Privacy Policy
How we protect and handle your personal information
Last updated: August 29, 2025
Privacy Policy
HealthTrip (“HealthTrip”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This policy describes HealthTrip practices regarding personally identifiable information or personal data (“personal information/ PI”). This policy applies to our websites, applications, email, voice calls and text messages, and social media accounts (the “Platforms”). When you use the Platforms, you agree to the terms in this policy.
Purpose of this Privacy Policy
This privacy policy aims to give you information on how HealthTrip collects and processes your PI, including any PI you may provide through the Platforms when you purchase a product or service or sign up for our newsletter. You must read this policy together with any other privacy notices we may provide on specific occasions. This privacy policy supplements other notices and is not intended to override them.
Contact Details
HealthTrip is the company responsible for your PI. We have appointed a Data Protection Officer (DPO). If you have questions about this privacy policy, contact the DPO:
- Full name of legal entity: Global Patient Tech Pte Ltd.
- Address: Exchange, #13-30, No 2 Venture Drive, Singapore 608526.
- Email: [email protected]
Policy Amendments
We review this policy regularly and update at least once every 12 months. Material changes will be published on our website and, where possible, notified via email or pop-up. Amendments enter into force on the Effective Date. The current version is published on our website.
Data Accuracy
When you give us PI, you confirm it is true, accurate, complete, and current and that you are authorized to provide it. Please keep us informed if your PI changes during your relationship with us.
Categories of Personal Information We Collect
We may collect, use, store and transfer different kinds of PI:
- Identifiers / Identity Data: name, alias, postal address, unique identifiers (cookies), date of birth, IP address, etc.
- Contact Data: billing/delivery address, email, phone numbers.
- Commercial Information: quotes, purchases, histories; Financial and Transaction data.
- Network Activity Information: login data, browser info, time zone, plugins, OS, device, and usage data.
- Geolocation data: country, state, or city.
- Audio/Electronic information: call records, email threads.
- Inferences/Profile/Marketing Data: preferences, characteristics, feedback, survey responses, and marketing preferences.
We also collect Aggregated Data for statistical purposes. Aggregated Data is not PI unless it can directly or indirectly identify you. Customer support inquiries you submit may also be collected. We do not collect Special Categories of PI nor information about criminal convictions and offences.
Children
We do not knowingly collect PI from minors, except if the minor is a traveler for medical tourism or accompanied by an adult. If we become aware of such collection, we delete it. Parents/guardians may contact us to request deletion.
If You Fail to Provide Personal Information
Where PI is required by law or contract and you fail to provide it, we may be unable to perform the contract (e.g., provide goods/services) and may have to cancel the product/service with notice.
How We Collect Your Personal Information
PI you give to us
We collect PI directly via live chat, online forms, and voice calls/messengers (e.g., WhatsApp, Facebook, SMS). Contact details you provide may be saved for future communications unless you request one-time use. Voice calls help us provide immediate support and clarify features; you can opt out anytime via our contact form.
PI we collect passively
We collect information over time and across websites via cookies, beacons, and similar technologies, including device attributes that allow us to determine your general location. See our Cookie Policy for more details.
PI we receive from service providers
We may receive PI when you log in using providers (e.g., Facebook, Google) and via security tools integrated for protection purposes.
For What Purpose We Use Your Personal Information
We use PI to provide and improve services; manage relationships; process bookings; perform analytics and marketing (with opt-outs); communicate (confirmations, alerts, updates); comply with legal obligations; and perform contracts. We may rely on consent for certain direct marketing. You can withdraw consent at any time by contacting us.
Examples of Processing Activities
- Assist in purchasing medical trip packages and related travel products.
- Process and deliver orders, manage payments/fees, and provide post-sale support.
- Manage relationships (policy updates, reviews/surveys, greetings).
- Deliver relevant content/ads and measure effectiveness.
- Use analytics to improve platforms and services.
- Create/manage online accounts and detect security incidents.
- Comply with legal obligations, tax matters, licensing, and standards (e.g., PCI DSS).
- Exercise or defend legal claims and respond to authorities.
Change of Purpose
We will only use your PI for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason. Contact us for an explanation of compatibility where needed.
Your Choices
You can make announcements and queries regarding privacy at any time. Marketing emails contain an unsubscribe link. You cannot unsubscribe from servicing and administrative messages.
Consent to Share Information (Telehealth)
By using telehealth services, you authorize doctors introduced by HealthTrip to assess your medical history via telephonic/Internet consultations. Diagnoses may be preliminary. Sensitive PI you disclose may be stored, used, and disclosed to doctors solely for treatment. We will not publish or disclose PI to third parties without your consent, except as mandated by law.
How We Share Your Personal Information
- Corporate affiliates & change of control: shared as needed.
- Service providers: AWS, Enablex, Gupshup, etc., under agreements ensuring compliance.
- Payment providers, hospitals & travel vendors: process bookings as controllers under their policies.
- Business partners: fraud detection, surveys, and advertising under confidentiality and PI terms.
- Health packages shared by you: share only with trusted recipients.
- Public reviews: may be published under your screen name.
- Authorities: disclosures as required by law or to prevent fraud and harm.
Text messaging originator opt-in data and consent will not be shared with third parties.
How We Store and Protect Your Personal Information
Our servers and providers may be in the U.S. or other countries. By providing PI, you agree your PI may be transferred and stored there, subject to local laws. We implement safeguards including encryption, SSL, firewalls, and access controls. We maintain breach procedures and notify where legally required.
Retention Periods
We retain PI as long as reasonably necessary for stated purposes and legal requirements, and longer if needed for complaints or litigation. Retention depends on the amount, nature, sensitivity, risk, and purposes of processing, and legal requirements.
Other Websites
If you click through to third-party websites or platforms, HealthTrip’s privacy policy does not apply.
Requests and Complaints (Your Rights)
Depending on applicable law, you may request access, correction, deletion, opt-out of sale/sharing, know categories/sources/purposes/third parties, and request data portability. We verify via your Verified Email to protect your data. Authorized agent requests may require additional verification.
Nondiscrimination
We will not discriminate for exercising your rights, subject to lawful exceptions tied to value provided by your PI. We may offer financial incentives with your opt-in consent.
Fees and Denials
Requests are free unless clearly unfounded, repetitive, or excessive. We may refuse requests we cannot verify. We may request specific information to confirm identity. Response times are generally within one month, up to 90 days for complex requests.
Contacts
Submit complaints/requests to the DPO email above.
“Do Not Track” Signals
Some browsers have a “Do Not Track” feature. These are not uniform, so we are not currently set up to respond to those signals.