PRIVACY POLICY

CureTour India Pvt. Ltd. ("CTI", "Company", "we", "us", or "our") respects your privacy and is committed to protecting the personal and medical information of everyone who visits curetoursindia.com (the "Site") or uses our patient facilitation and medical travel coordination services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and the choices available to you.

This Policy applies to information collected through the Site, by email or phone, through consultation forms, and through any other channel by which you interact with CTI in connection with the Services. By using the Site or the Services, or by submitting your information to us, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Site or provide your information to us.

We may update this Policy periodically to reflect changes in our practices or for legal or regulatory reasons. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this Policy from time to time.

1. Definitions

"Personal Data" means any information relating to an identified or identifiable individual, including your name, contact details, date of birth, passport or identification details, and payment information.

"Health Data" means information relating to your physical or mental health, including medical history, diagnoses, test results, treatment records, allergies, medication, and similar clinical information shared with us to facilitate your treatment.

"Healthcare Provider" means any hospital, clinic, doctor, laboratory, or other medical service provider in India to whom we may introduce you or with whom we may share your information for the purpose of arranging your treatment.

"Service Provider" means any third party engaged by CTI to help operate the Site or deliver the Services, such as IT hosting providers, payment processors, communication tools, travel or accommodation partners, and analytics providers.

"Cookies" means small data files placed on your device when you visit the Site, used to remember preferences and understand how the Site is used.

2. Information We Collect

2.1 Information you provide directly

When you submit an enquiry, request a consultation, or otherwise contact us, we may collect:

• Identity and contact details — name, email address, phone number, country of residence, and postal address;
• Health Data — medical history, current diagnosis, prior treatments, imaging or test reports, and other clinical information you choose to share so that we and our partner Healthcare Providers can assess your case;
• Travel-related details — passport information, travel dates, and accompanying-person details, where relevant to arranging your visit;
• Payment information — billing details necessary to process any facilitation or service fees payable to CTI (card and bank details are processed by our payment partners and are not stored on our own servers in full);
• Communications — records of your correspondence with us, including emails, call notes, and messages sent via chat or messaging applications.

2.2 Information collected automatically

When you browse the Site, our analytics or advertising partners and we may automatically collect:

• Device and usage data — IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the Site;
• Cookies and similar technologies — used for essential Site functionality, remembering your preferences, and, where you consent, for analytics and marketing purposes.

2.3 Information from other sources

We may occasionally receive information about you from Healthcare Providers, travel partners, or publicly available sources, where necessary to coordinate your care or verify details you have provided.

3. Cookies

The Site uses cookies to operate correctly, remember your preferences, and understand how visitors use the Site. Essential cookies are necessary for core functionality (such as keeping an enquiry form working) and cannot be disabled without affecting the Site's operation. Where permitted, we may also use analytics cookies to understand aggregate usage patterns and, subject to your consent, marketing cookies to measure the effectiveness of our outreach. You can control or delete cookies through your browser settings; disabling certain cookies may limit some Site features.

4. How We Use Your Information

We use the information described above for the following purposes:

• To respond to your enquiry and assess your suitability for particular treatments or Healthcare Providers;
• To share relevant Health Data with prospective Healthcare Providers strictly for the purpose of obtaining a clinical opinion, cost estimate, or treatment plan on your behalf;
• To coordinate travel, accommodation, interpretation, and aftercare arrangements connected with your treatment;
• To process payments for any fees owed to CTI and to maintain accurate financial and billing records;
• To communicate with you about your enquiry, booking, or ongoing case, including appointment reminders and follow-up check-ins;
• To send you general information, offers, or updates about our Services, where you have not opted out of such communications;
• To maintain, secure, and improve the Site and our internal processes, including troubleshooting and analytics;
• To comply with applicable legal, regulatory, tax, or accounting obligations, and to establish, exercise, or defend legal claims;
• To detect, investigate, and prevent fraud, misuse of the Site, or other unlawful activity.

We process Health Data only where necessary to arrange your treatment, and only with your knowledge that this data is being shared with prospective Healthcare Providers for that purpose. Submitting your Health Data to us is treated as your consent to this specific use; you may withdraw that consent at any time by contacting us, though this may limit our ability to continue assisting with your enquiry.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Healthcare Providers — to obtain treatment recommendations, cost estimates, and to coordinate your care, strictly limited to what is necessary for that purpose;
• With Service Providers — such as hosting providers, payment processors, communication platforms, travel agents, hotels, interpreters, and IT support vendors who process information on our behalf and under confidentiality obligations;
• With professional advisers — such as lawyers, auditors, or insurers, where necessary for their services to us;
• For legal reasons — where required to comply with a legal obligation, respond to a valid request from a public authority, or protect the rights, property, or safety of CTI, our patients, or others;
• In connection with a business transaction — such as a merger, acquisition, financing, or sale of assets, in which case your information may be transferred as part of that transaction, subject to appropriate confidentiality protections;
• With your consent — for any other purpose you have specifically agreed to.

6. International Data Transfers

As CTI coordinates treatment provided in India for patients who may be located elsewhere, your information — including Health Data — will necessarily be transferred to, and processed in, India, and may also be processed in other countries where our Service Providers operate. Data protection laws in these countries may differ from those in your home country. Where we transfer personal information internationally, we take reasonable steps to ensure it continues to be protected in a manner consistent with this Policy, including through contractual safeguards with the recipients where appropriate.

7. Data Retention

We retain your personal information, including Health Data, only for as long as reasonably necessary to fulfil the purposes described in this Policy, including to provide the Services, maintain accurate medical and financial records for continuity of care, and comply with our legal, tax, and regulatory obligations. Retention periods vary depending on the type of information and the purpose for which it was collected; for example, records connected to a completed treatment may be retained for a longer period to support any necessary follow-up care or to meet applicable record-keeping requirements. When information is no longer needed, we take reasonable steps to securely delete, anonymize, or archive it.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction, including restricted access to Health Data on a need-to-know basis and the use of secure channels for transmitting sensitive information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately using the details in Section 13.

9. Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights in relation to your personal information:

• Access — to request confirmation of what personal information we hold about you and to obtain a copy of it;
• Correction — to request that we correct inaccurate or incomplete information;
• Deletion — to request that we delete your personal information, subject to any legal or legitimate business reasons we may have for retaining it;
• Withdrawal of consent — to withdraw any consent you have given, such as consent to share Health Data with a Healthcare Provider or to receive marketing communications, without affecting the lawfulness of processing carried out before your withdrawal;
• Objection or restriction — to object to, or request that we restrict, certain processing of your information, subject to applicable law;
• Portability — to request a copy of certain personal information in a structured, commonly used format, where technically feasible.

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by applicable law.

10. Marketing Communications

With your consent, or where otherwise permitted by law, we may contact you by email, phone, SMS, or messaging applications such as WhatsApp with information about our Services, promotions, or relevant health-travel content. You may opt out of marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly. Opting out of marketing communications will not affect transactional messages relating to an active enquiry, booking, or ongoing treatment coordination.

11. Children's Privacy

The Site and Services are intended for use by adults. We do not knowingly collect personal information directly from anyone under the age of 18. Where treatment coordination is sought for a minor, this must be done by a parent or legal guardian, who is responsible for providing consent and for the accuracy of any information submitted on the minor's behalf. If we become aware that we have inadvertently collected personal information directly from a minor without appropriate parental or guardian involvement, we will take steps to delete it.

12. Third-Party Links

The Site may contain links to third-party websites, including partner hospital or Healthcare Provider websites, payment gateways, or social media platforms. This Policy does not apply to those third-party sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site before providing your information to it.