Privacy Policy

What we collect

We collect passport details, contact numbers, email addresses, destination country, and sponsor city to generate the GAMCA/Wafid token from the portal. Photos are requested only if the clinic requires them for verification or printing at check-in.

If you share prior X-ray reports or vaccination records, they are used to brief the clinic and reduce on-site delays. We do not request unnecessary personal data such as banking passwords or unrelated documents.

How we protect your data

Access is limited to booking coordinators. Data is shared only with panel clinics listed on Wafid to confirm your slot. Attachments are stored in secure, access-controlled folders with deletion timelines tied to your appointment date.

Payment is processed through trusted gateways; we do not store card numbers. Internal audits ensure only the assigned coordinator can view your file while your booking is active.

Your rights

You may request copies of your data, ask for corrections, or request deletion after your appointment window is complete. If you move your appointment to a different city, we revalidate what is needed and delete unneeded files.

Should a clinic request additional verification, we will seek your consent before sharing anything beyond the original checklist.

Regional considerations

Pakistan, India, and Bangladesh applicants often share data over WhatsApp; we recommend sending documents only to the listed number on this page. Screenshots of token receipts should not be forwarded to unverified contacts.

For overseas workers paying from the GCC, we mask personal identifiers in shared receipts where possible and use OTP confirmation before making changes to your booking profile.

Retention and deletion process

We keep your information only as long as needed to generate the Wafid token, share reminders, and confirm your appointment. After your medical visit or verified cancellation, we remove stored copies from our coordination tools according to internal timelines.

You may request deletion at any time by emailing or messaging the listed contact channels with your token ID. We will confirm once the deletion is complete and remind you to clear any shared files from your end for added safety.

If legal, audit, or fraud-prevention requirements mandate limited retention, we will keep only the minimum necessary records and restrict access to authorized staff.