Privacy Policy

The Skin Clinic & Aesthetics by Dr. Akasha Umair  |  Last updated: 10 August 2026

This Privacy Policy explains how The Skin Clinic & Aesthetics (“we”, “our”, “us”) collects, uses, stores, shares, and protects your personal and medical information when you visit our website, book a consultation, contact us via WhatsApp, phone, or email, or receive any treatment at our clinic. Please read this policy carefully. By using our website or services, you agree to the practices described here.

Who we are

Our website address is: https://www.drakashaumair.com. The Skin Clinic & Aesthetics is a licensed aesthetic and dermatology practice led by Dr. Akasha Umair, offering medical skin care, laser treatments, injectables, anti-aging procedures, bridal packages, and wellness services in Karachi, Pakistan. We are the “data controller” of any personal information collected through our website, contact forms, WhatsApp, phone calls, in-clinic paperwork, or during any consultation and treatment.

What personal information we collect and why

We only collect information that is necessary to provide safe, personalized medical and aesthetic care, respond to your enquiries, and improve our services. The categories we collect include:

Website and technical data: your IP address, browser type, device, pages viewed, referral source, and interaction with our website, collected via cookies and analytics tools.

Identity data: your full name, age, gender, date of birth, and government-issued ID if required for a specific procedure.

Contact data: your mobile number, WhatsApp number, email address, and residential area.

Health and medical data: your skin concerns, medical history, allergies, current medications, previous treatments, pregnancy or breastfeeding status, skin type, and consultation notes recorded by Dr. Akasha Umair.

Treatment records: details of every procedure performed, products used, batch numbers of injectables, session dates, dosage, and aftercare instructions given to you.

Payment data: mode of payment, payment date, receipt number, and where applicable, transaction reference from EasyPaisa, JazzCash, bank transfer, or card processor. We do not store full card numbers or bank passwords on our servers.

Visual data: before-and-after photos or short videos taken during your treatment journey. These are stored securely and are only used publicly with your explicit written consent (see the “Photography and before-and-after” section below).

Comments

When visitors leave comments on our website (for example on blog posts) we collect the data shown in the comments form, along with the visitor’s IP address and browser user-agent string to help detect spam. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check whether you have a public avatar. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to our website can download and extract any location data from images published on the site. Any before-and-after photos of patients that appear on our public pages are shared only after we have obtained a signed photo-release consent from that patient.

Contact and booking forms

When you use our contact form, booking form, consultation-request form, or send a message via WhatsApp at +92 332 0754909, we collect the information you provide (name, contact number, concern, area of interest) so that our team can respond to you and schedule an appointment. This information is used only to serve your enquiry and to follow up about your appointment. We do not sell, rent, or trade this data with any third party.

Health and medical information

As a medical clinic, we take the confidentiality of your health information extremely seriously. All patient records, consultation notes, medical history forms, and treatment logs are stored in secure files (physical or digital) with restricted access limited to Dr. Akasha Umair and authorized clinical staff on a strict need-to-know basis. Your health information is used only to:

  • Assess your suitability for a proposed treatment.
  • Plan safe, effective, and personalized treatment protocols.
  • Track your progress across sessions.
  • Fulfill legal, regulatory, or medico-legal reporting requirements where applicable.

We will never share your medical information with any third party for marketing, advertising, or commercial purposes. Medical records may be retained for a period consistent with generally accepted medical record-keeping standards in Pakistan (usually a minimum of five to ten years after your last visit) so that continuity of care is maintained if you return.

Photography, before-and-after images, and consent

Before-and-after photographs are an important part of aesthetic medicine. We only publish, share, or use any patient photograph for marketing, social media, our website, or educational purposes when we have obtained your explicit written consent through a signed photo-release form. You have the right to:

  • Refuse photography at any stage without affecting your treatment.
  • Consent to photos being taken for internal records only, not public use.
  • Consent to public use with your face fully anonymized (cropped or blurred).
  • Withdraw your consent at any time in the future, in which case we will remove the images from all our controlled channels as soon as reasonably possible.

WhatsApp bookings and communications

When you contact us on WhatsApp, your conversation, phone number, name, profile display picture, and any images or documents you send are visible to our booking team. WhatsApp is used only for appointment scheduling, reminders, aftercare follow-up, and answering treatment enquiries. Message content is subject to WhatsApp’s own privacy policy, which is available at https://www.whatsapp.com/legal/privacy-policy. We do not share WhatsApp chats with any third party.

Marketing communications

From time to time, and only if you have opted in, we may contact you via WhatsApp, SMS, or email with information about new treatments, seasonal offers, bridal packages, or reminders about maintenance sessions. You may unsubscribe from marketing communications at any time by replying “STOP” to any message, emailing us, or telling our reception. Unsubscribing from marketing will not affect essential communications about your active treatment plan.

Payment information

Payments for consultations and treatments are usually taken in person at the clinic. We accept cash, debit and credit cards, EasyPaisa, JazzCash, and direct bank transfers. Card payments are processed through licensed payment terminals; we do not store full card numbers or CVV codes. For online or advance payments, we may use trusted third-party payment gateways, each of which has its own privacy policy. We only retain payment reference numbers and receipts as required by tax and accounting rules.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set several cookies to save your login information and your screen display choices. Login cookies last for two days and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

Embedded content from other websites

Articles on this site may include embedded content, for example videos from YouTube or Instagram posts, images from Unsplash, or maps from Google. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with it if you have an account and are logged in to that website.

Analytics and website tracking

We use analytics tools to understand how visitors use our website so that we can improve it. These may include Google Analytics, Meta (Facebook) Pixel, and Google Tag Manager. These tools collect anonymized information such as which pages you visited, how long you stayed, which device you used, and how you found our website. They do not identify you personally. You can opt out of Google Analytics tracking by installing the browser add-on at https://tools.google.com/dlpage/gaoptout. You can adjust your ad preferences on Meta platforms via their settings.

Who we share your data with

We do not sell your personal or medical data. We only share information with parties who help us run the clinic and website, and only to the extent necessary. These may include:

  • Our booking, reception, and clinical support staff, under strict confidentiality obligations.
  • Our website hosting provider and technical support team.
  • Payment processors and banks, only for the amount of information needed to process a transaction.
  • Regulatory authorities, courts, or law enforcement, where we are legally required to disclose information under Pakistani law, including the Prevention of Electronic Crimes Act (PECA).
  • Insurance providers or third-party medical experts, only with your prior explicit consent.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. For patients, medical and treatment records are retained for at least five to ten years after your last visit, consistent with generally accepted medical record-keeping practice. Enquiry data from contact forms and WhatsApp is retained for as long as it is useful for follow-up, and is deleted on request.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. As a patient, you additionally have the right to:

  • Access the medical information we hold about you.
  • Request a correction if any of your data is inaccurate.
  • Withdraw consent for future marketing at any time.
  • Withdraw consent for public use of your photos.
  • Ask questions about how your data is handled.

To exercise any of these rights, please contact us using the details at the bottom of this policy.

Where your data is sent

Visitor comments may be checked through an automated spam-detection service. Some of the third-party services we use, such as Google Analytics, Meta Pixel, and cloud hosting providers, may transfer data outside Pakistan for processing. We take reasonable steps to make sure any provider we use maintains appropriate security and privacy standards.

How we protect your data

We use a combination of technical and organizational safeguards to protect your data, including:

  • HTTPS encryption on our website.
  • Password-protected access to clinic systems and computers.
  • Locked physical storage for paper medical files.
  • Restricted access to patient records on a need-to-know basis.
  • Regular software updates and secure hosting.
  • Confidentiality agreements with all clinic staff.

What data-breach procedures we have in place

In the unlikely event of a data breach that is likely to affect your personal information, we will investigate immediately, take steps to contain and remedy the breach, notify affected individuals as soon as reasonably possible, and report the incident to the relevant authorities where required by law.

Third-party services we use

Our website and clinic operations may use the following third-party services, each with its own privacy policy: Google Workspace, Google Analytics, Google Tag Manager, Meta (Facebook and Instagram) advertising and pixels, WhatsApp Business, our web-hosting provider, EasyPaisa, JazzCash, and licensed card-payment processors. We encourage you to review the privacy policies of any third-party service you interact with.

Children’s privacy

Our services are directed at adults aged 18 years and above. We do not knowingly collect personal information from minors. If a treatment is performed on a minor for medical or corrective reasons, it is only carried out with the presence and written consent of a parent or legal guardian, whose information will also be recorded and protected under this policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The “Last updated” date at the top of this page will indicate when the policy was most recently revised. We encourage you to review this page periodically. Continued use of our website or services after any change means that you accept the updated policy.

Contact us

If you have any question, concern, or request regarding this Privacy Policy or your personal data, please contact us:

The Skin Clinic & Aesthetics
Dr. Akasha Umair
Website: www.drakashaumair.com
WhatsApp: +92 332 0754909
City: Karachi, Pakistan