Privacy Policy

Last updated: 22 October 2026

This policy explains what personal information Healing With India collects when you use this website or ask us to help you arrange treatment in India, why we need it, who sees it, how long we keep it and the rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

In short

• We only ask for what we need to reply to you and arrange your care.
• Your medical reports are seen by Stacey and by the specialists reviewing your case, and only for that purpose.
• Reports you upload are stored encrypted and are never sent as email attachments.
• We never sell your information or use it for advertising.
• This website sets no cookies unless you agree to them.
• You can ask to see, correct or delete your information at any time.

1. Who we are

Healing With India (“we”, “us”) is a medical travel facilitator. We arrange treatment at accredited hospitals in Hyderabad, India, for patients who live in other countries. We are not a hospital and we do not provide medical treatment.

We decide how and why your personal information is used, which makes us the “controller” under the GDPR and the UK GDPR, and the “Data Fiduciary” under the DPDP Act.

Healing With India, Plot No 10-38, Near Dr BR Ambedkar Open University Road, Road No 76, Jubilee Hills, Hyderabad 500033, Telangana, India.
Email: care@healingwithindia.com · Phone and WhatsApp: +91 90320 43939

2. What we collect

Information you give us

• Contact form: your name, email address, phone or WhatsApp number and your message.
• Book a call form: your name, email address, phone or WhatsApp number, the country you live in, who the treatment is for, the area of treatment, the condition or treatment you are looking into, whether you have medical reports, any reports you upload (up to 5 files), how and when you would like us to contact you, and anything else you choose to tell us.
• Messages and calls: what you tell us by WhatsApp, email or phone, including reports you send us there.
• If you go ahead with treatment: the details needed to arrange it, such as your passport details for the hospital’s visa invitation letter, travel dates, the people travelling with you, and accommodation and transport preferences.

Information about someone else

If you contact us for a family member or someone else, please make sure they know and agree, or that you are legally entitled to act for them (for example as the parent of a child), before you share their health information with us.

Information collected automatically

• Server logs: like every website, our hosting provider records technical details of each visit, such as your IP address, browser type, the pages you request and the time. These are used to run and secure the site.
• Spam protection: when you send a form, we use a scrambled (hashed) version of your IP address for 10 minutes to limit repeated submissions. It is not stored with your enquiry.
• The page you came from: we record which page of our site your form was sent from.
• Cookies: none, unless you agree to them. See our Cookie Policy.

3. Your health information

Medical reports and details of your condition are “special category” data under the GDPR and need extra care. We only collect and use them with your explicit consent, which you give by ticking the consent box on our forms or by sending us your reports. You can withdraw that consent at any time by contacting us; this does not affect anything we did with your information before you withdrew it, but it does mean we can no longer help arrange your treatment.

4. How we use your information, and why we are allowed to

We do not send marketing emails or messages unless you have asked us to. We do not make decisions about you by automated means alone, and we do not build profiles of you.

5. Who sees your information

• Stacey and the Healing With India team who handle your enquiry.
• Specialists and partner hospitals in India reviewing your case, and the hospital that treats you if you go ahead.
• People who help with your trip, only if you go ahead and only what they need: for example hotels, airport transfer drivers, interpreters and your host in Hyderabad. Visa applications are made by you to the Government of India, using the hospital’s invitation letter.
• Service providers who run things for us under contract: our website host, our email provider and, if you choose to message us there, WhatsApp (operated by Meta). They may only use your information to provide their service to us.
• Authorities, if the law requires us to share information, or to protect someone’s life or safety.

We never sell your information or share it for advertising.

6. Sending information to India and other countries

We are based in India, so if you live elsewhere your information is transferred to India. The European Commission and the UK Government have not issued an “adequacy” decision for India, which means Indian law is not formally recognised as giving the same protection as the GDPR. We transfer your information because you have asked us to arrange treatment in India and the transfer is necessary for that, and with your explicit consent (GDPR and UK GDPR Article 49(1)(a) and (b)). Where our service providers process information in other countries, we use contracts with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, where they apply.

7. How we protect your information

• Reports uploaded through our forms are encrypted when stored, kept in a private area of our server that cannot be reached from the web, and are never sent as email attachments.
• Only our team can open enquiries and reports, after logging in.
• The website uses an encrypted (HTTPS) connection.
• We share only what each person needs to do their part.

No system is completely secure. If a breach affects your information, we will tell you and the relevant authorities as the law requires.

8. How long we keep it

• Enquiries and reports: up to 24 months after our last contact with you, so we can help if you come back to us. You can ask us to delete them sooner at any time.
• If you are treated through us: the records we need for follow-up care, and for our legal, tax and accounting obligations, for as long as those laws require.
• Hospital records: the hospital that treats you keeps its own medical records under its own policy and Indian law.

9. Your rights

Wherever you live, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, including your reports;
• stop using your information, by withdrawing your consent.

If you are in the EU, EEA or UK, you also have the right to restrict how we use your information, to object to processing based on our legitimate interests, and to receive your information in a portable format. You can complain to the data protection authority in your country (in the UK, the Information Commissioner’s Office; in the EU, your national authority).

Under India’s DPDP Act, you also have the right to a summary of the information we hold and who we have shared it with, to have your grievances handled by us, to nominate someone to exercise your rights if you die or cannot act yourself, and, once you have used our grievance process, to complain to the Data Protection Board of India.

To use any of these rights, email care@healingwithindia.com or message us on WhatsApp. We may ask you to confirm your identity first. We will reply within one month. There is no charge.

10. Children

Our services are for adults. A parent or legal guardian may contact us about treatment for a child; we will only use the child’s information to help arrange their care. We do not knowingly collect information directly from anyone under 18.

11. Other websites and WhatsApp

Our pages link to other websites, such as public hospital accreditation registers, and to WhatsApp. When you follow a link, the other site’s own privacy policy applies. We do not load WhatsApp or social media code on our pages.

12. Changes to this policy

We will update this page if the way we handle information changes, and change the date at the top. If a change affects how we use information you have already given us, we will tell you directly.

13. Questions and grievances

For any question or complaint about your information, contact our privacy contact at care@healingwithindia.com, by WhatsApp on +91 90320 43939, or by post at the address in section 1. We aim to resolve grievances within one month.