1. Introduction
MedTours respects your privacy and is committed to handling your personal information with care and transparency. This Privacy Policy explains how Medical Tourism Development Limited, operating through the MedTours website, collects, uses, stores, and protects the information you provide when you visit https://www.medtour.lol or use any of the services we offer. We encourage you to read this policy carefully so that you understand our practices and the choices available to you.
The website is designed and maintained by MedTours as a computer systems design and integration studio. We believe that trust is the foundation of every good relationship, and we have written this policy to describe our data practices in plain, clear language. If anything in this policy is unclear, you are welcome to reach out to us using the contact details provided at the end of this document.
2. Who We Are
For the purposes of this policy, the data controller is Medical Tourism Development Limited. Our registered address is Rm 12 21/F WAYSON COML BLDG, 28 CONNAUGHT RD W, Sheung Wan, Hong Kong (HK). When this policy refers to the Company, we, us, or our, it refers to Medical Tourism Development Limited and the MedTours brand under which we operate.
MedTours provides computer systems design and related services, including systems integration, cloud architecture, data engineering, and security hardening. We work with businesses that need their technology to operate as a single, reliable system, and in doing so we may process limited amounts of personal information about our clients, their employees, and the visitors to our website.
3. Scope of This Policy
This policy applies to personal information we collect through the MedTours website, through email and telephone communications with our team, and through the delivery of our professional services. It also applies to information collected through any forms you submit, any messages you send to us, and any newsletter or marketing communications you choose to receive.
This policy does not apply to information collected by third party websites that may be linked from our site, nor does it apply to information that our clients collect about their own customers. Where we act as a processor on behalf of a client, that client remains the controller of the data, and the terms of our separate service agreement will govern how that data is handled.
4. Information We Collect
We collect several categories of information to operate our website and deliver our services. The information we collect falls into the following broad groups.
Information You Provide Directly
When you contact us, complete a form, request a consultation, or communicate with our team, you may provide us with your name, email address, telephone number, company name, job title, and the contents of your message. You may also provide us with information about your technical environment when you ask us to review your systems.
Information We Collect Automatically
When you visit our website, we may automatically collect certain technical information, including your internet protocol address, browser type, device type, operating system, referring pages, pages viewed, and the dates and times of your visits. This information helps us understand how our site is used and how we can improve it.
Information From Third Parties
We may receive information about you from publicly available sources, from business partners, or from service providers who assist us in operating our website and delivering our services.
Sensitive Information
We generally do not request sensitive personal information, such as health data, government identifiers, or biometric data, through our website. In the rare case where a project requires us to handle sensitive information, we will only do so under a separate agreement, with appropriate safeguards in place, and for the specific purpose you have authorised. If you believe you have shared sensitive information that is no longer needed, you may ask us to remove it.
5. How We Collect Information
We collect personal information through a variety of methods, all of which are intended to be transparent and proportionate. The primary ways we collect information are described below.
First, we collect information when you interact with us directly, such as when you send an email to info@medtour.lol, call our office, or complete the contact form on our website. Second, we collect information automatically through cookies and similar technologies when you browse our site. Third, we may collect information in the course of providing services, such as when we access a technical environment you have asked us to review or integrate.
We do not purchase personal information lists for marketing purposes, and we do not engage in practices designed to obtain information in a deceptive manner. Whenever we collect information, we aim to make the purpose of the collection clear at the point where the information is gathered.
6. How We Use Information
We use the information we collect for a limited and clearly defined set of purposes. These purposes include responding to your enquiries, providing the services you have requested, and improving the quality of our website and our work.
Specifically, we use personal information to respond to messages and requests you send us, to prepare proposals and quotations, to perform the systems design and integration work you have engaged us to deliver, to send you information you have asked to receive, to maintain the security of our systems, and to meet our legal and regulatory obligations. We may also use aggregated and anonymised information for analytical purposes.
We do not sell your personal information, and we do not use your personal information to make automated decisions that would have a legal or similarly significant effect on you.
We also use contact information to keep you informed about updates to our services, changes to our policies, and matters relating to an ongoing engagement. You may opt out of non essential communications at any time by following the instructions in the message or by contacting us directly.
7. Legal Bases for Processing
Where applicable law requires a legal basis for processing personal information, we rely on the following grounds. We process information where it is necessary for the performance of a contract with you, where it is necessary to comply with a legal obligation, where it is necessary for our legitimate interests and those interests are not overridden by your rights, or where you have given your consent for a specific purpose.
Our legitimate interests include operating and improving our website, responding to enquiries, protecting the security of our systems, and understanding how visitors use our site. When we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
10. Data Retention
We retain personal information only for as long as is necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the nature of the information and the purpose for which it was collected.
For example, we retain business correspondence for a reasonable period to maintain an accurate record of our dealings with you. We retain information necessary to meet our accounting, tax, and legal obligations for the periods required by applicable law. When information is no longer needed, we take reasonable steps to delete or anonymise it securely.
11. Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption in transit, secure hosting arrangements, and regular review of our security practices.
No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. However, we work continuously to apply industry standard safeguards and to respond promptly to any suspected security incident. If a breach occurs, we will notify affected individuals and relevant authorities where required by law.
Our security program is reviewed on a regular basis and updated as our services and the threat landscape evolve. We train our staff on data protection obligations and restrict access to personal information to those who need it to perform their duties.
12. International Data Transfers
Our operations are based in Hong Kong, but the service providers we use may process information in other jurisdictions. Where we transfer personal information across borders, we take steps to ensure that the information receives an adequate level of protection consistent with this policy and with applicable law.
We rely on recognised safeguards, such as standard contractual clauses or other lawful transfer mechanisms, where required. If you would like more information about the safeguards we apply to a particular transfer, please contact us using the details at the end of this policy.
13. Your Privacy Rights
Depending on where you live and the laws that apply to you, you may have certain rights in relation to your personal information. These rights may include the right to access the information we hold about you, the right to request correction of inaccurate information, the right to request deletion of your information, the right to restrict or object to certain processing, and the right to data portability.
You may also have the right to withdraw consent where we rely on consent to process your information, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframes required by law.
Where we act as a processor on behalf of a client, we will assist that client in responding to requests from individuals where required. We may need to verify your identity before fulfilling certain requests in order to protect your information from unauthorised disclosure.
14. Privacy for Children
Our website and services are intended for business users and are not directed to children under the age of sixteen. We do not knowingly collect personal information from children. If you are a parent or guardian and you believe that your child has provided personal information to us, please contact us immediately and we will take steps to delete that information.
If we become aware that we have collected personal information from a child without appropriate parental consent, we will delete it as quickly as reasonably possible and take any additional steps required by applicable law.
15. Third Party Links and Services
Our website may contain links to third party websites, applications, or services that are not operated by us. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third party site or service before you provide information to it.
In the course of our work, we may also integrate or connect third party services on behalf of our clients. Where we do so, the processing of information by those services is governed by the terms and policies of the respective providers, in addition to our own agreements.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our technology, or the law. When we make changes, we will revise the last updated date at the top of this page. Where changes are material, we will take additional steps to bring them to your attention, such as by posting a notice on our website.
We encourage you to review this policy periodically so that you remain informed about how we protect your information. Your continued use of our website after any changes to this policy will constitute your acceptance of those changes to the extent permitted by law.
17. Marketing Communications
Where you have agreed to receive marketing communications from us, we may send you occasional updates about our services, industry insights, and information we believe may be relevant to you. You are never required to receive these communications, and you may unsubscribe at any time.
We honour every opt out request promptly. Even if you opt out of marketing messages, we may still contact you in connection with an active engagement, for transactional or administrative purposes, or where we are required to do so by law.
18. Analytics and Aggregated Data
We may create aggregated, de identified, or anonymised data from the information we collect. This data does not identify you personally and is used to understand trends, improve our services, and report on performance. Because this data cannot reasonably be linked back to an individual, this policy does not restrict our use of it.
We also use basic analytics to measure how visitors reach and use our website. These analytics are configured to minimise the collection of identifying information and are used solely to make our site clearer and more useful for everyone who visits.
19. How to Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us using the details below. We are committed to resolving privacy concerns in a fair and timely manner.
Medical Tourism Development Limited
Rm 12 21/F WAYSON COML BLDG
28 CONNAUGHT RD W
Sheung Wan, Hong Kong (HK)
Email: info@medtour.lol
Phone: +1 509 401 7911