DHMC EMR Privacy Policy

Last Updated: August 18, 2026

1. Introduction

Welcome to DHMC EMR (Electronic Medical Record) (the "App"), a healthcare application developed and published on Google Play by Farooq Hospitals, operated by DOCTORS HOSPITAL AND MEDICAL CENTER PRIVATE LIMITED ("DHMC," "we," "our," or "us").

DHMC EMR is intended for authorized patients, doctors, and other authorized healthcare personnel of Doctors Hospital and Medical Center.

This Privacy Policy explains what information the App processes, how it is used, how it is protected, how long it is retained, and the rights available to you.

By downloading, accessing, or using DHMC EMR, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

2. App and Organization Information

App Name (Google Play listing)	DHMC EMR
Google Play Developer Name	Farooq Hospitals
Legal / Organization Entity	Doctors Hospital and Medical Center Private Limited
Organization Address	Block G1, Canal Bank, Lahore, Pakistan
Website	https://doctorshospital.com.pk/
Support Email	doctorshospitalandmedical@gmail.com

3. Intended Users and Account Access

DHMC EMR is an internal healthcare application intended solely for authorized patients, doctors, and hospital staff. It is not intended for use by the general public.

Access to the App requires prior registration with the hospital:

• Staff and doctors are registered by hospital administration at the time of joining DHMC.
• Patients are registered by authorized hospital staff at the time of their visit or admission.

All personal and medical information is collected through DHMC's internal, in-person hospital registration processes – not through the App. Once a person is registered with the hospital, they may create an App account to log in and access their existing hospital record. This step verifies identity and links the login to the pre-existing record; it does not independently collect new personal or medical data beyond what is required to authenticate the user.

4. Information We Process

Depending on your role, the App may display or process the following categories of information, all of which originate from hospital registration and clinical records rather than being entered fresh through the App:

• Personal identifying information (e.g., name, CNIC, contact details, patient/staff ID).
• Medical and clinical information (e.g., consultations, prescriptions, lab/radiology results, consent forms).
• Account login credentials, created at App account setup.
• Basic technical data needed to operate the App (e.g., device push token for notifications).

5. How We Use Information

We use information in the App strictly to:

• Provide and manage patient care and hospital services.
• Allow authorized doctors and staff to view relevant patient information based on their role.
• Send appointment reminders and healthcare-related notifications.
• Maintain account security and prevent unauthorized access.
• Comply with applicable healthcare, legal, and regulatory requirements.

We do not use personal or medical information for advertising or marketing purposes.

6. How We Share Information

We do not sell personal or medical information. Information may be shared only:

• With authorized doctors and hospital staff who require it to provide care, based on role-restricted access.
• With our limited technical service providers (see Section 7) solely to operate the App.
• When required by applicable law, regulation, or a valid legal request.
• To protect the safety, rights, or property of patients, staff, or the hospital.

7. Third-Party Services

The App uses a limited set of third-party services necessary for core functionality:

• Push notifications (e.g., Firebase Cloud Messaging), to deliver appointment reminders and account/healthcare-related alerts.
• Google Maps, where location or mapping features are used within the App.

These providers process only the data necessary to deliver their service and are not permitted to use it for their own purposes. The App does not use any other third-party services, and does not integrate advertising SDKs.

8. Data Security

We apply reasonable technical and administrative safeguards to protect information against unauthorized access, disclosure, loss, or misuse, including encrypted transmission (HTTPS/TLS), authentication, and role-based access controls. Users are responsible for keeping their login credentials confidential and should report any suspected unauthorized access to hospital IT/administration.

9. Data Retention

• Medical and clinical records are retained for a minimum of ten (10) years, or as required by applicable Pakistani healthcare recordkeeping regulations and DHMC's institutional policy, whichever is longer.
• Account credentials and security logs are retained for the duration of the account's active status, plus up to two (2) years after closure, for security and audit purposes.
• Technical and notification data (e.g., device tokens, diagnostic logs) is retained for up to twelve (12) months, after which it is deleted or anonymized.

Because medical recordkeeping is a legal and clinical requirement, clinical record data generally cannot be deleted on request during the applicable retention period, even if an account is closed.

10. Your Privacy Rights

Subject to applicable law and healthcare recordkeeping requirements, you may request access to, correction of, or deletion of your personal information by contacting us using the details in Section 2 / Section 13. Deletion requests for clinical records may not always be possible during the mandatory retention period described in Section 9.

11. Children's Information

The App may process information relating to minors where necessary to provide healthcare services (e.g., pediatric care), collected as part of the patient's medical record with the involvement of a parent or guardian, in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date above. We encourage users to review this Policy periodically.

13. Contact Us

Doctors Hospital and Medical Center Private Limited
Publishing as (Google Play Developer Name): Farooq Hospitals
Block G1, Canal Bank, Lahore, Pakistan
📧 doctorshospitalandmedical@gmail.com
🌐 https://doctorshospital.com.pk/