Privacy Policy

PPHI's DMR System

Daily Monitoring Report — Health Facility Reporting Platform

Effective: 01 Sep 2026

1.Introduction

This Privacy Policy explains how PPHI's DMR (Daily Monitoring Report) System ("DMR", "System", "Application", "we", "us", or "our") collects, uses, stores, protects, and discloses information when you access, register for, or use the System and its associated health-facility monitoring and reporting services.

PPHI's DMR is an internal reporting and monitoring platform used by PPHI Sindh and its network of Health Facilities to record, submit, and review basic health-service indicators, and to monitor weekly medicine closing balances at Health Facilities.

DMR is intended for use by authorized PPHI staff and Health Facility personnel (including District Officers/DOs and facility-level users) as part of their official reporting duties, and is not intended for use by the general public or patients.

By using DMR, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should discontinue use of the System.

2.Who We Are

DMR is operated by PPHI Sindh (People's Primary Healthcare Initiative) as part of its internal health-facility monitoring infrastructure.

For the purposes of this Privacy Policy, the terms "Company," "PPHI," "we," "us," and "our" refer to PPHI Sindh and its associated DMR System.

Email: info@pphisindh.org.pk

Phone: 0800 77755

Website: www.pphisindh.org

Address: Bungalow No. C-27/1, Near Umer Shareef Park, Clifton Block 2, Karachi

3.Who Uses This System

DMR is used by authorized personnel only, including:

DMR is not a patient-facing application. It does not collect information directly from members of the public or patients, and does not require patient consent, since it does not process individually identifiable patient records.

4.Information We Collect

4.1User Account Information

We collect information necessary to register and authenticate System users, including:

4.2Health Facility Indicator Data

DMR collects aggregate, facility-level service indicators reported daily/weekly by Health Facilities, such as:

4.3Medicine Closing Balance

DMR collects the weekly medicine closing balance reported by each Health Facility, along with the facility and reporting-period information associated with each submission.

This information relates to facility stock levels — it is not individual patient medical or health information.

5.How We Collect Information

We collect information through:

6.How We Use Your Information

We may use the information described above for the following purposes:

6.1Reporting and Monitoring

6.2Account Management

7.Confidentiality of Facility and Operational Data

We recognize that health-facility service statistics and medicine closing balance data are operationally sensitive.

Access to DMR data is restricted to authorized users based on their role, facility, and reporting jurisdiction (e.g., facility-level users can generally access only their own facility's data; DOs and administrators may access data across facilities under their supervision).

We do not sell facility data or indicator data to any third party.

We will not intentionally disclose DMR data to unauthorized individuals except where disclosure is permitted or required by applicable law or internal PPHI policy.

8.When We May Share Information

8.1Authorized PPHI Personnel

Regional/district administrators, Head Office management, and IT/ERP support staff, where necessary to perform their official duties.

8.2Service Providers

We may use trusted third-party service providers for services such as:

Such providers may access information only to the extent reasonably necessary to perform services on our behalf.

9.Data Security

We take reasonable technical, administrative, and organizational measures to protect DMR data against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

No electronic transmission or storage system can be guaranteed to be completely secure. Users are responsible for protecting their own account credentials.

10.Account Credentials

Users are responsible for maintaining the confidentiality of their login credentials, including:

We will not be responsible for unauthorized access resulting from a user's failure to protect their credentials, except to the extent otherwise required by applicable law.

11.Data Retention

We retain DMR data (account information, indicator data, and medicine closing balance data) for as long as reasonably necessary for ongoing monitoring and reporting purposes and for maintaining historical facility performance records.

When information is no longer required, it may be securely archived or disposed of.

12.Data Deletion and Account Closure

Users may request closure of their DMR account by contacting DMR/IT Support through the contact information in this Privacy Policy.

A request to close an account does not require immediate deletion of historical facility indicator or medicine closing balance data, as such records may need to be retained for reporting continuity.

13.Your Privacy Rights

Users may have rights regarding their personal account information, including the right to:

Email: info@pphisindh.org.pk

Phone: 0800 77755

We may need to verify your identity/role before processing a request.

14.No Patient Health Information

DMR does not collect, store, or process individually identifiable patient medical records. Indicator data is reported at an aggregate/facility level (e.g., total counts per service per period), not as identifiable individual patient records.

If any field is ever introduced that could capture individually identifiable patient information, this Privacy Policy will be updated accordingly before such collection begins.