Privacy Policy

Karavan respects your privacy. This Privacy Policy explains how we collect, use, protect, and share personal information when you use our website, visit our studio, join our programs, attend our outreach activities, complete assessments, communicate with us, or otherwise use our services.

Karavan provides wellness, exercise, nutrition, assessment, outreach, and public health programming. We do not directly provide licensed clinical care. Where clinical services or diagnostic tests are needed, we may work with licensed clinical partners, diagnostic laboratories, doctors, or other health professionals.

1. Information we collect

We may collect the following information, depending on how you interact with us:

Basic information: name, phone number, email address, age, gender, emergency contact, address, and membership or registration details.

Health and wellness information: fitness goals, movement capacity, mobility assessments, nutrition information, body composition data, attendance, exercise history, self-reported habits, progress, feedback, and other information relevant to safe and effective participation.

Clinical or diagnostic information: lab results, blood markers, reports, prescriptions, diagnoses, referrals, or other clinical information shared by you or by our clinical or diagnostic partners with your consent or other lawful basis.

Program and service information: reservations, check-ins, payments, communications, complaints, feedback, outreach participation, corporate or institutional program participation, and service history.

Website and technical information: IP address, device information, browser type, cookies, website usage, form submissions, and similar technical data.

We only ask for information that is reasonably relevant to our services, safety, operations, research, communication, or public health mission.

2. How we use your information

We may use your information to:

1. register you for Karavan services, memberships, assessments, outreach activities, or programs;
2. deliver exercise, wellness, nutrition, assessment, and public health services;
3. coordinate with diagnostic labs, doctors, clinical partners, corporate partners, schools, workplaces, or other institutions where relevant;
4. understand your goals, needs, risks, preferences, attendance, progress, and outcomes;
5. communicate with you about bookings, follow-ups, reminders, payments, feedback, health education, programs, and services;
6. improve the quality, safety, design, and effectiveness of our programs;
7. conduct internal analysis, research, monitoring, reporting, and service evaluation;
8. market and sell Karavan programs, including commercial group fitness and workplace wellness programs designed to improve health outcomes;
9. develop, test, and improve technology, including AI-supported tools that help people build and maintain healthy habits such as regular exercise, better nutrition, and long-term adherence;
10. prevent misuse, fraud, safety incidents, unauthorized access, or legal violations;
11. comply with applicable law, tax, audit, accounting, regulatory, contractual, and dispute-resolution requirements.

We may use all categories of data we collect to help improve health outcomes, improve Karavan's services, and develop better public health, exercise, nutrition, adherence, and AI-supported programs. Where practical, we will use anonymized, aggregated, or de-identified data for analysis, research, product development, and reporting.

3. Consent and lawful use

By using our services, submitting information to us, signing up for a program, completing an assessment, or asking us to coordinate with a clinical or diagnostic partner, you agree that we may collect and use your information for the purposes described in this Policy.

For sensitive health information, diagnostic data, research participation, testimonials, photographs, recordings, or optional marketing where consent is required, we may ask for specific consent.

You may withdraw consent for optional processing at any time. This will not affect lawful processing already completed, and it may not affect information we must keep for legal, safety, accounting, or legitimate operational reasons.

4. Sharing information

We do not sell your personal information.

We may share your information only where reasonably necessary with:

1. Karavan staff, specialists, managers, and authorized personnel;
2. diagnostic laboratories, doctors, clinical partners, nutritionists, physiotherapists, trainers, or other health and wellness professionals involved in your services;
3. payment processors, banks, accountants, auditors, lawyers, insurers, or professional advisers;
4. corporate, school, workplace, institutional, or program partners, but only to the extent relevant and appropriate for the program;
5. technology providers, cloud hosting providers, CRM systems, analytics tools, communication platforms, and other service providers who support our operations;
6. regulators, courts, law enforcement, government bodies, or other authorities where required by law;
7. another person or organization where you have authorized us to share the information.

Where we use third-party service providers, we require them to protect personal information and use it only for the purpose for which it was shared.

5. Marketing and communications

We may contact you about Karavan services, programs, events, assessments, offers, educational material, and health-related content.

You may opt out of promotional messages at any time. We may still send service-related messages, including appointment reminders, payment notices, safety updates, follow-ups, or important administrative communications.

6. AI and automated tools

Karavan may use data to develop and improve AI-supported systems that encourage healthy habits, improve adherence, personalize nudges, identify drop-off risks, and improve program quality.

We will not use AI as a substitute for licensed clinical judgment. AI-supported tools are intended to support wellness, behavior change, service quality, and program improvement. Where a matter requires licensed clinical advice, diagnosis, or treatment, you should consult an appropriately licensed professional.

7. Security

We use reasonable technical and organizational safeguards to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These may include access controls, staff confidentiality obligations, secure systems, restricted permissions, backups, authentication, and internal data-handling procedures.

No system is completely risk-free. If we become aware of a material data-security incident affecting your information, we will take reasonable steps to investigate, contain, and respond to it, including notifying affected persons or relevant authorities where appropriate or legally required.

8. Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, safety, health outcome tracking, legal compliance, accounting, reporting, dispute resolution, research, AI development, and program improvement. Where information is anonymized or aggregated so that it no longer reasonably identifies you, we may keep and use it for longer.

9. Your rights

Subject to applicable law and reasonable verification, you may ask us to:

1. confirm whether we hold your personal information;
2. provide access to your personal information;
3. correct inaccurate or incomplete information;
4. delete information where it is no longer needed and we are not legally or operationally required to keep it;
5. withdraw consent for optional uses;
6. stop sending you promotional communications.

We may refuse, limit, or delay a request where necessary for legal, safety, accounting, regulatory, dispute-resolution, or legitimate operational reasons.

10. Children

If we collect information about a child, we will normally require consent from a parent or legal guardian unless the law permits otherwise or urgent safety concerns require action. Parents or guardians should only provide a child's information if they have authority to do so.

11. Cross-border storage and processing

Some of our technology providers, software systems, or cloud services may store or process information outside Pakistan. Where this occurs, we will take reasonable steps to ensure appropriate safeguards are in place.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the effective date.

13. Contact us

For privacy questions, requests, corrections, or complaints, email info@karavan.com.pk. We will respond to your communication within 2 business days.