Privacy Policy
By visiting our website, you agree to and accept the terms described in this Privacy Policy.
This Privacy Policy relates to data obtained by Aga Khan University Hospital, Pakistan (“AKUH”, “we”, “us”, or “our”) through our website and related online services. We take your privacy very seriously and are committed to protecting the privacy and confidentiality of your personal data in accordance with applicable laws, regulations and our internal policies and procedures. This Privacy Policy sets out how we collect, use, disclose, retain and protect personal data that you may provide us or that we may collect through your use of our website. If you provide us with personal data, you can be assured that it will only be used in accordance with this Privacy Policy and for legitimate purposes connected with our services and activities.
We will comply with data protection law and principles, which means that your data will be:
Used lawfully, fairly and in a transparent way.
Collected only for valid purposes and not used in any way that ixs incompatible with those purposes.
Accurate and kept up-to-date as provided by you.
Relevant and limited to what is necessary for the purposes for which it is collected.
Kept only as long as necessary for the purposes it was collected, or as required by law, applicable policies or other legitimate requirements.
Kept securely and protected against unauthorised access, use, alteration, disclosure or loss.
Collection of personal data
We collect personal data when you:
Have been a patient with us.
Have used or requested our healthcare services.
Have made a payment or donation through our website or related online payment facilities.
Have done business with us.
Have made a complaint or enquiry to us.
Have made a data request to us.
Wish to attend, or have attended, an event.
Subscribe to our e-newsletters or other communications.
Have applied for a job or secondment with us.
Have worked with us or working with us.
Have made a donation or zakat contribution to us.
Are studying or studied at one of our universities.
Have otherwise interacted with us through our website or online services.
Depending on the service or interaction, the personal data we collect may include information such as your name, contact details, identification information, Medical Record (“MR”) number, appointment and service information, payment and transaction information, and health or other information necessary to provide healthcare or related services. For services delivered at home, we may also collect information reasonably necessary to arrange and provide services at the requested location.
On certain occasions, we will ask you to provide us with certain data about yourself. It is our policy to collect only the necessary data required to complete your request, provide or facilitate the requested service, meet our legal and regulatory obligations, or otherwise fulfil a legitimate purpose.
Where you provide information relating to another person, you should ensure that you are authorised to provide that information and that the relevant person has been informed where appropriate. Where the information relates to a minor or another person who requires parental or guardian authorisation, you should ensure that you have obtained the necessary consent or authorisation from their parent or legal guardian before providing such information.
Use of personal data
We may use your personal data to:
Provide, administer and improve our healthcare and related services.
Identify and communicate with you and manage appointments, enquiries and requests.
Maintain and administer patient and other relevant records, including MR numbers and related information.
Process payments, donations and zakat contributions and maintain related financial and transaction records.
Send service-related communications and, where permitted and where appropriate, surveys, newsletters or marketing communications.
Administer events, employment, education, business, fundraising and other activities.
Monitor, maintain and improve the security, functionality and performance of our website and online services.
Meet applicable legal, regulatory, accreditation, quality, patient safety, audit and reporting requirements.
Protect the rights, property, safety and security of AKUH, our patients, users, employees and others.
Where we process health or other sensitive information, access and use will be limited to authorised persons and purposes and handled in accordance with applicable requirements and AKUH policies.
Payments
Certain services available through our website, including telehealth and teleconsultation services, may involve online payments. Payments may be processed through banks, payment gateways or other payment service providers engaged or authorised by AKUH. Payment transactions will be processed in accordance with applicable laws, regulations and payment-system requirements.
Where payment processing is undertaken by a third-party payment service provider, that provider may collect and process payment information in accordance with its own applicable terms and privacy practices. AKUH will not ordinarily have access to full payment card details where these are processed directly by the relevant payment service provider.
Donations and zakat contributions may also be facilitated through third-party platforms or pages made available through or hosted on the AKUH website. Where applicable, the processing of such transactions may be subject to the terms of the relevant third-party platform or service provider.
How will your personal data be secured?
We have put in place appropriate procedures to protect personal data and to respond to, investigate and to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We limit access to your personal data to authorised employees, healthcare professionals, contractors and service providers who have a business or legitimate need to know. They will only process your personal data for authorised purposes and, where applicable, on our instructions and are subject to a duty of confidentiality.
Cookies
When you use our website, information about how you use our website is collected automatically using “cookies". Cookies are text files placed on your computer to collect standard internet log data and visitor behaviour data. This data is used to understand website usage, improve our website, track visitor use of the website and to compile statistical reports on website activity.
We may use the following types of cookies:
Strictly necessary cookies: Required for the website to function and cannot be disabled through our cookie preference tools.
Analytics or performance cookies: Help us understand how visitors use the website and improve its performance.
Functional cookies: Enable enhanced functionality and personalisation where available.
Third-party cookies: May be placed by carefully selected third-party services or embedded content, such as videos, social media feeds or other online content.
You may manage your cookie preferences, including accepting, rejecting or withdrawing consent for non-essential cookies, through the cookie preference tool available on our website. You may also configure your browser to block or delete cookies. Please note that disabling certain cookies may affect website functionality.
Some pages on our site may also use cookies or similar technologies provided by carefully selected third party suppliers. Some third-party services and embedded content, such as videos, social media feeds or other online content, may also use cookies or similar technologies. We do not control third-party cookies and recommend that you review the relevant third party’s privacy and cookie policies for further information.
You can set your browser to not accept cookies and obtain up-to-date data about blocking and deleting cookies via www.aboutcookies.org.
We may use analytics tools to understand how visitors use our website, measure website performance, identify areas for improvement and compile statistical information about website usage. Depending on the tool used, this may involve the collection of information such as pages visited, time spent on the website, device and browser information, and approximate location.
Disclosure of your data
We may disclose your personal data to companies and/or organisations that work with us in providing our website and associated services, such as analytics providers, website developers, technology providers, payment service providers and other service providers, where necessary for the purposes described in this Privacy Policy. Such companies and/or organisations will be subject to appropriate confidentiality and data protection obligations.
We may also disclose your personal data to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation, or to protect the rights, property, or safety of AKUH, our users, or others. This may include exchanging data with other companies and organisations for purposes such as fraud protection, security and protection of our services.
We may disclose your personal data to third parties, the courts, regulators, law enforcement agencies, or other competent authorities in connection with legal proceedings, investigations or regulatory requirements, including where compelled to do so. Where permitted and to the extent practicable, we will direct any such request to you or notify you before responding, unless doing so would prejudice the prevention or detection of a crime or otherwise be prohibited or inappropriate.
Where personal data is shared with AKU entities or service providers located outside your country, appropriate safeguards will be applied in accordance with applicable law and AKUH policies to protect the confidentiality and security of your personal data.
Retention of personal data
We will retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law, regulatory or accreditation requirements, our records-retention policies, or other legitimate requirements. Personal data is managed, stored, retained and securely disposed of in accordance with applicable AKUH policies, procedures and records-retention requirements.
Where records are required to be preserved for legal proceedings, investigations, audits, regulatory matters or other legal or organisational requirements, they may be retained beyond their ordinary retention period in accordance with applicable legal hold or preservation requirements.
We may retain limited information where necessary to record or honour a request, such as an unsubscribe request, deletion request or other preference.
Third Party Website Links
Our website may contain links to other websites or platforms provided by third parties. These links may also include embedded content or widgets that allow third-party content to be displayed on our website.
When following a link or interacting with third-party content, please be aware that AKUH do not control the privacy practices, security or content of those third parties.
This Privacy Policy only applies to AKUH’s website and services. You should review the privacy policies and terms applicable to any third-party website or platform you access.
Your requests and choices
Subject to applicable law and AKUH policies, you may contact us regarding personal data that we hold about you, including request access to, correction or deletion of your personal data, withdrawal of consent where applicable, or to raise a concern regarding its use.
You may also unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the relevant communication or by contacting us.
Requests for removal of photographs or other content in which you appear may be made through the contact details provided below. Such requests will be considered in accordance with applicable law, contractual obligations, consent provided, legitimate interests and applicable AKUH policies.
Changes to this Policy
We reserve the right to make any changes to our Privacy Policy. Any changes will be posted on this page and, where appropriate, notified to you by email or through other appropriate means. Please visit this page to check our most current privacy policy.
Contact
If you have any questions about our privacy policy or the data we hold about you, please email us at akuh.information@aku.edu.
)
)
)