International patient support

Confidential guidance · No obligation · Response within 24 hours

Privacy Policy

Last Updated: 15 September 2026

Effective From: 15 September 2026

Medibridge World Private Limited (“Medibridge World”, “Company”, “we”, “us” or “our”) respects your privacy
and is committed to protecting the personal information and medical information entrusted to us.

This Privacy Policy explains how Medibridge World collects, uses, processes, stores, shares and protects
personal information when you:

  • visit our website
  • submit an enquiry
  • contact us
  • request a medical consultation
  • submit medical reports
  • request treatment assistance
  • communicate with us through WhatsApp, email, telephone or other channels
  • use our medical tourism facilitation services
  • request assistance with hospitals or doctors
  • use our travel or accommodation coordination services
  • otherwise interact with us

Because our business involves medical tourism and healthcare coordination, we may receive information
relating to your health and medical condition. We treat such information with particular care and process it
only for lawful and legitimate purposes.

This Privacy Policy should be read together with our Patient Terms & Conditions, Patient Consent Form,
Website Terms of Use, and any other applicable terms communicated to you.

 

1. ABOUT MEDIBRIDGE WORLD PRIVATE LIMITED

Legal Name: Medibridge World Private Limited

 

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected through:

  • our website
  • enquiry forms
  • patient registration forms
  • online consultation requests
  • email
  • telephone
  • WhatsApp or other messaging platforms;
  • social media communications
  • offline forms
  • hospital/doctor coordination
  • medical tourism services
  • travel coordination
  • accommodation coordination
  • other channels through which you voluntarily provide information to us

This Privacy Policy applies to both Indian and international patients to the extent applicable.

 

3. IMPORTANT MEDICAL TOURISM NOTICE

Medibridge World is primarily a medical tourism facilitator and coordinator.

Unless expressly stated otherwise, Medibridge World is not the treating doctor, hospital, clinic, diagnostic
laboratory, pharmacy or other healthcare provider.

When you request treatment through us, we may share relevant information with doctors, hospitals and
healthcare providers so that they can independently evaluate your medical condition and provide their own
medical advice.

The treating healthcare provider is independently responsible for diagnosis, treatment, surgery, medication
and other clinical decisions.

 

4. INFORMATION WE MAY COLLECT

Depending upon the services requested, we may collect different categories of personal information.

4.1 Identity Information

We may collect:

  • full name
  • date of birth
  • gender where relevant
  • nationality
  • passport number
  • government identification details
  • photograph
  • signature
  • residential address
  • country of residence
  • other information reasonably required for identification

 

5. CONTACT INFORMATION

We may collect:

  • mobile number
  • WhatsApp number
  • telephone number
  • email address
  • residential address
  • emergency contact details
  • communication preferences
  • other contact information

 

6. MEDICAL AND HEALTH INFORMATION

Where necessary for medical tourism facilitation, we may collect information such as:

  • medical history
  • diagnosis
  • symptoms
  • treatment history
  • previous surgeries
  • hospitalisation history
  • medications
  • allergies
  • laboratory reports
  • blood reports
  • pathology reports
  • radiology reports
  • X-rays
  • CT scans
  • MRI scans
  • ultrasound reports
  • photographs
  • videos
  • prescriptions
  • discharge summaries
  • operative reports
  • medical opinions
  • treatment recommendations
  • medical questionnaires
  • insurance information
  • other health-related information

Because such information may be highly sensitive, we will process it only for legitimate purposes connected
with the services requested by you, subject to applicable law.

 

7. TRAVEL AND IMMIGRATION INFORMATION

For international medical tourism services, we may collect:

  • passport information
  • visa information
  • nationality
  • country of residence
  • travel dates
  • flight details
  • arrival/departure information
  • accommodation requirements
  • airport transfer requirements
  • emergency contact information
  • information required for lawful travel coordination

We do not guarantee visa approval, immigration approval, airline acceptance or entry into any country.

 

8. PAYMENT AND FINANCIAL INFORMATION

Depending on the services you use, we may process:

  • billing information
  • transaction information
  • payment status
  • invoices
  • receipts
  • bank/payment references
  • other information necessary to process or reconcile payments

Where payments are processed through third-party payment gateways, your payment information may be processed
directly by those providers under their applicable privacy policies and terms.

We generally do not require or intend to store complete card numbers, CVV numbers or other sensitive payment
authentication information unless specifically necessary and lawfully permitted.

 

9. INFORMATION COLLECTED AUTOMATICALLY

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address
  • browser type
  • device type
  • operating system
  • approximate location derived from technical information
  • language preferences
  • pages visited
  • date and time of visit
  • referring website
  • website interaction information
  • session information
  • error logs
  • other technical information

This information may be used for website security, analytics, performance, troubleshooting and improvement.

 

10. COOKIES

Our website may use cookies and similar technologies.

Cookies may be used for:

  • website functionality
  • remembering preferences
  • analytics
  • security
  • improving user experience
  • understanding website traffic
  • marketing, where applicable and legally permitted

You may be able to control cookies through your browser or device settings.

Disabling certain cookies may affect some website functionality.

Where legally required, we will obtain appropriate consent before using non-essential cookies or similar
technologies.

 

11. WHY WE COLLECT YOUR INFORMATION

We may collect and process your information for the following purposes:

 

A. Medical Facilitation To:
  • understand your enquiry
  • forward your reports to appropriate healthcare providers
  • arrange medical opinions
  • coordinate consultations
  • coordinate hospital admission
  • facilitate treatment
  • coordinate follow-up

 

B. Communication To:

  • contact you regarding your enquiry
  • provide updates
  • respond to questions
  • communicate appointment details
  • communicate treatment-related administrative information
  • send documents
  • provide customer support

 

C. Hospital and Doctor Coordination To share relevant information with:

  • doctors
  • hospitals
  • clinics
  • diagnostic centres
  • laboratories
  • pharmacies
  • healthcare professionals
  • other healthcare service providers

where necessary to facilitate the services requested by you.

 

D. Travel Assistance To coordinate:

  • flights
  • transportation
  • airport transfers
  • accommodation
  • interpreters
  • local assistance
  • other medical tourism services

 

E. Legal and Regulatory Compliance To:

  • comply with applicable laws
  • respond to lawful requests
  • maintain legally required records
  • prevent fraud
  • protect our legal rights
  • comply with regulatory requirements

 

F. Business Administration To:

  • maintain records
  • process payments
  • issue invoices
  • manage customer relationships
  • improve our services
  • conduct internal administration
  • maintain business continuity

 

G. Website Security To:

  • detect fraud
  • prevent unauthorized access
  • identify security threats
  • investigate misuse
  • protect our systems
  • maintain website security

 

H. Marketing Where permitted by applicable law and subject to any required consent, we may use contact information to
send:

  • service information
  • healthcare-related information
  • company updates
  • promotional communications
  • newsletters
  • other marketing communications

You may opt out of marketing communications at any time.

 

12. MEDICAL INFORMATION IS USED ONLY FOR LEGITIMATE PURPOSES

We will not intentionally collect medical information merely for entertainment, unnecessary profiling or unrelated commercial purposes.

Medical information may be processed where reasonably necessary for:

  • obtaining a medical opinion
  • identifying appropriate healthcare providers
  • coordinating treatment
  • communicating with healthcare providers
  • arranging medical appointments
  • coordinating hospital admission
  • facilitating treatment
  • arranging post-treatment follow-up
  • complying with legal obligations

 

13. SHARING YOUR INFORMATION

We may share information with third parties where reasonably necessary for the purposes described in this
Privacy Policy.

Such third parties may include:

 

Healthcare Providers

  • doctors
  • hospitals
  • clinics
  • laboratories
  • diagnostic centres
  • pharmacies
  • surgeons
  • specialists
  • other healthcare professionals

 

Travel and Hospitality Providers

  • airlines
  • hotels
  • transportation providers
  • ambulance providers
  • travel service providers
  • visa/documentation service providers
  • interpreters

 

Technology and Service Providers

  • hosting providers
  • cloud service providers
  • email providers
  • communication platforms
  • CRM providers
  • analytics providers
  • payment processors
  • cybersecurity providers
  • other vendors supporting our business

 

Professional Advisers where appropriate:

  • lawyers
  • accountants
  • auditors
  • consultants
  • insurers
  • other professional advisers

Government and Authorities

We may disclose information where required or permitted by applicable law, court order, regulatory
requirement or lawful government request.

 

14. SHARING MEDICAL REPORTS WITH DOCTORS AND HOSPITALS

By submitting medical reports to Medibridge World for the purpose of obtaining medical treatment, you authorize us, subject to applicable law, to share relevant medical information with healthcare providers reasonably selected for your treatment enquiry.

This may include sharing:

  • reports
  • scans
  • prescriptions
  • photographs
  • medical history
  • diagnostic information
  • other information necessary for medical evaluation

We will seek to limit information shared to what is reasonably necessary for the relevant purpose.

 

15. INTERNATIONAL DATA TRANSFERS

Because medical tourism may involve international patients and international service providers, your
information may in certain circumstances be processed or accessed outside your country of residence.

Where information is transferred across borders, we will take steps required by applicable law to ensure
appropriate safeguards are applied.

The countries or locations to which information may be transferred may depend on:

  • the healthcare provider selected
  • technology providers
  • cloud services
  • travel service providers
  • payment providers
  • other service providers

 

16. YOUR RESPONSIBILITY FOR INFORMATION YOU PROVIDE

You are responsible for ensuring that information you provide to us is:

  • accurate
  • complete
  • current
  • not misleading
  • lawfully provided

If you provide information belonging to another person, such as a family member or dependent, you confirm that you are authorized to provide such information and, where required, have obtained appropriate permission.

 

17. DATA SECURITY

We take reasonable technical and organizational measures to protect personal information from:

  • unauthorized access
  • unauthorized disclosure
  • alteration
  • misuse
  • loss
  • destruction
  • other reasonably foreseeable security risks

Security measures may include:

  • access controls
  • authentication mechanisms
  • restricted employee access
  • secure communication methods
  • data backups
  • monitoring
  • security procedures
  • other appropriate safeguards

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security of information transmitted over the internet.

 

18. EMPLOYEE AND CONTRACTOR ACCESS

Access to personal information shall be limited to personnel, contractors or service providers who reasonably
require such access to perform their functions.

Where appropriate, such persons may be subject to confidentiality obligations.

 

19. RETENTION OF PERSONAL INFORMATION

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or for such period as may be required by applicable law.

Retention periods may depend upon:

  • the type of information
  • purpose of processing
  • whether you continue to use our services
  • legal requirements
  • accounting requirements
  • dispute resolution
  • regulatory requirements
  • medical tourism documentation requirements
  • legitimate business requirements

When information is no longer required and there is no legal requirement to retain it, we may securely delete, anonymize or otherwise dispose of it.

 

20. MEDICAL RECORDS HELD BY HOSPITALS

Where medical records are created and maintained directly by a hospital, doctor or other healthcare provider, those records may be subject to the healthcare provider’s own privacy policy, record-retention practices and legal obligations.

Medibridge World does not necessarily control or maintain all medical records created by third-party healthcare providers.

Requests relating specifically to clinical records should generally be directed to the relevant doctor or hospital, while we may assist with communication where appropriate.

 

21. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites.

These may include links to:

  • hospitals
  • doctors
  • airlines
  • hotels
  • payment providers
  • social media platforms
  • government websites
  • other third-party services

We are not responsible for the privacy practices, security or content of third-party websites.

You should review their respective privacy policies before providing personal information.

 

22. THIRD-PARTY HEALTHCARE PROVIDERS

When you choose to receive treatment from a doctor or hospital, that healthcare provider may collect and process your information independently.

The healthcare provider may have its own:

  • privacy policy
  • consent forms
  • medical record policy
  • billing policy
  • patient terms
  • data-retention policy
  • security practices

You should review the relevant healthcare provider’s policies.

 

23. MARKETING COMMUNICATIONS

If you have consented to receive marketing communications, we may contact you through:

  • email
  • telephone
  • SMS
  • WhatsApp
  • other messaging services
  • other lawful communication channels

Marketing communications may include information about:

  • medical tourism services
  • healthcare providers
  • treatment options
  • company services
  • healthcare-related events
  • offers
  • other company updates

You may request that we stop sending marketing communications.

 

24. WITHDRAWAL OF CONSENT

Where processing is based on consent, you may withdraw your consent subject to applicable law.

Withdrawal of consent may not affect processing that:

  • occurred before withdrawal
  • is required by law
  • is necessary for certain legitimate uses permitted by applicable law
  • is otherwise permitted or required under applicable law

If you withdraw consent for processing that is necessary to provide a requested service, we may be unable to continue providing that service.

 

25. DATA PRINCIPAL / USER RIGHTS

Subject to applicable law, you may have rights concerning your personal data, including rights relating to:

  • information about processing
  • access to personal information
  • correction of inaccurate information
  • updating information
  • deletion/erasure where legally applicable
  • withdrawal of consent where applicable
  • grievance redressal
  • nomination/other statutory rights where applicable

The exact scope and manner of exercising these rights will depend on applicable law and the date on which the relevant legal provisions become applicable.

 

26. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy/data request, contact:

Privacy/Data Contact: ______________________________

Email: _____________________________________________

Telephone: _________________________________________

Postal Address: _____________________________________

Your request should include sufficient information for us to identify you and understand your request.

We may need to verify your identity before processing certain requests.

 

27. GRIEVANCE REDRESSAL

If you have a complaint or concern regarding our processing of your personal information, you may contact our designated grievance/privacy contact.

 

Grievance Officer / Privacy Contact

Name: ______________________________________________

Designation: _________________________________________

Email: ______________________________________________

Telephone: __________________________________________

Address: ____________________________________________

We will review and respond to legitimate complaints in accordance with applicable law and our internal procedures.

Where applicable law provides a right to approach a statutory authority or Data Protection Board, nothing in this Privacy Policy prevents you from exercising that right.

 

28. CHILDREN’S DATA

Our services may involve patients who are minors.

Where services are provided to a child or where we knowingly process a child’s personal data, we will seek to comply with applicable legal requirements concerning parental or lawful guardian consent and processing of children’s personal data.

A parent or lawful guardian may contact us regarding information relating to a minor where legally authorized to do so.

 

29. INFORMATION ABOUT FAMILY MEMBERS OR DEPENDANTS

If you provide us with information relating to:

  • spouse
  • child
  • parent
  • relative
  • caregiver
  • another person

you confirm that you are authorized to provide such information and that you have obtained any consent required by applicable law.

 

30. PHOTOGRAPHS, VIDEOS AND TESTIMONIALS

We may request photographs, videos or testimonials for legitimate purposes.

We will not intentionally use identifiable patient photographs, videos, testimonials or medical stories for promotional purposes without obtaining the consent required by applicable law.

Participation in marketing or testimonials is voluntary unless otherwise expressly agreed for a specific purpose.

 

31. SOCIAL MEDIA

If you interact with Medibridge World through social media platforms, information you provide may also be processed by the relevant social media platform.

Such processing is governed by that platform’s own terms and privacy policy.

We recommend that you avoid posting confidential medical information publicly on social media.

 

32. WHATSAPP AND MESSAGING SERVICES

We may use WhatsApp or other messaging platforms for communication with patients.

You acknowledge that:

  • messaging platforms are operated by third parties
  • electronic communications may carry security risks
  • you should avoid sending unnecessary sensitive information
  • we may retain communications as reasonably necessary for service, compliance or record-keeping purposes.

Where possible, use the Company’s designated secure channels for sensitive documents.

 

33. EMAIL COMMUNICATION

If you communicate with us by email, the content of your email and attachments may contain personal or medical information.

You should take reasonable care before sending sensitive medical information by email.

We may retain email communications where reasonably necessary for service delivery, documentation, legal compliance or dispute resolution.

 

34. DATA BREACHES AND SECURITY
INCIDENTS

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to:

  • investigate the incident
  • contain the incident
  • mitigate potential harm
  • take corrective measures
  • provide notifications where required by applicable law

 

35. FRAUD PREVENTION AND SECURITY

We may process personal information to:

  • prevent fraud
  • detect suspicious activity
  • verify identity
  • prevent unauthorized use
  • protect patients
  • protect employees
  • protect healthcare providers
  • protect Company systems and property

 

36. LEGAL DISCLOSURES

We may disclose personal information where reasonably necessary to:

  • comply with applicable law
  • comply with court orders
  • comply with regulatory directions
  • respond to lawful government requests
  • protect rights and property
  • investigate fraud
  • prevent serious harm
  • establish, exercise or defend legal claims

 

37. CORPORATE TRANSACTIONS

If Medibridge World undergoes:

  • merger
  • acquisition
  • restructuring
  • sale of business
  • investment
  • transfer of assets
  • similar corporate transaction

personal information may be transferred as part of that transaction, subject to applicable law and
appropriate safeguards.

 

38. NO SALE OF MEDICAL INFORMATION

Medibridge World does not intend to sell identifiable patient medical information as a commercial commodity.

Medical information may nevertheless be shared with healthcare providers and service providers where reasonably necessary for providing requested services or where otherwise permitted or required by law.

 

39. NO UNAUTHORIZED COMMERCIAL USE

We will not intentionally use medical information for unrelated commercial purposes without an appropriate lawful basis.

 

40. ACCURACY OF INFORMATION

We may rely upon information supplied by you.

We do not independently verify every piece of information provided by a patient.

If you identify inaccurate information held by us, you may request correction where applicable.

 

41. YOUR RESPONSIBILITY TO UPDATE INFORMATION

You should inform us if:

  • your contact details change
  • your passport changes
  • your medical information materially changes
  • your emergency contact changes
  • other information relevant to your requested services changes

 

42. LIMITATION REGARDING MEDICAL ADVICE

Information appearing on our website is provided for general informational and medical-tourism facilitation purposes.

Website content should not be treated as:

  • a diagnosis
  • a prescription
  • a medical consultation
  • a substitute for professional medical advice
  • an emergency medical service

You should consult a qualified healthcare professional for diagnosis and treatment.

In an emergency, contact an appropriate emergency medical service or healthcare provider immediately.

 

43. NO GUARANTEE OF MEDICAL OUTCOMES

The Company does not guarantee:

  • treatment success
  • surgical success
  • cure
  • recovery
  • survival
  • absence of complications
  • treatment duration
  • hospital stay duration
  • any particular clinical result

Medical decisions and outcomes remain the responsibility of the treating healthcare provider and are subject
to individual patient circumstances.

 

44. PRIVACY OF WEBSITE ENQUIRIES

If you submit an enquiry through our website, we may collect information such as:

  • name
  • phone number
  • email
  • country
  • medical requirement
  • preferred treatment
  • uploaded documents
  • other information voluntarily provided

This information is used to respond to your enquiry and, where requested, facilitate communication with relevant healthcare providers.

 

45. UPLOADED MEDICAL DOCUMENTS

If our website permits document uploads, you should upload only documents necessary for your medical enquiry.

You should not upload information belonging to another person unless you are legally authorized to do so.

We may retain uploaded documents for as long as reasonably necessary to:

  • process your enquiry
  • obtain medical opinions
  • coordinate treatment
  • comply with legal requirements
  • maintain necessary records

 

46. SECURITY OF UPLOADED DOCUMENTS

We will take reasonable measures to protect documents submitted through our website.

However, you acknowledge that internet transmission cannot be guaranteed to be completely secure.

You should not upload documents that are unrelated to your medical enquiry.

 

47. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • changes in law
  • regulatory developments
  • changes in our services
  • technology changes
  • changes in our data-processing practices
  • other operational requirements

The updated Privacy Policy will be published on our website with the revised “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

 

48. GOVERNING LAW

This Privacy Policy shall be governed by applicable laws of India, subject to any mandatory legal rights applicable to the individual.

 

49. SEVERABILITY

If any provision of this Privacy Policy is determined to be invalid or unenforceable, the remaining provisions shall continue to apply to the extent permitted by law.

 

50. CONTACT US

For questions, concerns, requests or complaints regarding this Privacy Policy or the processing of your personal information, contact:

MEDIBRIDGE WORLD PRIVATE LIMITED

 

51. PATIENT PRIVACY ACKNOWLEDGEMENT

Where our website or service process requires explicit acknowledgement, the following wording may be displayed:

“I have read and understood the Privacy Policy of Medibridge World Private Limited. I understand that Medibridge World may collect and process my personal information and, where necessary for medical tourism facilitation, my medical information. I understand that relevant information may be shared with doctors, hospitals and other service providers for the purposes described in the Privacy Policy. I understand my applicable rights and how to contact Medibridge World regarding privacy-related requests or complaints.”

Where consent is legally required, the Company should not treat silence, inactivity or a pre-ticked box as consent where applicable law requires a valid affirmative consent mechanism.

END OF PRIVACY POLICY