Privacy Policy

1. Introduction

MITA Medical Tourism ("MITA", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our medical tourism services.

We comply with relevant data protection laws in Vietnam and internationally. Please read this policy carefully to understand our views and practices regarding your personal data.

2. Information We Collect

We may collect and process the following types of personal information:

• Identity Information: Full name, date of birth, gender, nationality, passport number, and government-issued identification. • Contact Information: Email address, phone number, WhatsApp/Zalo ID, and residential address. • Medical Information: Medical history, current health conditions, treatment records, medications, allergies, and insurance details. • Travel Information: Passport details, visa information, travel itinerary, accommodation preferences, and emergency contact information. • Technical Information: IP address, browser type, device information, cookies, and usage data when you visit our website. • Communication Records: Records of your correspondence with us, including emails, chat messages, and phone call recordings for quality assurance.

3. How We Collect Your Information

We collect information through the following methods:

• Direct Interactions: When you fill out forms on our website, correspond with us via email or phone, create an account, subscribe to our newsletter, or request services. • Automated Technologies: As you interact with our website, we automatically collect technical data about your equipment, browsing actions, and patterns using cookies and similar technologies. • Third Parties: We may receive information about you from third parties including our partner hospitals, clinics, travel agents, insurance providers, and payment processors. • Public Sources: We may collect publicly available information about you from social media platforms or professional networks, with your consent where required by law.

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To arrange medical appointments, coordinate travel logistics, provide interpretation services, and manage your treatment journey. • Communication: To respond to your inquiries, send appointment reminders, provide treatment updates, and share important information about your medical trip. • Improvement: To improve our website, services, and customer experience through analysis and feedback. • Legal Compliance: To comply with legal obligations, including visa support documentation, insurance claims, and regulatory requirements. • Marketing: With your consent, to send you information about promotions, new services, and health-related content that may interest you. You can opt out at any time. • Security: To protect our website, prevent fraud, and ensure the safety of our patients and staff.

5. Data Sharing and Disclosure

We may share your personal information with the following parties:

• Healthcare Providers: Partner hospitals, clinics, and doctors involved in your treatment, with your explicit consent. • Service Partners: Travel agencies, hotels, transportation providers, and interpretation services necessary for your medical trip. • Insurance Companies: Your insurance provider for the purpose of claims processing and coverage verification. • Legal Authorities: When required by law, court order, or governmental regulation. • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest • Secure server infrastructure with firewalls and access controls • Regular security audits and vulnerability assessments • Staff training on data protection and privacy practices • Strict access controls based on the principle of least privilege

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you. • Right to Rectification: Request correction of inaccurate or incomplete data. • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements. • Right to Restrict Processing: Request restriction of processing your data in certain circumstances. • Right to Data Portability: Request transfer of your data to another service provider. • Right to Object: Object to processing of your data for direct marketing purposes. • Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the information provided in the Contact section.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: minhtan@mitaholdings.vn • WhatsApp/Zalo: +84 398 626 600 • Address: MITA Medical Tourism, 12M Cat Linh, O Cho Dua, Hanoi, Vietnam • Website: mitahealth.com.vn

We will respond to your inquiry within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.