Introduction
At Hayyan Medical Tourism, we are committed to providing exceptional medical care while safeguarding your privacy. Based in Mashhad, Iran, Hayyan connects international patients with top-tier medical services. This Privacy Policy outlines how we collect, use, share, and protect your personal information, ensuring transparency and trust. Your privacy is our priority, and we adhere to applicable data protection laws, including principles aligned with GDPR where relevant.
Information We Collect
We collect information to provide and improve our services. The types of information we may collect include:
- Personal Identifiable Information: Name, email address, phone number, and other details provided when you contact us or request treatment services.
- Health Information: Medical history, treatment preferences, or other health-related data submitted with your consent for treatment planning.
- Technical Information: IP address, browser type, device information, and cookies to enhance website functionality and analyze usage patterns.
How We Use Your Information
We use your information to deliver high-quality services and improve user experience. Specific purposes include:
- Responding to your inquiries and coordinating treatment plans.
- Providing personalized medical tourism services, including consultations and logistics.
- Analyzing website usage to optimize performance and enhance user experience.
- Sending updates or information about our services, with your consent.
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the data we hold about you.
- Correction: Update or correct inaccurate information.
- Deletion: Request the removal of your data, subject to legal obligations.
- Objection: Opt out of certain data processing activities, such as marketing communications.
To exercise these rights, contact us at [email protected] or call +98 902 894 0862.
Data Security
We implement robust technical and organizational measures to protect your information, including:
- Encryption of sensitive data during transmission and storage.
- Regular security audits and access controls.
- Training staff on data protection best practices.
While we strive to ensure security, no system is entirely risk-free. We promptly address any potential breaches in accordance with applicable laws.
Data Storage and International Transfers
Your information is primarily stored in secure facilities in Iran. If data is transferred internationally (e.g., to healthcare partners or service providers), we ensure compliance with data protection regulations, including GDPR-equivalent safeguards where applicable. We use contracts and certifications to guarantee your data remains protected.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant updates will be communicated via our website or by email. The latest version, effective as of May 8, 2025, is always available on this page.