Introduction

AZ-DEV Software Solutions ("we", "us", "our") is committed to protecting the privacy of users of the Laboratory Management System (AZ-CURE LAB). This Privacy Policy explains the types of information we collect, how it is used, how it is shared, and your rights.

1. Scope

This Privacy Policy applies to:

• Patient data, medical records, and laboratory results
• User accounts (doctors, staff, administrators)
• System logs, audit trails, and technical data

2. Information We Collect

• Provided by you: patient information, laboratory orders, staff details.
• Account data: username, email, role, hashed password, profile.
• Automatically collected: IP address, device/browser info, login timestamps.
• Uploads: reports, documents, images, with metadata stored securely.

3. How We Use Your Information

• To manage laboratory workflows (orders, results, reporting)
• To authenticate and authorize users (RBAC security)
• To maintain compliance and security audit logs
• To improve system features and performance
• To notify users about system updates

4. Legal Basis & Sharing

We never sell personal data. Information is shared only with:

• Authorized healthcare providers and lab staff
• Service providers under confidentiality agreements
• Regulators or legal authorities when required

5. Data Protection & Security

We apply encryption, access controls, secure authentication, and continuous monitoring to protect data. Patient information is accessible only to authorized roles, and all access is logged.

6. Data Retention

Data is kept only as long as necessary for patient care, operations, or legal obligations. When no longer needed, it is securely deleted or anonymized.

7. Your Rights

• Request access to your data
• Ask for corrections to inaccurate information
• Request deletion (where legally permitted)
• Restrict or object to processing in certain cases

8. Cookies & Tracking

We use cookies for secure session management. No tracking or advertising cookies are used.

9. International Transfers

If data is processed outside Afghanistan, appropriate legal safeguards are applied.

10. Third-Party Services

Some features may integrate with third-party services (e.g., cloud hosting, SMS/email providers). These providers are vetted and comply with strict confidentiality standards.

11. Policy Updates

We may update this Privacy Policy. Any significant changes will be notified in advance. Please review it periodically for updates.

12. Contact Us