What we do with what you send us.

In short

This website stores nothing you type into it. The enquiry form composes a WhatsApp or email message that you send yourself. What reaches us — your message, your reports — is used to arrange your care and for nothing else. It is shared with a partner hospital only when you agree to it.

Who we are

HealthTour Odisha, Bhubaneswar, Odisha, India. The legal operating entity, registered address and grievance officer are [CONFIRM before launch]. Contact for anything on this page: hello@healthtourodisha.com.

What we collect

• What you send us. Your name, phone number, email, the city you are travelling from, your dates, and whatever medical information you choose to share — reports, prescriptions, scans, a description of your condition.
• Nothing automatically. This site sets no cookies, runs no advertising or analytics scripts, and does not track you across sites. If that changes, this page changes first.
• Standard server logs. Our hosting provider records requests, including IP addresses, for security and reliability. We do not use them to identify you.

Why we use it

• To answer your enquiry, obtain a specialist's opinion and prepare a written estimate.
• To arrange treatment, travel, accommodation and follow-up if you decide to go ahead.
• To keep a record of what was quoted and agreed, which protects you as much as us.

We do not sell your data, do not share it with advertisers, and do not distribute your enquiry to multiple hospitals to generate competing calls.

Who it is shared with

• A partner hospital, clinic or wellness unit — only the one relevant to your case, and only with your consent. We tell you which one before we send anything.
• A specialist asked to give a written opinion on your reports.
• Service providers where necessary to arrange your trip — for example a hotel or recovery stay, or a transport operator — and only the minimum they need.
• Nobody else, unless the law requires it.

Messaging services

If you contact us by WhatsApp or email, that message travels through the provider you chose and is subject to their privacy terms as well as ours. If you would rather not send medical documents through a messaging app, say so and we will arrange another route.

How long we keep it

Enquiries that do not proceed are deleted after [CONFIRM retention period]. Records relating to arranged treatment are kept for [CONFIRM], because a follow-up question a year later is common and because we may need to show what was agreed.

Your rights

Under the Digital Personal Data Protection Act 2023 you can ask us to show you what we hold about you, correct anything wrong, delete it, or withdraw a consent you gave earlier. Write to hello@healthtourodisha.com and we will respond in writing. Withdrawing consent stops any further sharing, but it does not undo what a hospital already holds — that is their record, under their own obligations.

Children

Enquiries about a child must come from a parent or legal guardian, who consents on the child's behalf.

Security

We limit who can see enquiry material to the people arranging your care. No transmission over the internet is perfectly secure, and we will not claim otherwise. If a breach affects your data, we will tell you and the relevant authority.

Grievances

If you are not satisfied with how we have handled your data, write to our grievance officer at hello@healthtourodisha.com [CONFIRM named officer]. You may also complain to the Data Protection Board of India.

Changes

If this policy changes materially, the date at the top changes and anyone with an open enquiry is told.