Privacy Policy

MH Surgical is responsible for the personal information described in this policy. You can contact MH Surgical about this notice or how your information is handled. Our current support email, telephone number and business address are published on that page.

We collect information you provide when you create or use a customer account, place an order, request an invoice, contact us, submit a refund or warranty request, or leave a product review.

• Identity and contact details, including your name, email address and telephone number.
• Delivery and billing details needed to manage an order.
• Order, product, invoice, payment-status and customer-service records.
• Refund or warranty details and any evidence you choose to provide.
• Public review content and private review contact details. Your reviewer email is never displayed publicly.
• Necessary technical and security information such as session identifiers, limited device/browser information and privacy-conscious abuse-prevention signals.

We use personal information only where we have a lawful reason. Depending on the activity, this may be necessary to process your request or order, comply with an obligation, protect our legitimate interests in operating and securing MH Surgical, or act on your consent.

• To confirm, deliver and support your order.
• To create and secure the customer account linked to guest or signed-in orders.
• To issue invoices and maintain appropriate business and transaction records.
• To process enquiries, refunds, warranty claims and related communications.
• To moderate product reviews, prevent abuse and publish only approved public review content.
• To protect the website, investigate errors or misuse and maintain reliable services.

We do not sell personal information. Where necessary, information may be shared with service providers that support hosting, communications, secure document storage, delivery, customer support or professional advice; with payment or banking providers where an offline payment or refund requires it; and with regulators, courts or law-enforcement bodies where required by law.

Service providers may use information only for the agreed service and must protect it appropriately. Where a provider processes information outside Pakistan, we require appropriate contractual and security safeguards and handle the transfer in accordance with applicable law.

MH Surgical uses necessary cookies or similar storage to keep the website secure, maintain your session and guest cart, remember essential choices and support sign-in. Optional analytics remains disabled unless configured by MH Surgical and accepted through the website consent control. Analytics events exclude contact details, delivery addresses, order notes, payment details and raw search terms.

We retain information only for as long as needed for the purpose collected, including fulfilling orders and warranties, handling disputes or requests, meeting tax, accounting and other legal duties, preventing fraud and protecting legal rights. Retention is determined by the record type, applicable limitation or legal period, active service relationship and whether a dispute or investigation is open. When information is no longer required, it is securely deleted or anonymised, subject to controlled backup expiry.

Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or object to use of your information, and to receive portable information. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

To exercise a right, contact MH Surgical. We may need to verify your identity before disclosing or changing protected information.

Please contact us first so we can investigate and try to resolve your concern. You may also contact the competent authority or seek another remedy available under applicable Pakistani law.

We apply role-based access, customer-ownership checks, private storage for protected evidence and documents, validation, rate limiting, audit records and other technical and organisational safeguards appropriate to the information. No internet service can guarantee absolute security, but suspected incidents are investigated and handled under our operational procedures.

We review this notice when our services, providers or legal obligations change. Material changes will be brought to your attention where required, and the latest version will remain available on this page.