Legal
Privacy Policy
Last updated 25 September 2026
Draft for the demo. To be reviewed by the clinic and its legal adviser before launch.
- Who we are
- What we collect
- How we use it
- Your health information
- Who we share it with
- Cookies and tracking
- How long we keep it
- Your choices and rights
- Children
- Changes to this policy
This policy explains what personal information Farzeen's Fitness First collects through this website and in the course of your care, how we use it, and the choices you have. We treat your information, and especially your health information, as confidential.
Who we are
Farzeen's Fitness First is a weight management clinic led by Dr. Farzeen Malik at 4-G, Gulberg 2, Lahore, Pakistan. For anything in this policy, contact us at hello@farzeenfitnessfirst.com or on WhatsApp at 0300 8482423.
What we collect
When you request a consultation through our booking form, we collect your name, your WhatsApp number, the protocol you are interested in, your goal and how you heard about us.
When you order from our supplements shop, we collect your name, phone number, email address, delivery address and the details of your order.
When you message us on WhatsApp, call or email, we keep the conversation so our team can follow up properly.
During your care, Dr. Farzeen and the clinical team record your medical history, test results, measurements and treatment plan. This is health information and is handled with extra care, as described below.
When you browse the site, we and our service providers collect technical information such as your device, browser, the pages you visit and how you arrived. See Cookies and tracking below.
How we use it
- To contact you about your booking and confirm your appointment
- To provide your consultation, treatment and follow-up care
- To process, deliver and support your supplement orders
- To answer your questions on WhatsApp, by phone or by email
- To keep the website secure and protect our forms from spam
- To understand how the website is used and measure our advertising
- To meet our legal, medical record-keeping and accounting obligations
We do not sell your personal information to anyone.
Your health information
Health information you share with us is used only to provide your care. It is seen only by Dr. Farzeen and the members of the clinical team involved in your treatment, and it is never used for advertising.
We will only publish your words, results or image as a testimonial or case study with your written consent. Case studies are anonymised: no name, no photo and no details that could identify you. You can withdraw your consent at any time and we will remove it.
Who we share it with
We share information only where it is needed to provide our services:
- Our partner laboratory, when you choose to have tests arranged through us
- Our delivery courier, who receives your name, phone number and address to deliver your order
- Service providers who run the website and our communication for us, including our web host, Cloudflare (security checks on our booking form), Meta (WhatsApp, and advertising measurement) and Google (maps and videos on the site)
- Authorities, where the law requires us to
These providers may process information outside Pakistan. We use established providers and share only what each one needs.
Cookies and tracking
Our website uses cookies and similar technology.
The Meta Pixel records visits and actions such as a completed booking request or a shop order, so we can measure and improve our Facebook and Instagram advertising. When you submit a booking request, it learns only that a request was made: not the protocol you selected, and not your name, number or goal. You can limit this through your Facebook and Instagram ad settings, or by blocking third-party cookies in your browser.
Cloudflare Turnstile checks that booking requests come from a real person rather than an automated program. It runs in the background without a puzzle.
Embedded Google Maps and YouTube videos may set their own cookies. Videos on our Testimonials page do not load from YouTube until you press play.
How long we keep it
Booking requests that do not lead to an appointment are kept for up to 12 months and then deleted. Clinical records are kept for as long as medical record-keeping rules require. Order records are kept for as long as our accounting and tax obligations require.
Your choices and rights
You can ask us at any time to:
- Tell you what personal information we hold about you
- Correct information that is wrong or out of date
- Delete your information, where we are not required to keep it
- Stop sending you updates or offers
Contact us using the details above and we will respond within 30 days.
If you live in the United Kingdom, you also have rights under UK data protection law, including the right to complain to the Information Commissioner's Office.
Children
Our services are for adults. We see patients under 18 only with a parent or guardian, who provides their information on their behalf.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated.