Privacy Policy

1. Overview

M/s. MediOasis (“we”, “us”, “our”) provides medical travel and treatment facilitation services for individuals seeking care in India and, in some cases, other countries.

 

We respect the privacy of everyone who visits our website or works with us. This policy explains how we collect, use, store, and share personal data when you:

Visit our website

Submit an enquiry or request a case review

Share medical records or health information

Communicate with us by email, phone, WhatsApp, forms, or other digital channels

 

This policy covers data collected online and through digital communication channels. It does not apply to offline collection unless stated otherwise.

 

We handle personal data in line with applicable laws, including:

Section 43A of the Information Technology Act, 2000 (India)

Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011

The EU General Data Protection Regulation (GDPR), where applicable

 

2. Definitions

“Personal Data” means information that identifies or can reasonably be linked to an individual, such as name, contact details, IP address, or health information.

 

“Sensitive Personal Data” includes medical records, diagnostic reports, treatment history, and other health-related information.

 

“Processing” refers to any action taken on personal data, including collection, storage, use, sharing, disclosure, or deletion.

 

“Lawful Grounds” means the legal basis for processing personal data under applicable law, such as consent, contractual need, legitimate interests, or legal obligation.

 

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following:

 

Identity and contact details

Name

Email address

Phone number

Country of residence

 

Medical and health information

Medical reports and diagnostic records

Health history and treatment details

Scans, images, pathology reports, or lab results

Treatment preferences

 

Communication records

Emails and messages

WhatsApp chats

Call records or recordings, where permitted

Form submissions

 

Technical data

IP address

Browser and device details

Referral source

Pages visited and time spent on the site

 

4. Cookies and tracking

We use cookies and similar tools to improve site function, understand usage, and improve the experience. You can block cookies through your browser settings, though parts of the site may not work as intended.

 

5. How we use personal data

We use personal data to:

Review medical enquiries and cases

Coordinate discussions with hospitals and medical specialists

Support treatment planning and facilitation

Respond to questions and requests

Improve our website and services

Meet legal and regulatory requirements

Prevent misuse or fraud

 

We do not sell personal data. Medical information is not used for advertising or profiling.

 

6. Legal basis for processing

We process personal data based on one or more of the following:

Your consent, when you submit enquiries or medical information

Contractual need, to provide facilitation services

Legitimate business interests, such as service improvement and communication

Legal obligations under applicable law

 

7. Consent for medical data

When you share medical records or health information with MediOasis, you:

Give explicit consent for us to process sensitive personal data

Confirm that this data is needed to review your case and support care planning

Allow us to share relevant information with hospitals and medical specialists only for evaluation and treatment coordination

 

You may withdraw consent at any time. If you do, we may no longer be able to continue our services.

 

8. WhatsApp, calls, and remote communication

If you communicate with us by WhatsApp, phone, email, or video tools, we may retain messages, call logs, or recordings. These may include sensitive information and are used only for care coordination, records, and service improvement. Third-party platforms operate under their own privacy policies.

 

9. Sharing personal data

We share personal data only when necessary:

With hospitals and medical specialists for case review and treatment planning

With service providers that support our systems and communications

When required by law or legal process

To protect our rights or prevent misuse

 

All service providers are required to protect confidentiality and data security.

 

10. Hospitals and specialists

When MediOasis shares data with hospitals or medical professionals, it is only to obtain opinions, review treatment options, or plan care. These parties act as independent data controllers and follow their own privacy practices.

 

11. Data security

We use reasonable technical and organizational measures to protect personal data. No online system is completely secure, and we cannot guarantee absolute protection.

 

12. International data transfers

MediOasis operates from India and supports patients from multiple countries. By sharing data with us, you agree to its transfer and processing in India and other locations where our partners or service providers operate, subject to appropriate safeguards.

 

13. Data retention

We keep personal data only as long as needed for the purposes described here, unless a longer period is required by law or you request deletion.

 

14. Your rights

Depending on applicable law, you may have the right to:

Access your personal data

Correct inaccurate data

Request deletion

Withdraw consent

Limit or object to processing

Request a copy of your data in a portable format

 

You can exercise these rights by contacting us.

 

15. EU-specific rights

If you are in the EU or EEA, you may also:

File a complaint with a data protection authority

Object to processing based on legitimate interests

Request restriction or erasure where permitted

Request data portability where applicable

 

16. Third-party sites

Our website may link to external sites. We are not responsible for their privacy practices.

 

17. Policy updates

We may revise this policy from time to time. Updates will be posted on our website.

 

18. Contact

For privacy questions or data requests, contact MediOasis.