Privacy Policy

Medworth is a medical tourism facilitation company based in Bengaluru, India. We help international patients access quality healthcare in India by connecting them with accredited hospitals and specialist doctors.

Contact: care@medworth.in · +91 96860 81830 · Bengaluru, India

We collect the following categories of personal information:

• Identity data — your full name
• Contact data — email address, phone number
• Location data — country of residence
• Health-related data — a free-text description of your medical concern or procedure of interest, provided voluntarily by you when booking a consultation
• Appointment data — date, time, and duration of your consultation booking
• Technical data — pages visited on our website (used to personalise your consultation), approximate geographic location inferred from your IP address
• Communications — any messages you send us via the contact form or email

We do not collect payment card details, government ID numbers, full medical records, or any biometric data.

We use your personal information for the following purposes:

• To schedule and conduct your free video consultation via Zoom
• To send you a confirmation email and calendar invite for your appointment
• To respond to your enquiries and provide medical tourism guidance
• To match you with suitable hospitals and specialists in India
• To improve our website and services based on how visitors use the site
• To comply with applicable legal obligations

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are:

• Contract performance — to fulfil your consultation booking
• Legitimate interests — to improve our services and communicate with prospective patients
• Consent — for analytics cookies, where you have given explicit consent via our cookie banner
• Legal obligation — where required by applicable law

We use Zoom to conduct video consultations. When a booking is confirmed, we create a Zoom meeting on your behalf using Zoom's API. The Zoom meeting join link is stored in our database and shared with you by email.

We do not store Zoom OAuth tokens or access tokens. Zoom access tokens are obtained at the time of booking and discarded immediately after the meeting is created. Zoom's own privacy policy applies to your use of the Zoom platform during the consultation: zoom.us/privacy.

We do not sell your personal information. We may share it with:

• Partner hospitals and doctors — only with your explicit consent, to facilitate your treatment enquiry
• Zoom Video Communications — to create and host your video consultation
• GoDaddy (hosting provider) — our website and database are hosted on GoDaddy Airo infrastructure
• Google Analytics — anonymised website usage data, only if you have consented via our cookie banner
• Legal authorities — where required by law or court order

We retain appointment records (name, email, phone, country, medical concern, appointment date/time, Zoom meeting ID) for as long as necessary to provide our services and for a reasonable period thereafter for operational and legal purposes.

Contact form enquiries are retained for up to 2 years. You may request deletion of your data at any time by contacting us at care@medworth.in.

Our website uses cookies. We use Google Analytics 4 to understand how visitors use our site. Analytics cookies are only set after you give explicit consent via our cookie consent banner. You may withdraw consent at any time by clearing your browser cookies or adjusting your browser settings.

Essential cookies (required for the site to function) are set without consent as they are strictly necessary.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at care@medworth.in. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your personal information. Our website is served exclusively over HTTPS. Database access is restricted to our application server. Sensitive credentials (such as API keys) are stored in a secrets manager and never hardcoded in source code.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Medworth is based in India. If you are accessing our services from the EEA, UK, or other jurisdictions with data protection laws, please be aware that your information may be transferred to and processed in India. By using our services, you consent to this transfer.

We take steps to ensure your data receives an adequate level of protection wherever it is processed, including through our contractual arrangements with service providers.

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: