Privacy Policy

Elysium Medical Tourism Platform – FZCO

IFZA Properties, Dubai Silicon Oasis, Dubai, UAE

License Number: 44178

Licensing Authority: Dubai Integrated Economic Zones Authority (DIEZA)

1. Purpose

This Privacy Policy explains how Elysium Medical Tourism Platform – FZCO (“Elysium”, “we”, “our”, “us”) collects, processes, and protects personal data of users who visit our website and use our services.

Elysium acts solely as a facilitator, connecting patients with licensed doctors and hospitals.
We do not provide medical services or diagnoses ourselves.

2. Controller Information

Legal Entity: Elysium Medical Tourism Platform – FZCO
Address: IFZA Properties, Dubai Silicon Oasis, Dubai, UAE
License Number: 44178
Contacts:
- Privacy: info@medelysium.com
- Website: https://medelysium.com/en

3. Data Collection

Automatically collected data: IP address, device information, cookies, analytics (e.g., Cloudflare).

Data provided by users: name, surname, email, phone number, passport details, medical history, photos, test results, reports.

Data received from partners: additional medical information provided by clinics/doctors to fulfill a user request.

4. Legal Basis

Consent: By submitting personal information via our website, email, or WhatsApp, you give explicit consent to the collection and processing of your data.
Performance of Contract: Processing of medical history and documentation is necessary to provide the requested service.
Compliance with Law: GDPR (EU), HIPAA (US), and applicable Dubai data protection regulations.

5. Data Use

We process data for the following purposes:

Providing requested facilitation services.
Sharing medical data with partner doctors/hospitals to enable treatment.
Complying with legal and regulatory requirements.
Ensuring security, analytics, and quality control of our services.

6. Data Storage

Servers: Amazon Cloud, UK (London).
Retention period: Data is retained for 2 years, unless longer storage is legally required.
Security: Encryption, restricted access, vendor security checks, contractual safeguards.

7. Data Sharing

We share data only with partner doctors and hospitals involved in providing medical services.
Technical providers (e.g., Amazon Cloud hosting in the UK).
No data is sold or shared with unrelated third parties for marketing or advertising purposes.

8. Cookies & Analytics

We use cookies and third-party analytics tools (including Cloudflare) to ensure site functionality and improve performance.

Categories: strictly necessary, functional, performance/analytics, and third-party cookies.
Users can manage cookie preferences through browser settings.

9. Minors

Our services are intended for users 18 years and older.

We do not knowingly collect personal information from minors. If such data is discovered, it will be deleted unless submitted with verified parental/guardian consent.

10. User Rights

Depending on your jurisdiction (EU, US, Dubai, or other), you may exercise the following rights:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data (subject to legal retention requirements).
Restriction: Limit the processing of your data.
Portability: Request a copy of your data in a portable format.
Withdraw consent: At any time, for future processing.
Lodge a complaint: With the relevant data protection authority in your jurisdiction.

For EEA and UK residents: rights under GDPR apply.

For US residents: rights under CCPA and other state privacy laws apply (e.g., opt-out of sale, right to delete, right to correction, right against automated decision-making).

For HIPAA (US): rights apply regarding protected health information (PHI), including breach notification.

All requests can be made via info@medelysium.com.

11. Updates

We may update this Privacy Policy from time to time. Updates will be published on our website.

For significant changes, we will notify users in advance.
Where required by law, we will seek renewed consent.