party Analytics & Marketing Tools

To improve app stability, troubleshoot performance bottlenecks, and evaluate our outreach campaigns, we integrate vetted third-party analytics SDKs, including the Meta (Facebook) SDK.

• What is collected: General app interactions (e.g., app opens, navigation events, screen views) and device advertising IDs.
• Strict Clinical Exclusion: We explicitly exclude and redact all clinical test names, laboratory values, medical diagnoses, and uploaded prescription files from being transmitted to third-party analytics SDKs.

7. Data Retention & Secure Storage

Diagnostic records are retained in compliance with Punjab Healthcare Commission standards to ensure patient continuity of care and historical medical comparison. Non-clinical transactional data is retained only as long as necessary for tax, accounting, and legal audit requirements.

8. Patient Rights & Account Deletion

You retain complete control over your personal data:

• Report Access: You can view and download all past laboratory reports as PDF files via the app or web portal at any time.
• Profile Modification: You may update your contact information directly within the app profile settings.
• Account Deletion: You can submit a deletion request directly within the mobile app under My Account → Delete Account or visit our dedicated Account Deletion Portal. Upon verification, your account profile and non-mandatory logs will be permanently expunged.

9. Related Policies

Please also review our complementary operational and clinical policies:

10. Contact Privacy Officer

If you have inquiries, complaints, or concerns regarding your health data privacy, please contact our administrative team: