Privacy Policy

Last updated August 2026

What we collect

When you message Aura Clinic on WhatsApp, we collect: your WhatsApp number; anything you tell us about your health, symptoms and medical history; photos or voice notes you send (for example, of a skin condition, an old prescription, or a lab report); your name, age, sex and city, if you share them; and your delivery address and preferred payment method if you order medicine.

We do not ask for your CNIC, and we never ask for banking details over WhatsApp beyond what is needed to confirm a cash-on-delivery or bank-transfer order.

How we use it

Your information is used to hold your consultation, prepare a draft prescription (assisted by software, always reviewed and signed by a real doctor registered with the National Council for Homeopathy before anything is sent to you), arrange delivery of medicine, and follow up on how you are doing.

We do not use your health information for advertising, and we do not sell it to anyone.

Who can see it

The doctor reviewing your case, and clinic staff who need it to process your order or answer a support question, can see your information. Our courier partner receives only your name, phone number and delivery address — never your medical details. Our software systems, including the assistant that helps draft your first response, are operated by Aura Clinic and are not shared with outside advertisers.

How long we keep it

We keep your consultation and prescription records indefinitely, so that if you message us again in future — even years later — the doctor reviewing your case can see your history. You can ask us to delete your records at any time by messaging us on WhatsApp; we will confirm once this is done, except where we are required to keep a record (for example, a signed prescription) for regulatory or medico-legal reasons.

LEGAL-REVIEW: Confirm the exact minimum retention period for signed prescriptions and doctor records required under Pakistani medical-records and homeopathic-practice regulations, and whether "delete on request" needs any carve-outs beyond that.

Children's health information

If you consult us about a child, you are confirming that you are their parent or legal guardian and that you consent to us collecting the child's health information for the purpose of the consultation.

Your records, privately

On request, we can send you a private link to view your own records online. That link is not searchable, is not indexed by search engines, and expires after a period of time — see the page itself for details. You can also sign in with your WhatsApp number and a password if you have set one up with us.

Security

We take reasonable technical and organisational steps to protect your information, including restricting access to staff who need it and encrypting data in transit.

LEGAL-REVIEW: Confirm data residency (where servers are hosted) and whether any cross-border transfer disclosure is required for a Pakistan-based healthcare service, and name a contact point (email or role) for privacy requests and data-deletion requests.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the latest version.

Free consultation, 100% confidential