The short version
- Your clinic owns its patient data. We only use it to run our services for your clinic.
- We do not store medical records, diagnoses or medical notes.
- We never sell patient data or share it with other clinics.
- If you leave, you get a full copy. We delete it after 90 days.
Who we are
Pakistan Front Desk (PFD) is based in Punjab, Pakistan. Our website is pakistanfrontdesk.com. We set up and run front desk systems for clinics: WhatsApp replies, bookings, reminders, receptionist accountability, money tracking and patient recall.
In this policy, "we" and "us" mean Pakistan Front Desk. "Clinic" means a clinic that uses our services. "Patient" means a patient of that clinic.
Our role
- The clinic is the data controller. The clinic owns its patient data and decides how it is used.
- Pakistan Front Desk is the data processor. We only use patient data to run our services for the clinic.
If you are a patient, the clinic is your first point of contact for questions about your data. You can also email us.
What data we process for clinics
- Patient name and phone number
- WhatsApp messages between the patient and the clinic
- Appointment details: date, time and treatment type
- Payment and receipt details: treatment and amount paid
- Which ad or source brought the patient
- Staff names and phone numbers (doctors and receptionists)
What we do not store
We do not store medical records, diagnoses or medical notes. Those stay in the clinic's own medical software.
Where data is stored
- Main database: our private server, hosted by Hostinger in Malaysia.
- Backups: Google Drive, on our Google Workspace account.
- WhatsApp messages: these pass through the official WhatsApp Business Platform by Meta.
- At the clinic: clinic staff may also see patient chats in the clinic's WhatsApp Business app.
Service providers we use
- Hostinger: server hosting.
- Meta: the official WhatsApp Business Platform.
- Google: email and backups.
- AI providers: only to write replies to patients. We send only the message text needed to reply. We do not send medical notes.
Messages we send to patients
- We send patients appointment reminders and next-session reminders only.
- We do not send marketing messages from the clinic's number.
- Patients can reply STOP at any time to stop these messages.
Security
- Access to our server and systems is limited to our team, with 2-step verification.
- Connections use HTTPS.
How long we keep data
- The clinic owns its data.
- If a clinic stops using our services, we give the clinic a full copy of its data on the day it leaves.
- We keep the data for 90 days after that, in case the clinic comes back. Then we delete it.
Asking for your data to be deleted
Patients can ask their clinic, or email us at team@pakistanfrontdesk.com, to delete their data. We will process the request together with the clinic.
What we never do
- Sell patient data.
- Share patient data with other clinics.
- Use one clinic's data for another clinic.
Website visitors
Our website uses Google Analytics to count visits and see which pages people read. It does not collect patient data.
The WhatsApp message box on our Contact page does not save anything. It only opens WhatsApp with your message ready to send.
Contact us
Questions about this policy or your data? Email team@pakistanfrontdesk.com.
Pakistan Front Desk, Punjab, Pakistan.