Hinax - Research Lab, we operate the website hinax.org. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit the Site, contact us, or place an order.
1) Who we are
- Controller: Hinax - Research Lab
- Website: https://hinax.org
- Activities: Displaying and selling surgical, medical, and aesthetic equipment, nutraceutical/pharmaceutical products, and related services.
2) Information we collect
A. Information you provide
- Account & profile: name, email, password (hashed), phone, billing, and shipping addresses.
- Orders & transactions: items purchased, order numbers, payment method (COD/Bank Transfer), and related notes.
- Bank Transfer verification: payment confirmation screenshots you send via WhatsApp, and transfer references you provide.
- Communications: messages sent by email, contact form, phone, or WhatsApp (including attachments).
- Business details (if applicable): company/hospital/clinic name, tax/VAT info.
C. Information from third parties
- Banks/payment confirmation: confirmation that a transfer was received, fraud-check signals.
- Logistics partners: tracking numbers, delivery status.
- Analytics providers: aggregated usage statistics.
Important: Please do not send sensitive credentials (full card numbers, PINs, or OTPs) via WhatsApp, email, or phone. We will never ask for them.
3) Payments we accept
- Cash on Delivery (COD).
- Bank Transfer to: [Bank name] - [Account title] - [IBAN/Account No.].
- WhatsApp payment confirmation: After a Bank Transfer, send a screenshot of your payment to WhatsApp: [WhatsApp number] with your order number and full name so we can verify and dispatch your order.
4) How we use your information (purposes & legal bases)
We process personal information to:
- Operate the Site and provide services (accounts, orders, payments, delivery, returns, customer support).
- Verify Bank Transfers using the details you provide (including WhatsApp screenshots) and mark orders as paid.
- Communicate with you (order updates, support, service notices).
- Optional marketing (product news, offers) with the ability to opt out at any time.
- Security & compliance (detect/prevent misuse, comply with legal/tax obligations).
- Improve our Site and offerings (analytics, debugging, quality assurance).
5) Sharing & disclosure
We do not sell your personal information. We share it only as needed:
- Banks/payment verification: We may share your order number, amount, date/time, and transfer reference with our bank to confirm incoming payments or resolve disputes.
- WhatsApp (Meta Platforms): If you contact us by WhatsApp, your messages and attachments are processed by WhatsApp under their own terms and privacy policy, which we do not control.
- Logistics/shipping providers: to fulfill deliveries and manage returns.
- IT/hosting & analytics providers: to run and improve the Site.
- Professional advisors & authorities: (auditors, legal counsel, regulators) where required or to protect our rights.
- Business transfers: in case of merger, acquisition, or asset sale.
All service providers are bound by obligations to process data only on our instructions and to protect it appropriately.
6) Cookies & similar technologies
- Strictly necessary cookies for core functionality (cart, checkout, account).
- Functionality cookies to remember preferences (e.g., language/region).
- Analytics/marketing cookies may be used to understand traffic or measure campaigns (only with consent where required).
7) Data retention
We keep data only as long as necessary:
- Orders & invoices: retained to comply with tax/accounting laws (typically 3–10 years, depending on jurisdiction).
- Payment confirmations (including WhatsApp screenshots): retained for up to [X years] for audit/fraud prevention, then securely deleted or anonymized.
- WhatsApp chat logs: kept no longer than necessary to verify payment/support your order and for legal recordkeeping; routinely reviewed and deleted after 12 months, unless a longer period is legally required.
- Analytics data: kept for a limited period for trend analysis, then aggregated or deleted.
- Account data: kept while your account is active; deleted or anonymized after closure, subject to legal retention duties.
8) Security
We implement reasonable technical and organizational measures, including HTTPS/TLS in transit, access controls, least-privilege access, and secure storage for order/payment verification records.
No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. You are responsible for securing your own devices and WhatsApp/cloud backup settings.
9) Your rights
Depending on your location, you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data in certain circumstances.
- Restrict processing in certain circumstances.
- Data portability of the information you provided.
- Object to processing based on legitimate interests and to opt out of direct marketing at any time.
- Withdraw consent where processing is based on consent (without affecting prior lawful processing).
10) Children's privacy
Our Site and products are intended for professional or adult use and are not directed to children under 13 (or the relevant age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us to request deletion.
11) Changes to this Policy
We may update this Privacy Policy periodically. The "Last updated" date above indicates the latest revision. Material changes will be posted on this page and, where appropriate, notified by email or Site notice.
12) How to contact us
- Name: Hinax - Research Lab
- Email: Info@hinax.org
- Phone/WhatsApp: +92-312-2101383
- Address: Flat No 508, 5th Floor, Block A Golden Gate Presidency North Nazimabad Karachi