Privacy Policy
Last updated: [30 September 2026]
1. Who we are
This website is operated by Cyprus Medical Care, a company registered in the Republic of Cyprus, with its registered office at , Cyprus ("Cyprus Medical Care", "we", "us").
We are the data controller for the personal data described in this policy. You can contact us about privacy at info@cyprusmedicalcare.com.
Cyprus Medical Care is a patient coordination and concierge service. We are not a healthcare provider and we do not provide medical advice, diagnosis or treatment.
2. What data we collect
Data you give us:
3. Why we use your data and our legal basis
4. Your health data
Health data is a special category of personal data. We handle it with extra care:
5. Who we share your data with
We share personal data only where necessary:
6. Transfers outside the EU
Some of our service providers may process data outside the European Economic Area. When this happens, we rely on a European Commission adequacy decision or on Standard Contractual Clauses, together with any additional safeguards needed. You can ask us for details of the safeguards in place.
7. How long we keep your data
Under the GDPR and Cyprus Law 125(I)/2018 you have the right to:
You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus: www.dataprotection.gov.cy.
9. Security
We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections and limiting who can see medical information. No online transmission is completely secure, so please use the channels we recommend when sending medical documents.
10. Cookies
We use essential cookies needed for the website to work. Analytics and marketing cookies are used only if you accept them in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of the page.
11. Minors
If a request concerns a person under 18, it must be made by a parent or legal guardian, who gives consent on their behalf.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date of the last update at the top.
Last updated: [30 September 2026]
1. Who we are
This website is operated by Cyprus Medical Care, a company registered in the Republic of Cyprus, with its registered office at , Cyprus ("Cyprus Medical Care", "we", "us").
We are the data controller for the personal data described in this policy. You can contact us about privacy at info@cyprusmedicalcare.com.
Cyprus Medical Care is a patient coordination and concierge service. We are not a healthcare provider and we do not provide medical advice, diagnosis or treatment.
2. What data we collect
Data you give us:
- Contact details: name, email address, phone number, preferred messenger and language
- Request details: the type of medical service you are interested in, preferred dates, number of travellers, accommodation and transfer preferences
- Health data: medical reports, diagnostic results and information about your condition that you choose to share with us so that we can forward them to a clinic
- Identity and travel details, only where needed for a booking you ask us to help with (for example, the name on your passport and your flight details)
- Correspondence with us by email, phone or messenger
- Technical data such as IP address, browser type, device and pages visited
- Cookie and analytics data, only if you accept non-essential cookies (see section 10)
3. Why we use your data and our legal basis
- To answer your enquiry and arrange a call — steps taken at your request before entering into an agreement (GDPR Article 6(1)(b)).
- To coordinate the services you ask for — performance of our agreement with you (Article 6(1)(b)).
- To share your medical information with clinics you choose — your explicit consent (Articles 6(1)(a) and 9(2)(a)). We only process health data after you have given explicit consent, and only for this purpose.
- To keep accounting and legal records — compliance with legal obligations (Article 6(1)(c)).
- To keep the website secure and improve our service — our legitimate interests (Article 6(1)(f)), balanced against your rights.
- To use analytics and marketing cookies — your consent (Article 6(1)(a)).
4. Your health data
Health data is a special category of personal data. We handle it with extra care:
- We only collect it if you choose to send it and give explicit consent.
- We only pass it to the clinics or doctors you agree to, so that they can assess your case and prepare a proposal.
- Our coordinators do not interpret medical information or give medical opinions.
- Access is limited to the staff member coordinating your request.
- You can withdraw consent at any time by emailing info@cyprusmedicalcare.com. Withdrawal does not affect processing that took place before it.
5. Who we share your data with
We share personal data only where necessary:
- Partner clinics and doctors you choose, to assess your case and provide treatment
- Accommodation, transport and interpreter providers, only the details they need for your booking
- Service providers who help us run our business, such as website hosting ([Tilda]), email ([email provider]), messaging ([WhatsApp / Telegram]) and analytics ([Google Analytics via Google Tag Manager]). They process data on our instructions under data processing agreements.
- Professional advisers such as accountants and lawyers, under confidentiality
- Public authorities, where required by law
6. Transfers outside the EU
Some of our service providers may process data outside the European Economic Area. When this happens, we rely on a European Commission adequacy decision or on Standard Contractual Clauses, together with any additional safeguards needed. You can ask us for details of the safeguards in place.
7. How long we keep your data
- Enquiries that do not lead to coordination: up to 12 months after our last contact
- Health data: until your coordination is complete, then deleted within [3] months unless you ask us to keep it or we need it to handle a complaint
- Records of services and payments: for [6] years after the service ends, or longer where the law requires
- Analytics data: for the period stated in the cookie settings
Under the GDPR and Cyprus Law 125(I)/2018 you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to certain processing
- receive your data in a portable format
- withdraw consent at any time
You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus: www.dataprotection.gov.cy.
9. Security
We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections and limiting who can see medical information. No online transmission is completely secure, so please use the channels we recommend when sending medical documents.
10. Cookies
We use essential cookies needed for the website to work. Analytics and marketing cookies are used only if you accept them in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of the page.
11. Minors
If a request concerns a person under 18, it must be made by a parent or legal guardian, who gives consent on their behalf.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date of the last update at the top.