Groppi Health ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal and medical information when you visit www.groppi-health.com or use our medical tourism facilitation services. We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable international privacy laws.
1. Data Controller
Groppi Health acts as data controller for the personal information you provide through this website. For any privacy-related question, contact us at info@groppi-health.com.
2. Personal Data We Collect
- Identity data: name, date of birth, nationality, gender.
- Contact data: email, phone number, country of residence.
- Health information: medical history, photos, diagnoses, treatment requests.
- Travel data: passport details, accommodation and flight preferences.
- Technical data: IP address, browser, device, usage analytics.
3. Medical Information Handling
Medical data is considered a special category of personal data under GDPR Article 9. We process such data only with your explicit consent and exclusively to coordinate your treatment with selected partner hospitals and specialists. Medical files are shared only with the clinicians directly involved in your evaluation and care.
4. AI Preview Uploads
When you upload photos to our AI Preview tool, your images are processed solely to generate an indicative visual preview. Uploads are stored on secure infrastructure, are not used to train public AI models, and are deleted on request. AI previews are illustrative only — see our Medical Disclaimer.
5. Contact Forms & WhatsApp
Information submitted through contact forms or WhatsApp is used to respond to your inquiry, prepare a personalised proposal, and coordinate your treatment journey. WhatsApp messages are handled under Meta's terms in addition to ours.
6. Cookies
We use functional, analytics and (where consented) marketing cookies. Full detail is in our Cookie Policy. You can change your consent at any time through the cookie banner.
7. Legal Basis for Processing
- Your explicit consent (medical data, AI uploads, marketing cookies).
- Performance of a service you requested (consultations, bookings).
- Legitimate interest (security, analytics, fraud prevention).
- Legal obligation (accounting, regulatory record-keeping).
8. Data Sharing
We share necessary information with selected partner hospitals, clinics, specialists, hotels, and travel coordinators in Egypt and other treatment countries, exclusively for the purpose of organising your care. We never sell personal data.
9. International Transfers
Because care may be provided outside the EU, your data may be transferred to countries such as Egypt. Such transfers are protected by appropriate safeguards (your explicit consent and contractual protections with partners).
10. Data Retention
- Inquiry data: up to 24 months from last contact.
- Active patient files: for the duration of the engagement plus 10 years (medical recordkeeping standard).
- AI Preview uploads: up to 12 months, or earlier upon request.
- Marketing data: until you withdraw consent.
11. Your Rights
Under GDPR you have the right to:
- Access your personal data.
- Request rectification or erasure.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email info@groppi-health.com.
12. Security
We apply technical and organisational measures including encryption in transit, restricted access controls, and confidentiality agreements with partners.
13. Updates
We may update this Policy. Material changes will be reflected through the "last updated" date above and, where appropriate, additional notice.
14. Contact
Groppi Health — info@groppi-health.com — www.groppi-health.com.