Quality nucleusThis notice covers information submitted through the Misbah Healthcare corporate Website.
Information we receive
Inquiry forms collect the information you choose to provide, including name, email, organization, telephone number, inquiry type, and message. Partnership opportunity briefs also collect a selected pathway, geography, project stage, objective, timeline, and an optional proposal document. Career expressions of interest may include professional background information and an optional CV or resume. Administrative resource actions use the authenticated account email supplied by the hosting platform. Hosting and security systems may process routine technical data such as IP address, browser details, timestamps, and request logs.
Anonymous visits and website measurement
The Home page displays an aggregate website-visit count. A random per-tab token is sent to prevent a retry or refresh from being counted twice, stored only as a one-way hash, and automatically expires. The visit system does not store the raw token, IP address, account identifier, browser fingerprint, or individual visit history.
The Website records LCP, INP, and CLS through the official Web Vitals implementation, grouped only by a broad page category. A metric sample identifier is one-way hashed and samples expire after 90 days. Controlled aggregate events—such as partnership-wizard steps and phone or email link clicks—record an event name, broad context, count, and update time. They do not include form values, names, email addresses, proposal contents, or a persistent visitor identifier.
Why we use it
We use inquiry information to respond, evaluate potential business relationships, maintain an appropriate operational record, prevent abuse, and meet legal obligations. With your affirmative consent, career information and CVs are used to evaluate your expression of interest in the relevant vacancy or recruitment process. Administrative identity is used to enforce authorization and create an audit trail.
Retention and deletion
Career information and optional CVs are assigned a deletion deadline no later than six months from submission. General and partnership inquiries, including optional proposal documents, are assigned a deletion deadline no later than 24 months from submission unless a longer period is required by law or reasonably necessary for an active agreement, security matter, or legal claim. Expired anti-duplication tokens and performance samples are removed by bounded maintenance. Authorized administrators can run the process or delete an inquiry earlier. You may withdraw recruitment consent or request earlier deletion. A minimal non-personal audit event may remain to document the deletion.
Storage, recipients, and service providers
Structured records and document metadata are stored in managed database infrastructure. Uploaded career and partnership documents are stored in private managed object storage. Transactional email notifies the configured Misbah Healthcare inbox, but the document itself is not attached to that email; authorized personnel must use the protected Website download. Access is limited to authorized Misbah Healthcare personnel and providers that support hosting, storage, security, and email delivery. These providers may process information outside Pakistan according to their infrastructure and contractual arrangements.
Security
Access controls, bounded request processing, structural document inspection, active-content rejection, rate limits, private storage, protected downloads, audit history, and recoverable storage operations reduce risk. Uploaded documents remain untrusted content and should be opened only with maintained endpoint protection. No internet service is completely secure, so do not submit information that is unnecessary for the stated purpose.
Your choices and requests
You may ask to access, correct, or delete information you submitted, or withdraw recruitment consent, by emailing info@misbahhealthcare.com. Include enough detail to identify the submission, such as the email address used and any reference number. We may need to verify your identity before acting and may retain a minimal record where legally required.
Sensitive information
Do not submit patient records, clinical information, CNIC or passport copies, financial credentials, or other highly sensitive information through this corporate Website unless Misbah Healthcare specifically requests it through an approved secure process.
Changes and contact
We may update this notice as our Website, service providers, or legal obligations change. Questions and privacy requests may be sent to info@misbahhealthcare.com or to Misbah Healthcare (Private) Limited, Bahria Town, Lahore, Punjab, Pakistan.
Legal review note: This notice describes the Website’s implemented operational controls. It does not claim privacy certification and should be reviewed by qualified Pakistani counsel as applicable law and company operations evolve.