Privacy Policy
Al-Fatah Clinic app (com.alfatah.shop; the older direct-download app pk.alfatah.shop) and the website alfatahclinic.com/shop · Effective 1 October 2026
Al-Fatah Clinic, Manawala, Sheikhupura, Pakistan ("we") runs the Al-Fatah Clinic app and website so customers can see our medicines and products, place an order for pickup or delivery, and pay. This page explains what is collected and how it is used.
What we collect
- Account details you type: your name, phone number and, for delivery, your address. We do not store your password; only a one-way fingerprint of it is kept to check your sign-in.
- Orders: the products, quantities, prices, chosen payment method and pickup or delivery choice of each order, and its status.
- Prescription photos, only if you attach one to an order for a prescription medicine. They are kept with that order as part of the pharmacy's records.
- Fingerprint sign-in, only if you turn it on in the app: your fingerprint is checked by Android on your phone and never reaches us. We keep the phone's name and model and a one-way code of its sign-in key, so you can switch it off at any time under My account.
- Technical data needed to serve the pages, such as the request address and time, in short-lived server logs.
The app does not collect your location, contacts, files, other photos, advertising identifiers or data from other apps. It shows no advertising and uses no analytics or tracking SDKs.
How it is used
- To prepare, deliver and invoice your order and to contact you about it by phone or WhatsApp.
- To keep your order history so you can reorder.
- To meet the record-keeping duties of a licensed pharmacy under Pakistani law.
We do not sell or rent your data, and we do not share it with advertisers.
Who can see it
- Our pharmacy staff, to fulfil your order.
- Cloudflare, Inc., which hosts the shop pages and relays your order to our pharmacy computer over an encrypted connection.
- The payment provider you choose, which receives only what is needed to complete the payment. Card or wallet details are entered on the provider's own page, never in our app.
- A delivery rider, who sees your name, phone and address for that delivery only.
How it is protected
- Connections between the app and our servers use HTTPS with TLS 1.2 or higher; the app refuses any other connection.
- Your profile and orders are stored in encrypted form on our systems; passwords are never stored, only a salted fingerprint.
- The app itself makes no cloud backup of its data and does not carry your sign-in to another phone.
How long we keep it
Orders and the records attached to them are kept for as long as pharmacy and tax law in Pakistan requires. Your account details stay until you ask us to remove them.
Your choices
Delete your account yourself: in the app or on alfatahclinic.com/shop, open Sign in (your name at the top) → Delete my account, type your password and confirm. See also delete-account.html.
- You can browse the shop without an account.
- You can ask us to correct or remove your account and personal details at any time by WhatsApp on 0325-4264284 or by email to [email protected]. Records that the law requires us to keep are retained without your account.
- Uninstalling the app removes everything it stored on your phone.
Children
The app is intended for adults (18 and over). We do not knowingly collect data from children.
Changes
If this policy changes, the new version is published on this page with a new effective date.
Contact
Al-Fatah Clinic, Near Sar-e-Rah Restaurant, Main GT Road, Manawala, District Sheikhupura, Pakistan.
WhatsApp / phone: 0325-4264284 · Email: [email protected]
Problems with the app or website itself (not orders): email the app administrator at [email protected].