Privacy Policy

Last Updated: June 25, 2025

1. Introduction

Renova Lux Travels ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and protect your data when you use our medical tourism services and website.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Medical Information: Health conditions, medical history, treatment preferences (only with your explicit consent)
• Travel Information: Passport details, travel dates, accommodation preferences
• Payment Information: Billing details, payment method information (processed securely through certified payment processors)
• Communication Records: Correspondence with our team, consultation notes

Automatically Collected Information

• Website Usage Data: IP address, browser type, device information, pages visited
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies
• Location Data: General geographic location (country/city level)

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: Arranging medical consultations, booking treatments, coordinating travel
• Communication: Responding to inquiries, providing updates, sending important notifications
• Safety and Security: Ensuring medical safety, verifying identity, preventing fraud
• Legal Compliance: Meeting regulatory requirements, maintaining medical records as required by law
• Service Improvement: Analyzing usage patterns, improving our website and services
• Marketing: Sending relevant offers and updates (only with your consent)

4. Data Sharing and Disclosure

We may share your information with:

• Healthcare Providers: Accredited medical facilities and professionals providing your treatment
• Travel Partners: Airlines, hotels, and transportation services for your medical tourism journey
• Service Providers: Trusted third-party vendors who assist in delivering our services
• Legal Authorities: When required by law or to protect our legal rights
• Business Partners: With your consent, for coordinated services

We never sell your personal information to third parties for marketing purposes.

5. Data Security and Protection

Your data security is paramount to us. We implement comprehensive security measures:

• Encryption: All data transmissions are encrypted using industry-standard SSL/TLS protocols
• Secure Storage: Personal data is stored in certified, secure cloud infrastructure with ISO 27001 and SOC 2 Type II compliance
• Access Controls: Strict access controls ensure only authorized personnel can access your data
• Regular Audits: Our systems undergo regular security audits and vulnerability assessments
• Data Minimization: We only collect and retain data that is necessary for our services
• Staff Training: All team members receive regular training on data protection and privacy

6. International Data Transfers

As a medical tourism company, we may transfer your data internationally. We ensure:

• All transfers comply with applicable data protection laws
• Appropriate safeguards are in place (Standard Contractual Clauses, adequacy decisions)
• Partner countries and organizations maintain adequate data protection standards
• You are informed about any international transfers that may affect your data

7. Data Retention

We retain your personal information only as long as necessary:

• Active Services: During the provision of medical tourism services
• Legal Requirements: As required by healthcare and travel regulations (typically 7-10 years for medical records)
• Legitimate Interests: For customer service, warranty, and safety purposes
• Consent-Based: Until you withdraw consent for marketing communications

8. Your Rights and Choices

Under applicable data protection laws (GDPR, CCPA, etc.), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Consent Withdrawal: Withdraw consent for specific processing activities

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can manage your cookie preferences through our cookie consent banner or your browser settings.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications for material changes
• Updating the "Last Updated" date at the top of this policy

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

13. Regulatory Compliance

We are committed to compliance with all applicable data protection regulations, including:

• European Union General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Healthcare data protection regulations in applicable jurisdictions
• Industry-specific privacy standards for medical tourism