1. Information we collect
We collect information you provide directly to us when you request a treatment plan, book a consultation, create an account, or communicate with our care team.
- Identity and contact details — name, email address, phone number, country of residence, and passport details when required for visa assistance.
- Medical information — reports, scans, diagnoses and treatment history that you share with us so specialists can assess your case.
- Payment information — transaction details processed through our payment partners. We never store your full card details on our systems.
- Technical data — IP address, browser type, device information and cookies used to operate and secure the website.
2. How we use your information
We use your information solely to deliver and improve our services. Specifically, we use it to:
- Share your medical reports with relevant specialists and partner hospitals to prepare treatment opinions and quotes.
- Arrange the practical elements of your journey — visa invitation letters, appointments, accommodation and transfers.
- Communicate with you about your enquiry, treatment plan, bookings and payments.
- Meet our legal, regulatory and accounting obligations.
- Improve our website and services, using aggregated, de-identified data wherever possible.
3. How we protect medical data
Medical records are shared only with the hospitals and specialists directly involved in assessing or delivering your care, and only to the extent needed for that purpose. Access within our team is limited to the care staff assigned to your case.
All data is transmitted over encrypted connections and stored with access controls and audit logging. Documents are retained only as long as needed to provide our services and meet legal requirements, after which they are securely deleted upon your request.
6. Your rights
Wherever you live, we extend the same core rights over your data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — ask us to delete your data, subject to legal retention requirements.
- Withdrawal — withdraw consent for future processing at any time, without affecting your ongoing treatment arrangements unless you ask us to stop those too.
7. Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
Questions about your data?
Write to our privacy team at foreignhealthlab@gmail.com or message your care manager. We respond to all privacy requests within 7 working days.
