Privacy Policy

1. Introduction

At International Support Group, your privacy is our highest priority. We understand that organizing international medical travel requires you to share highly sensitive personal and medical information. This Privacy Policy details how we collect, use, encrypt, and protect your data across our platform.

By using our website, patient portal, or medical coordination services, you consent to the data practices described in this policy.

2. Information We Collect

To effectively facilitate your medical journey and provide accurate treatment estimates, we collect several categories of information:

• Personal Identifiers: Name, email address, phone number, passport details (for visa assistance), and billing address.
• Protected Health Information (PHI): Current medical conditions, medical history, clinical reports, MRI/X-ray files, and treating physician notes submitted via our secure portal.
• Technical Data: IP addresses, browser types, and interaction data collected through essential cookies to ensure our platform functions properly.

3. How We Use Your Data

Your data is strictly utilized to facilitate your medical travel. We use it to:

• Obtain preliminary medical opinions and cost estimates from our accredited partner hospitals and doctors.
• Assist with obtaining an e-Medical Visa and coordinating your travel logistics (airport transfers, accommodation).
• Provide customer support through your dedicated Care Coordinator.
• Comply with international legal obligations and border security requirements.

4. Secure Handling of Medical Records

Any medical files uploaded via our "Get a Quote" tool or Patient Portal are immediately encrypted using 256-bit AES encryption. These files are stored on secure servers and are only accessible by:

• Your assigned Care Coordinator.
• The specific clinical advisory boards and specialist doctors at the JCI/NABH-accredited facilities reviewing your case.

5. HIPAA & GDPR Compliance

International Support Group operates in strict accordance with the Health Insurance Portability and Accountability Act (HIPAA) guidelines for handling PHI.

Furthermore, for our European users, our processes are fully compliant with the General Data Protection Regulation (GDPR). We enforce robust data minimization—meaning we only collect the exact data required to execute your medical logistics.