Privacy Policy | National Institute of Cardiovascular Diseases (NICVD)

1. Introduction

NICVD is committed to protecting the privacy, confidentiality, and security of all users of its official website, Android application, and digital services. This Privacy Policy explains how NICVD collects, uses, stores, protects, and discloses personal information in accordance with applicable laws of Pakistan, including constitutional protections of privacy, healthcare confidentiality standards, and recognised international data-protection principles.

By accessing or using NICVD’s digital platforms, you agree to this Privacy Policy.

2. Legal Compliance

Laws and regulations of Pakistan relating to healthcare, digital services, and confidentiality
Constitutional protections under Article 14 (privacy & dignity)
Ethical and professional standards applicable to medical institutions
International best practices for handling sensitive health information

3. Information We Collect

3.1 Personal Information

Name, CNIC, contact details (email, phone, address)
Demographic information

3.2 Medical Information (Sensitive Data)

Medical history, diagnostic reports, treatment records, and appointment details
Emergency information
Follow-up and telehealth records

3.3 Technical & Usage Information

IP address, browser type, device type
App usage analytics
Cookies and tracking data

3.4 Other Information

Feedback, complaints, inquiries
Employment or training applications
Donations and voluntary contributions

NICVD collects only the information necessary to provide safe and efficient services.

4. How We Use Your Information

Medical diagnosis, treatment, and follow-up care
Appointment scheduling, reminders, and communication
Managing hospital operations and patient administration
Improving website/app functionality and user experience
Public health research, audits, and service quality enhancement (where permissible)
Processing employment or internship applications
Responding to complaints and inquiries
Ensuring system security, fraud prevention, and legal compliance

NICVD never sells, rents, or trades personal data.

5. Consent

Explicit or implied consent depending on the service provided
Right to withdraw consent for non-medical communications
Withdrawal does not affect medical care already provided

6. Data Security

NICVD implements strong administrative, technical, and physical safeguards to protect your data from unauthorized access, accidental loss, destruction, alteration, misuse, or cyberattacks.

7. Data Breach Response

Immediately secure affected systems
Assess the extent and nature of the breach
Notify affected individuals where appropriate
Inform relevant governmental authorities if legally required
Take remedial measures to prevent recurrence

8. Data Retention

Medical records as required by healthcare regulations
Administrative records as needed for service obligations
User accounts until deletion or withdrawal of consent
Complaint data for recordkeeping and audit purposes

9. Disclosure of Personal Data

NICVD may disclose personal information to:

Healthcare professionals involved in treatment
IT vendors, cloud hosting, analytics providers
Government bodies or regulators where required by law
Courts or law enforcement under legal mandate

10. Cross-Border Data Transfer

If third-party services are hosted outside Pakistan, NICVD ensures adequate protections equal to or stronger than those required under Pakistani standards.

11. Cookies & Tracking

NICVD uses cookies to improve website/app performance, analyze usage patterns, and enhance user experience. Users may disable cookies in browser settings.