Privacy policy

1. INFORMATION WE COLLECT

We only collect information necessary to provide safe, personalized herbal guidance and fulfill orders.

1.1 Personal Information

• Full name, email address, phone and WhatsApp number.
• Shipping/billing address (for product delivery)
• Date of birth & gender (for dosage and safety considerations)

1.2 Health & Wellness Data (Sensitive Category)

• Self-reported symptoms (e.g., fatigue, joint pain, yellowing of eyes/skin, loss of appetite)
• Lab values voluntarily provided (e.g., fasting glucose, HbA1c, ALT/AST, bilirubin, uric acid, lipid panel)
• Medical history (e.g., diagnosis of diabetes, fatty liver, gout — if disclosed by you)
• Lifestyle factors (dietary habits, physical activity, sleep, stress)
• Responses to our guided disease-specific survey forms (e.g., for Jaundice or Hepatitis C support pathways)
• Chat transcripts with our herbal advisory agents

We do not collect genetic data, biometrics, or mental health diagnoses unless voluntarily provided for holistic context.

2. HOW WE USE YOUR INFORMATION

We process your data only for the following purposes, with explicit consent where required:

Purpose	Legal Basis	Categories of Data Used
Provide personalized herbal protocol recommendations	Explicit Consent + Legitimate Interest (safety & efficacy)	Health data, demographics, survey responses
Fulfill product orders & shipping	Contractual Necessity	Name, address, payment info, order history
Enable optional 1:1 herbal consultations	Explicit Consent	Full health profile, chat logs
Ensure GMP compliance & product safety monitoring	Legal Obligation	Batch numbers, user-reported outcomes, adverse event reports (anonymous unless safety-critical)
Improve formulations & user experience	Legitimate Interest (with anonymization)	Aggregated, de-identified usage patterns (e.g., "60% of users with elevated uric acid responded well to Protocol X")
Respond to inquiries & provide support	Legitimate Interest	Contact info, relevant health context

3. CONSENT & WITHDRAWAL

• You provide explicit, informed consent before submitting health-related survey data or initiating a chat consultation.
• Consent is granular: You may consent to product recommendations without consenting to consultation or research use.
• You may withdraw consent at any time by emailing info@asktabeeb.com — though this may limit service functionality (e.g., we cannot personalize protocols without health inputs).
• Withdrawal does not affect lawfulness of prior processing.

4. DATA SECURITY & CONFIDENTIALITY

As a GMP-certified facility, we apply pharmaceutical-grade data protection:

• All health data is encrypted.
• Access restricted to authorized herbalists and fulfillment staff (role-based permissions)

We treat your herbal health profile with the same confidentiality as a clinical medical record — even though we are not a licensed medical clinic.

5. DATA RETENTION

Data Type	Retention Period	Reason
Order & payment records	5 years	Tax, warranty, and GMP record-keeping
Health survey responses & chat logs	24 months after last activity	Safety monitoring, follow-up, and user-requested continuity
Anonymized/aggregated research data	Indefinitely	No individual identification required
Adverse event reports (if any)	10+ years	Pharmacovigilance obligations

6. YOUR RIGHTS

Depending on your jurisdiction you may have the right to:

• ✅ Access a copy of your personal and health data
• ✅ Correct inaccurate or incomplete information
• ✅ Request deletion ("right to be forgotten")
• ✅ Restrict processing (e.g., pause recommendations)
• ✅ Object to processing (e.g., for research)

To exercise these rights, email: info@asktabeeb.com

Subject line: "Privacy Request – [Your Full Name]"

We will respond within 30 days.

7. THIRD-PARTY SERVICE PROVIDERS

We engage trusted vendors who sign Data Processing Agreements (DPAs):

Vendor Type	Purpose	Data Shared
Shipping carriers (e.g., Pakistan Postal Services)	Product delivery	Name, address, phone (no health info)
Customer support platform	Chat & ticket management	Only with your consent; end-to-end encrypted

We do not use ad networks, behavioral trackers, or third-party analytics that profile health status.

8. INTERNATIONAL DATA TRANSFERS

We prefer hosting data within USA Cloud Networks or Internationally rated Hosting Services Provider.

9. CHILDREN'S PRIVACY

AskTabeeb.com is not intended for users under 18. We do not knowingly collect data from minors. If we become aware of such data, we will delete it promptly.

10. CHANGES TO THIS POLICY

We may update this Policy to reflect legal, operational, or regulatory changes. The "Effective Date" above will be revised. We will notify users of material changes via:

• Email (to registered address)
• Banner on AskTabeeb.com for 30 days

Continued use after notice = acceptance.

11. CONTACT & SUPERVISORY AUTHORITY