Your Privacy Rights

Your Rights

What you can ask us for

You can make any of these requests at no cost. We will answer within 30 days.

A copy of your records

Ask for a copy of your vaccination history, in print or as a file.

A correction

If something in your record is wrong — a name, a date, a vaccine — you can ask us to correct it.

Who has seen your file

We keep a record of every person who opens your file. You can ask to see that list.

Limits on how it is used

You can ask us to restrict how your information is used or shared.

Deletion of your records

You can ask us to delete your records, and we will act on it — but we have to be straight with you about what that means. Vaccination records must be kept for six years by law. We cannot erase one before then, and any service that tells you otherwise is either breaking that rule or not telling you the truth.

Here is what we do when you ask:

Your certificate stops being verifiable in public. Your MR number returns nothing — the same as a number that was never issued.
You come off every staff screen, search result and export.
Your photograph is destroyed for good.
Every consent recorded against your name is withdrawn.

What is left is an encrypted record nobody can reach through this system, and the log of who has opened your file — kept because you have the right to ask for that list at any time.

How to ask

Send us a request online

Fill in a short form and your vaccination center will take it from there. You can also walk into your center and ask in person if you prefer.

Fill in the form

You will need the MR number from your certificate and the patient's date of birth.

We check your ID

Staff will contact you to see your CNIC — or a B-Form for a child. Nothing is released before this. It is what stops someone else asking for your file.

We respond within 30 days

Usually much sooner. If we cannot do what you asked, we will tell you why in writing.

Make a request Contact us

How we protect your records

Your ID number, phone number, address and date of birth are stored scrambled, so they cannot be read even if the database is stolen.
Every time a staff member opens your file, it is recorded — who, and when.
Staff sign in with a password and a second code from their phone. Unusual access is flagged automatically.
Only staff at the center that treated you can see your file.
Checking a certificate online needs both the record number and the patient's date of birth.

Just need to check a certificate?

You do not need to make a request for that. Scan the QR code on the certificate, or look it up with the record number and date of birth.

Check a certificate