Sanatour LLC Privacy Policy
Effective date: 07.01.2025
Last Updated: 07.18.2021
Our Commitment to Your Privacy
At Sanatour LLC ("Sanatour," "we," "us," or "our"), protecting your privacy is fundamental to our mission of providing ethical, transparent healthcare navigation services. This Privacy Policy explains how we collect, use, protect, and share information when you use our website, services, or communicate with us.
Key Privacy Principles:
- We never sell, rent, or share your personal information with healthcare providers for marketing purposes
- We maintain strict separation between your personal data and any provider relationships
- We collect only the information necessary to provide our services effectively
- We implement robust security measures to protect your information
- We are transparent about our data practices and your rights
Information We Collect
Information You Provide Directly
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password, profile preferences
- Service Inquiries: Healthcare needs, destination preferences, service tier selections
- Communication Records: Correspondence via email, phone, or our website
- Payment Information: Billing details for our services (processed securely through third-party payment processors)
- Feedback and Reviews: Testimonials, survey responses, and service feedback
Information We Do NOT Collect
Important: Unlike many healthcare facilitators, Sanatour does not collect, store, or transmit:
- Protected Health Information (PHI) or sensitive medical records
- Detailed medical histories or diagnoses
- Insurance information or medical billing details
- Prescription information or treatment details
Information Collected Automatically
- Website Usage: Pages visited, time spent, click patterns, search terms
- Technical Information: IP address, browser type, device information, operating system
- Cookies and Tracking: As described in our Cookie Policy below
Information from Third Parties
- Verification Data: Publicly available information about healthcare providers and facilities
- Travel Booking Information: Limited booking details when we assist with travel arrangements
- Payment Processing: Transaction confirmations from our payment processors
How We Use Your Information
Primary Uses
- Service Delivery: Providing healthcare navigation, verification, and coordination services
- Communication: Responding to inquiries, providing updates, and delivering requested information
- Account Management: Creating and maintaining your account, processing payments
- Service Improvement: Analyzing usage patterns to enhance our services and website
- Legal Compliance: Meeting regulatory requirements and protecting our legal interests
Marketing Communications (Opt-In Only)
- Educational Content: Healthcare navigation guides, industry insights, and best practices
- Service Updates: Information about new services, features, or policy changes
- Event Invitations: Webinars, educational seminars, and relevant healthcare events
You can opt out of marketing communications at any time using the unsubscribe link in emails or by contacting us directly.
Information Sharing and Disclosure
We Do NOT Share Information With:
- Healthcare providers for marketing or lead generation purposes
- Medical tourism facilitators or competitors
- Data brokers or marketing companies
- Anyone for commercial gain beyond our direct services
Limited Sharing for Service Delivery
- Travel Partners: Booking details necessary for travel arrangements (Advanced, Premium, and Elite tiers only)
- Insurance Partners: Information needed for travel insurance coordination when requested
- Translation Services: Contact information for language support coordination (Premium and Elite tiers only)
Required Disclosures
- Legal Requirements: When required by law, court order, or regulatory authority
- Safety and Security: To protect the safety of our users, staff, or the public
- Business Transfers: In the event of a merger, acquisition, or sale of business assets
Service Providers
We work with trusted third-party service providers who assist with:
- Website Hosting and Maintenance: Secure hosting and technical support
- Payment Processing: Secure payment transactions (PCI-compliant processors)
- Email Communications: Newsletter delivery and automated email sequences
- Analytics: Website performance and user experience analysis
All service providers are contractually required to protect your information and use it only for specified purposes.
Data Security and Protection
Security Measures
- Encryption: All data transmissions use SSL/TLS encryption
- Access Controls: Strict employee access controls with need-to-know basis
- Regular Audits: Periodic security assessments and vulnerability testing
- Secure Storage: Data stored on secure, regularly backed-up servers
- Staff Training: Regular privacy and security training for all team members
Data Retention
- Account Information: Retained while your account is active and for 3 years after closure
- Service Records: Maintained for 7 years for business and legal compliance purposes
- Marketing Communications: Until you unsubscribe or request deletion
- Website Analytics: Aggregated, anonymized data retained for business analysis
International Data Transfers
As we focus on European healthcare options, some data may be transferred internationally. We ensure appropriate safeguards through:
- Adequacy Decisions: Transfers only to countries with adequate privacy protections
- Standard Contractual Clauses: When required for service delivery
- Your Consent: Explicit consent for any transfers outside protected regions
Your Privacy Rights
Access and Control
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Receive your information in a structured, machine-readable format
- Objection: Object to certain uses of your information, particularly for marketing
Communication Preferences
- Opt-Out: Unsubscribe from marketing emails at any time
- Frequency Control: Adjust the frequency of communications
- Channel Selection: Choose preferred communication methods
Account Management
- Account Closure: Close your account and request data deletion
- Service Limitation: Restrict certain uses of your information
- Consent Withdrawal: Withdraw consent for optional data processing
To exercise these rights, contact us at privacy@sanatour.com or use the contact information below.
Earrings are essentially worn in the ear lobe, but in recent times, the trend is to woman’s domain, men too have again taken to wearing earrings, like their ancestors.
Cookies and Tracking Technologies
Types of Cookies We Use
- Essential Cookies: Required for website functionality and security
- Analytics Cookies: Help us understand website usage and improve user experience
- Preference Cookies: Remember your settings and preferences
- Marketing Cookies: Support relevant content and advertising (with your consent)
Third-Party Cookies
- Google Analytics: Website performance and user behavior analysis
- Payment Processors: Secure transaction processing
- Email Platforms: Communication delivery and engagement tracking
Cookie Control
You can control cookies through your browser settings, though some website functionality may be limited if essential cookies are disabled. We provide cookie preference controls for non-essential cookies.
Special Considerations for Healthcare Information
HIPAA Compliance
While Sanatour is not a covered entity under HIPAA, we apply HIPAA-level protections to any health-related information we encounter in providing our services.
International Healthcare Privacy
We respect international healthcare privacy standards and work to ensure compliance with relevant regulations in countries where we facilitate healthcare access.
Provider Information Separation
We maintain strict separation between client information and our provider verification database to prevent any potential conflicts of interest.
Children's Privacy
Sanatour services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service offerings. We will:
- Notify Users: Email notification of material changes to active users
- Website Notice: Prominent notice on our website for 30 days
- Version Control: Maintain previous versions for reference
Continued use of our services after changes indicates acceptance of the updated policy.
Contact Information
Email: privacy@sanatour.net
Mail: Sanatour LLC Privacy Team, 89 River Street, Hoboken, NJ 07030
Phone:
General Contact
Email: sanatour@sanatour.net
Website: www.sanatour.net
Phone: [Main Contact Number]
Data Protection Officer
For EU residents or GDPR-related inquiries:
Email: dpo@sanatour.com
Regulatory Compliance
This Privacy Policy is designed to comply with:
- GDPR: European General Data Protection Regulation
- CCPA: California Consumer Privacy Act
- PIPEDA: Personal Information Protection and Electronic Documents Act (Canada)
- Other Applicable Laws: Relevant privacy regulations in jurisdictions where we operate
Ethical Commitment
As part of our commitment to ethical healthcare navigation, we pledge to:
- Maintain the highest standards of privacy protection
- Never monetize your personal information beyond our direct services
- Provide clear, honest communication about our data practices
- Continuously improve our privacy and security measures
- Respect your choices and privacy preferences
Questions or Concerns?
If you have questions about this Privacy Policy or our privacy practices, please contact us. We're committed to addressing your concerns promptly and transparently.
Effective Date: This Privacy Policy is effective as of 07.01.2024. and applies to all information collected by Sanatour LLC.