Effective Date: 1st April, 2025
Last Updated: 18th October, 2025
At Inaya Health Care (“Inaya,” “we,” “our,” or “us”), we are committed to protecting your privacy and safeguarding your personal and medical information.
This Privacy Policy explains how we collect, use, disclose, and protect the information of individuals (“you” or “patients”) who use our medical tourism facilitation services and website.
By using our services, you agree to the terms of this Privacy Policy.
- Information We Collect
We may collect the following types of information from you:
- Personal Information
- Full name
- Date of birth, gender, and nationality
- Contact details (email, phone number, address)
- Passport and visa information
- Travel and accommodation preferences
- Medical Information
- Medical history, reports, prescriptions, and diagnostic results
- Information about your current condition and requested treatment
- Details shared by your treating physicians or partner hospitals
- Technical Information
- IP address, browser type, and device information
- Website usage data collected through cookies and analytics tools
- How We Use Your Information
We use the collected information for legitimate business and service purposes, including:
- Arranging medical consultations and treatment with partner hospitals
- Coordinating travel, accommodation, and concierge services
- Sharing necessary information with doctors for medical evaluation
- Communicating with you regarding your treatment, itinerary, and updates
- Processing payments, invoices, and receipts
- Complying with legal and regulatory obligations
- Improving our services and website functionality
We will never sell or rent your personal or medical data to any third party.
- Sharing of Information
We may share your data only when necessary, and only with:
- Partner hospitals and clinics for your medical treatment
- Licensed healthcare professionals for consultation or diagnosis
- Travel and hospitality partners (airlines, hotels, transport providers)
- Insurance companies or government authorities, if required
- Third-party service providers who assist us in operations, under confidentiality agreements
All third parties are required to maintain data protection standards consistent with this policy.
- Data Security
We use appropriate technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
This includes:
- Secure data storage systems
- Encrypted communication channels (SSL)
- Restricted access to personal and medical data
- Regular system audits and compliance checks
However, please note that no online system is completely secure, and we cannot guarantee absolute security of transmitted data.
- International Data Transfer
Since Inaya Health Care serves patients globally, your information may be transferred and stored across different countries.
We ensure that such transfers comply with applicable data protection laws and that adequate safeguards are in place to protect your information.
- Data Retention
We retain your information only for as long as necessary to:
- Complete your medical tourism arrangements
- Comply with legal and regulatory requirements
- Maintain service and billing records
After this period, data will be securely deleted or anonymized.
- Your Rights
Depending on your location and applicable laws (including GDPR), you may have the following rights:
- Access the personal information we hold about you
- Request correction or deletion of your data
- Withdraw consent to data processing
- Request data portability
- Lodge a complaint with a relevant data protection authority
To exercise any of these rights, please contact us at [Insert Email Address].
- Cookies and Website Tracking
Our website may use cookies and analytics tools to improve user experience, track performance, and analyze usage trends.
You can control or disable cookies through your browser settings, though some website features may not function properly as a result.
- Third-Party Links
Our website may contain links to external sites (such as partner hospitals or travel agencies).
We are not responsible for the privacy practices or content of these third-party websites.
- Children’s Privacy
Our services are not directed toward minors under 18 years of age.
We do not knowingly collect or store personal data from children without parental consent.
- Updates to This Policy
We may revise this Privacy Policy periodically to reflect changes in our practices or applicable laws.
Any updates will be posted on our website with a new “Last Updated” date.
Your continued use of our services after such changes constitutes acceptance of the revised policy.