Your health information deserves restraint.
We collect the minimum information needed for the stage of your enquiry and seek separate permission before sharing medical records with a hospital.
Information we collect
- Initial enquiry: name, country, contact details, preferred contact method and broad treatment area.
- Case information: medical history, reports, scans, prescriptions, identity and travel documents only when requested for an agreed purpose.
- Coordination and payment records: selected hospitals, appointments, quotations, travel preferences, consent, invoices, payment status and service communications.
- Basic technical information: hosting and security logs that may include browser, device and network information.
Why we use it
We use information to respond to an enquiry, organise a requested hospital review, coordinate accepted travel and admission services, maintain consent and security records, respond to complaints and meet applicable legal obligations. We do not sell patient data or use medical records for unrelated advertising.
Who may receive information
Medical records are shared only with hospitals or doctors authorised for the stated review, and with translators or operational service providers only where necessary. Hospitals are independent data handlers under their own policies. We disclose information to authorities only when lawfully required.
International transfer
A patient outside India asks us to transfer information to India for hospital review and coordination. We explain the intended recipient and purpose before sensitive records are shared. Different countries may apply different privacy protections.
Retention and security
We retain information only for as long as needed for the enquiry, agreed services, follow-up, disputes and legal obligations. Access is limited to people who need it for the stated purpose. No internet or email system can be guaranteed completely secure, so the public form intentionally does not request diagnoses, identity documents or medical files.
Your choices and rights
You may request access, correction or deletion, withdraw optional consent, object to an unrelated use, or ask whom records were shared with. Withdrawal does not undo processing already lawfully completed and may prevent a requested hospital review. Write to info@cureyatra.in; identity verification may be required.
Legal basis — India’s DPDP Act, 2023
CureYatra processes personal and health information as a data fiduciary under India’s Digital Personal Data Protection Act, 2023. Information is processed only with consent, for the stated purpose of hospital review and journey coordination, and consent can be withdrawn at any time by writing to info@cureyatra.in.
Form delivery and external services
The initial enquiry form is transmitted over an encrypted connection to FormSubmit, a third-party form-delivery service, so it can be forwarded to info@cureyatra.in. The public form is limited to contact details, country, contact preference, a broad treatment area and an optional non-sensitive note; do not enter diagnoses, identity documents or medical records. You may instead contact CureYatra by email or WhatsApp. FormSubmit, WhatsApp and official websites linked from this site apply their own terms and privacy practices.
Cookies and analytics
The current static website does not use advertising cookies or active visitor analytics. Its fonts, logos, treatment images and country flags are served from the CureYatra website. If analytics or marketing technology is added later, this policy and any required consent controls must be updated first.
Children and emergencies
A parent or lawful guardian must act for a child. Do not use this website for an emergency; contact local emergency services or a nearby hospital immediately.