Privacy Policy

1. Introduction

CMA Hospital Wah Cantt (“CMA Hospital”, “we”, “our”, or “us”) is committed to protecting the privacy of every patient, visitor, and user of our website, cmahospitalwah.com (the “Website”). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have regarding your information.

By accessing or using our Website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Website.

2. Information We Collect

We may collect the following categories of information:

• Personal identification information — such as your name, phone number, email address, age, and gender, which you provide when booking an appointment, creating a patient portal account, or contacting us.
• Health-related information — such as the department or specialist you wish to consult, the reason for your visit, and any details you voluntarily share when requesting an appointment or using our services.
• Account information — login credentials and profile details if you register for our patient portal.
• Technical information — such as your IP address, browser type, device type, pages visited, and time spent on the Website, collected automatically to help us improve our services.

3. How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage your appointments with our doctors and departments;
• Provide medical services and communicate with you about your care;
• Respond to your enquiries, feedback, and requests;
• Operate and maintain your patient portal account;
• Send you appointment reminders and important service updates;
• Improve the Website, our services, and patient experience;
• Comply with applicable legal, regulatory, and professional obligations.

4. Cookies & Local Storage

Our Website uses browser local storage and similar technologies to remember your preferences and to cache non-sensitive content (such as doctor and department listings) so that pages load faster. These technologies do not store your medical records. You can clear locally stored data at any time through your browser settings; doing so will not prevent you from using the Website.

5. How We Share Your Information

We do not sell, rent, or trade your personal or health information. We may share information only in the following limited circumstances:

• Within the hospital — with doctors, clinical staff, and administrative personnel who need it to provide your care and manage your appointments;
• Service providers — with trusted third parties who help us operate the Website (such as hosting providers), under obligations of confidentiality;
• Legal requirements — when required by law, court order, or a competent government or regulatory authority in Pakistan;
• Safety — where necessary to protect the vital interests, health, or safety of a patient or the public.

6. Data Security

We take reasonable administrative, technical, and physical safeguards to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Please keep your patient portal credentials confidential and notify us immediately if you suspect unauthorised use of your account.

7. Data Retention

We retain personal and health information for as long as necessary to fulfil the purposes described in this Policy, to provide continuity of medical care, and to comply with legal, regulatory, and professional record-keeping requirements applicable to healthcare providers in Pakistan.

8. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your patient portal account;
• Opt out of non-essential communications such as promotional messages;
• Withdraw consent where processing is based on your consent.

To exercise any of these rights, please contact us using the details in the “Contact Us” section below.

9. Third-Party Links

Our Website may contain links to third-party websites and services, such as Google Maps and our social media pages (Facebook, Instagram, YouTube, LinkedIn, and X/Twitter). We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any information.

10. Children's Privacy

Appointments and services for children (including our Paediatrics & Child Health department) should be arranged by a parent or legal guardian. We do not knowingly collect personal information directly from children under the age of 18 through the Website without parental or guardian involvement.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Your continued use of the Website after any changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us: