Privacy Policy

MedSanovia ("we", "us", or "our") operates the MedSanovia platform at medsanovia.com, a medical tourism comparison and referral service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform.

By creating an account or using our services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our platform.

Account Information: When you register, we collect your full name, email address, and password (stored as a secure hash).

Health Preferences: To help match you with suitable hospitals, we collect information you voluntarily provide about your medical condition, treatment of interest, budget, and travel preferences. We treat this information with the utmost sensitivity.

Consultation Requests: When you submit a free consultation request, we collect your name, email, phone number, country of residence, and details about your medical inquiry.

Usage Data: We automatically collect data about how you use our platform, including pages visited, searches performed, and interactions with hospital listings (IP address, browser type, device information, timestamps).

Cookies and Tracking: We use cookies and similar technologies to maintain your session, remember preferences, and analyze platform usage. See our Cookie Policy for details.

We use the information we collect to:

• Provide and personalize your MedSanovia experience
• Match you with relevant hospitals and treatment options across our network
• Forward your consultation request to our patient coordinators
• Send transactional emails (account confirmation, consultation follow-ups)
• Improve our hospital database, cost estimates, and recommendation algorithms
• Send marketing communications (only with your explicit consent; you may opt out at any time)
• Detect and prevent fraud or abuse of our platform
• Comply with applicable laws and legal obligations

We do not sell your personal information. We share your information only in the following circumstances:

Hospital Partners: If you submit a consultation request, we share the details you provide (name, email, medical inquiry) with the relevant hospital or clinic partner solely to facilitate your inquiry. We only share what is necessary.

Service Providers: We use trusted third-party providers for email delivery, cloud hosting, and analytics. These providers access your data only to perform services on our behalf and are bound by confidentiality obligations.

Legal Requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of MedSanovia, our users, or the public.

Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We implement industry-standard security measures to protect your information, including TLS encryption for data in transit, bcrypt hashing for passwords, and access controls that restrict who within our team can access personal data.

Health-related information you provide is treated with heightened care. While we take reasonable precautions, no method of transmission over the internet is 100% secure. We will notify you promptly in the event of a data breach that affects your personal information.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for direct marketing purposes
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@medsanovia.com. We will respond within 30 days.

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Consultation inquiry data is retained for up to 2 years to allow us to follow up on your inquiry and improve our service. Analytics data is retained in aggregated, anonymized form indefinitely.

MedSanovia is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it.

MedSanovia operates globally. Your information may be transferred to and processed in countries other than your country of residence, including countries that may not have the same data protection laws. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our platform. Your continued use of MedSanovia after any change constitutes your acceptance of the new policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: