Privacy Policy

When you search, we process the destination and service you enter. If you choose “Use my location”, your browser asks for permission before sharing a position. We use that position only to match a destination for your requested search; you can instead enter a city manually. We do not put precise location data into analytics.

For a booking, we may process:

• the adult traveller's name, email address and mobile number;
• the selected provider, service, destination, appointment date and time;
• the quoted EUR price, booking reference and booking status;
• optional insurer name and policy or member number, when the booking form accepts them;
• your acceptance of the current Terms and Privacy Policy; and
• technical records needed to prevent duplicate orders and protect the booking flow.

Payment takes place on Stripe's hosted checkout. Health4Travel does not receive or store your full card details. We process the payment and redirect metadata needed to associate the Stripe checkout outcome with your order. A redirect alone is not treated as confirmed payment.

If you contact us, we process the information you provide so we can answer and follow up. This may include your name, email, company or organisation, role, message, booking reference and appointment date. Please do not send card details, medical records or unnecessary health information by email or through a general contact form.

If the optional Traveller Assistant is enabled and you type a question, the text and limited page context are processed to generate a reply. Do not enter names, contact details, booking references, insurance identifiers, medical records or emergency information. Quick-action answers may be provided without sending free text to an AI provider. Chat content is not stored as a transcript by the website, although service providers may keep limited security logs under their own retention controls.

Optional analytics and attribution technologies run only after the relevant consent. They help us understand pages, general device and referral categories, and privacy-safe booking funnel steps. We do not send names, email addresses, phone numbers, booking references, insurance values, medical or chat text, precise appointment details, full URLs or raw click identifiers to analytics. You can change your choice through Cookie settings.

We process personal data where necessary:

• to take requested steps and perform a booking or provide support;
• to comply with legal, accounting, tax and consumer-protection duties;
• for legitimate interests in security, fraud prevention, service reliability and legal claims, where those interests are not overridden by your rights; or
• with consent for optional analytics, attribution or other consent-based technology.

Optional insurance identifiers are used only for the booking and invoice-related purpose presented to you. Providing them does not guarantee insurer acceptance, direct billing or reimbursement.

We share data only as needed with the selected healthcare provider, payment provider, hosting and infrastructure suppliers, communications and support suppliers, consented analytics providers, and professional or public authorities where legally required. A provider may be outside the European Economic Area when you request care abroad. Where required, we use appropriate contractual and legal safeguards for international transfers. We do not sell or rent personal data.

We keep personal data only as long as needed for the relevant booking, support, security or legal purpose. Booking, payment and invoice records may be retained for statutory accounting, tax, dispute and fraud-prevention periods. Contact enquiries are retained only while needed to respond and manage follow-up. Consent records are retained to demonstrate and respect your choice. Optional analytics follow the configured vendor retention period. We use appropriate technical and organisational safeguards, but no electronic service can guarantee absolute security.

Depending on applicable law, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Some records must be retained where the law requires it. Email info@health4travel.com to exercise a right or raise a privacy concern. You may also complain to the competent data protection authority.

Necessary storage supports security, navigation and your consent choice. Optional technology is controlled through Cookie settings. Links to healthcare providers, Stripe, app stores and other external services lead to organisations with their own privacy notices. See our contact page for the safest way to ask a traveller-support question.

This policy was originally effective on 31 March 2022 and this revision is effective from 20 September 2026. We may update it when our services, suppliers or legal obligations change. A material update will be identified by a new revision date.