Privacy Policy

EOS Business Automation Systems (EOSBAS) is operated by Enterprise Operational Systems (SMC-Private) Limited, based in Islamabad, Pakistan. EOSBAS is part of the broader Enterprise Operational Systems (EOS) organization. Questions about this policy may be sent to admin@eosbas.com.

This policy covers information EOSBAS handles for its own website, enquiries, communications and business operations. It also explains, at a general level, how EOSBAS may process information within automation workflows operated for clients.

Those are different roles: for EOSBAS’s own business enquiries, EOSBAS determines the relevant purposes. In a client-operated workflow, the client ordinarily determines the purposes and rules for its customer or patient information, while EOSBAS may process that information on the client’s instructions under the applicable agreement.

Depending on the interaction, information may include names, business or clinic names, work email addresses, country, website, preferred contact method, phone number if supplied, enquiry categories, workflow descriptions, correspondence, appointment preferences, business records, and technical or usage information. Client workflows may contain other information configured and supplied by the client. Please share only what is needed for the purpose.

We may receive information when you contact us by email, WhatsApp or another channel, send a demo enquiry, speak with our team, or interact with a website or client workflow. We may also receive relevant information from a client, connected system or service provider where appropriate to the engagement.

We may use information to respond to enquiries, arrange discussions, assess and deliver agreed services, design and operate workflows, maintain records and security, troubleshoot issues, comply with legal obligations, and improve our operations. We do not sell personal data to advertisers.

The Book a Demo form prepares an email draft addressed to contact@eosbas.com. Nothing is sent to EOSBAS until you send that draft from your email application. We use information we receive to understand your request and reply. Do not submit medical records, clinical information or unnecessary sensitive patient data through general EOSBAS forms.

Correspondence may be held in email, messaging and business systems used to manage the conversation and next steps. We may contact you through the method you request or a method reasonably related to your enquiry, subject to applicable preferences and law.

If you message EOSBAS through WhatsApp, we may receive your phone number, message content, attachments you choose to send and related conversation information. WhatsApp and Meta also process information through their own infrastructure under applicable terms and policies. Avoid sending medical records or other unnecessary sensitive information to the EOSBAS business contact.

Where a workflow uses CRM or operational tools, information may include contact details, service interest, enquiry source, conversation status, administrative qualification, summaries, assigned owner and next action. The systems, fields, access and retention depend on the particular EOSBAS or client configuration.

Appointment coordination may use requested times, availability, confirmations, reminders and staff assignments. Availability and booking functions depend on the connected scheduling system and the applicable approval rules. EOSBAS does not make clinical decisions through administrative scheduling.

When you visit the website, hosting and security infrastructure may handle information such as IP address, device and browser details, requested pages, timestamps and error or diagnostic events. Where enabled, website analytics may help us understand aggregate usage and improve the site.

Configured workflows may use AI-assisted tools to classify enquiries, summarize conversations, identify operational context, route information and suggest or determine approved next actions within the workflow’s rules. These tools may make errors or miss context. We design appropriate review, escalation and human boundaries for the use case; AI output should not be treated as medical advice, diagnosis or an autonomous clinical decision.

Staff may review, correct or act on workflow information when human attention is needed. Clinical judgment, treatment decisions and direct patient care remain with qualified people and the client’s clinical team. We do not represent automation as a replacement for that responsibility.

Where a law requires a legal basis, the applicable basis may include taking steps at your request before a contract, performing a contract, meeting a legal obligation, legitimate interests in operating and securing the business, or consent where required. The basis depends on the particular purpose and jurisdiction. For client-controlled data, the client is responsible for determining its applicable basis and notices.

Information may be handled by providers that support hosting, email, messaging, CRM, calendar, automation, AI-assisted processing, security and analytics, depending on the systems in use. A client workflow may connect to the client’s chosen providers. Their independent processing is subject to their own terms and privacy notices, and integrations depend on available permissions, APIs and scope.

EOSBAS is based in Pakistan, but information may be accessed or processed in other countries where we, a client or service provider operate. Applicable safeguards and transfer requirements depend on the engagement, destination and relevant law. We do not represent that all information is stored in Pakistan.

We retain information for as long as reasonably needed for the stated purposes, applicable contracts, security, records and legal obligations. Periods vary with the type of information and context. Data processed on a client’s behalf is handled according to the client’s instructions and relevant agreements, subject to applicable retention requirements.

We use proportionate administrative and technical measures appropriate to the information and systems involved, including access controls where applicable. No transmission, storage system or security measure can be guaranteed absolutely secure. If you believe information has been sent to us in error or exposed, contact admin@eosbas.com.

We may send relevant business communications where permitted. You may ask us to stop promotional messages by replying to the message or emailing admin@eosbas.com. Operational replies to an active request may still be needed. Client-directed marketing in a client workflow is governed by the client’s instructions and applicable requirements.

Website hosting and any enabled analytics or embedded services may use browser storage or similar technologies where needed to operate, secure or measure the site. Where analytics are enabled, they may help us understand aggregate website usage and improve the site. The tools in use may change; where applicable law requires a notice or consent for a particular technology, we will provide it.

When EOSBAS processes customer, patient or employee information for a client-operated workflow, the client remains responsible for its notices, permissions, lawful instructions and decisions about that information. Direct privacy requests concerning such records to the relevant client where possible. EOSBAS can assist the client as appropriate under the applicable agreement; we cannot promise to independently alter records that the client or another provider controls.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent. These rights are not absolute and may be subject to verification and exceptions. Email admin@eosbas.com with enough detail to identify the relevant information. If your information belongs to a client-operated workflow, the client may need to handle your request.

The EOSBAS website and business enquiry channels are intended for business users and are not directed to children. If you believe a child has provided us personal information through our own channels, contact admin@eosbas.com so we can assess appropriate action.

To request deletion of eligible information EOSBAS controls, email admin@eosbas.com with the subject “Data Deletion Request.” We may need to verify identity and retain limited records when law or legitimate obligations require it. See the Data Deletion Instructions for the practical steps.

We may update this policy to reflect changes in our operations, systems or applicable requirements. We will post the revised text here and update the date above. Material changes may be communicated in another appropriate way when required.

Privacy and legal enquiries: admin@eosbas.com. Commercial enquiries: contact@eosbas.com.

EOSBAS is operated by Enterprise Operational Systems (SMC-Private) Limited, Islamabad, Pakistan. The broader Enterprise Operational Systems (EOS) organization is described at eospk.com.