Privacy Policy

1. Introduction

Asia Medical Tourism Center ("AsiaMedHub", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, services, and medical coordination platform. By accessing or using our services, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect the following categories of information to facilitate your medical travel arrangements and provide you with the highest quality of care:

3. Types of Data Collected

Depending on the services you request, we may collect:

• Personal Identification Information: full name, date of birth, gender, nationality, passport number, and government-issued ID.
• Contact Information: email address, phone number (including WhatsApp), country of residence, and emergency contact details.
• Medical Information: detailed medical history, current medications, allergies, previous surgeries, diagnostic reports, lab results, imaging files (X-rays, MRIs, CT scans), treatment records, and insurance information.
• Travel and Logistics Information: travel preferences, number of travelers, stay duration, visa requirements, and accommodation preferences.
• Technical Data: IP address, browser type, device information, pages visited, and cookies (see our Cookie section).
• Communication Records: correspondence with our team via email, phone, chat, and contact forms.

4. How We Use Your Information

We use your personal and medical information for the following purposes: (1) to assess your medical needs and match you with appropriate healthcare providers; (2) to coordinate appointments, treatments, and hospital admissions; (3) to facilitate visa support letters and travel arrangements; (4) to communicate with you regarding your treatment plan, updates, and follow-up care; (5) to process payments and insurance claims; (6) to improve our services through analytics and quality assurance; (7) to comply with legal and regulatory obligations.

5. Data Sharing and Disclosure

We may share your information with the following parties under strict confidentiality agreements:

• Partner Hospitals and Clinics: To provide medical treatment, diagnostic services, and follow-up care at our network of accredited healthcare facilities.
• Medical Professionals: Licensed physicians, surgeons, and specialists involved in your care.
• Government Authorities: Immigration and visa offices, when required for visa issuance or legal compliance.
• Service Providers: Translation services, travel agencies, insurance companies, and payment processors acting on our behalf.

We do not sell your personal information to third parties. All data sharing is limited to what is necessary to deliver our services.

6. International Data Transfers

As a medical tourism facilitator connecting patients with healthcare providers across multiple countries, your personal and medical data may be transferred to and processed in countries outside your home jurisdiction, including Thailand, China, Malaysia, and Singapore. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and compliance with applicable data protection laws such as the Personal Data Protection Act (PDPA) of Thailand, the General Data Protection Regulation (GDPR), and China's Personal Information Protection Law (PIPL).

7. Data Security

We implement industry-standard security measures to protect your data, including: (1) 256-bit SSL/TLS encryption for all data transmissions; (2) encrypted storage of medical records and personal information; (3) role-based access controls ensuring only authorized medical staff can view your data; (4) regular security audits and vulnerability assessments; (5) secure data centers with physical access controls. While we strive to protect your information, no method of electronic storage is 100%% secure. We encourage you to take precautions when transmitting sensitive data.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Request limitation on how we use your data.
• Right to Data Portability: Request transfer of your data to another service provider in a structured format.
• Right to Withdraw Consent: Withdraw your consent at any time. Upon withdrawal, your data will be anonymized or deleted in accordance with applicable laws.
• Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

9. Data Retention

We retain your personal and medical information for as long as necessary to fulfill the purposes described in this policy, or as required by law. Medical records are retained for a minimum of 5 years following your last interaction with our services, in compliance with medical recordkeeping regulations. After the retention period, your data will be securely anonymized or deleted.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer: