Privacy Policy | Le Medica

Le Medica Health Tech Sdn Bhd – Privacy Policy

Last Updated: (Date to be inserted)

Le Medica Health Tech Sdn Bhd (“Le Medica”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our medical tourism Platform or related services. It also outlines the choices you have regarding your personal information. We strive to comply with applicable data protection laws in the regions we operate, including Malaysia’s Personal Data Protection Act 2010 and Thailand’s Personal Data Protection Act 2019, as relevant. By accessing or using our Platform, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our services.

1. Information We Collect

We collect various types of information from you to provide and improve our services. The types of data we may collect include:

Personal Identiﬁcation Information: This includes data that identiﬁes you as an

individual, such as your full name, contact information (email address, phone number, physical address), date of birth, nationality, and passport or identiﬁcation number. For example, when you register an account or ﬁll out a proﬁle, we may ask for your name and contact details. If you are booking travel or accommodation through us, we might request passport details to facilitate reservations or visa letters.

Medical and Health Information: Because we are a medical tourism platform,

we may collect sensitive personal data related to your health in order to assist with your inquiry or booking. This can include information such as your medical history, current medical conditions or diagnoses, records and reports (e.g., lab results, X-rays, MRI scans), medications, allergies, and any other details you voluntarily provide about your health or desired treatments. We only collect health information with your explicit consent, and we use it solely for the purposes of securing medical advice, quotes, or treatment for you. For instance, if you seek a quote for a knee surgery, we might ask for medical records or images related to your knee condition to share with a prospective surgeon.

Travel and Logistics Information: If your medical tourism plan requires travel

arrangements, we might collect details such as your travel dates, ﬂight information, accommodation preferences, and special requirements (e.g., wheelchair access, dietary needs). For example, if you book an airport pickup or

hotel through our Platform, we will collect the necessary details to secure those bookings.

Payment Information: When you make a payment through our Platform (for a

deposit or purchasing an LMPass voucher), we (or our payment processor) will collect information necessary to process the payment. This typically includes your credit/debit card number, cardholder name, expiration date, billing address, and sometimes e-wallet or bank transfer details. We do not store full credit card numbers on our systems after the transaction is completed, for your security. However, we maintain records of transactions (e.g., amount, date, payment method, and the last four digits of your card or a transaction ID) for accounting and dispute resolution.

Account Usage Data: When you use our Platform, we automatically collect

certain technical information about your device and how you interact with our site. This may include your IP address, browser type, device type, operating system, referring website, pages you viewed, and the dates/times when you accessed the Platform. We also collect information through cookies or similar technologies (see the “Cookies and Tracking” section below). This usage data helps us improve our website functionality and user experience.

Communications: If you contact us with inquiries or support requests, or if you

communicate with providers through our Platform, we may keep records of that correspondence. This can include emails, chat logs, voice call recordings, or any other form of communication. These records are used to track inquiries, improve customer service, and for quality assurance.

Feedback and Reviews: If you choose to provide feedback, testimonials, or

reviews about our Platform or about a provider, we will collect the information you share. We may publish your feedback on our Platform (with your ﬁrst name and maybe country, or as otherwise agreed) to help other users, but we will never publish your medical details without consent.

Voluntary and Necessary Data: In most cases, you provide us with personal and sensitive data voluntarily when using our services (for example, by ﬁlling out a form to request a medical quote, you choose to provide health information). We will only ask for information that is relevant and necessary for the service you seek. You may decline to provide certain information, but keep in mind that this may limit our ability to assist you. For instance, if you do not provide medical details, we may not be able to obtain an accurate treatment plan or quote for you; if you decline to provide contact information, we cannot respond to your inquiry.

2. How We Use Your Information

We use your personal data solely for legitimate purposes in connection with our medical tourism services. The main purposes for which Le Medica processes your information include:

Facilitating Medical Consultations and Bookings: We use the information you

provide (especially medical info and personal details) to connect you with medical providers and arrange the services you request. For example, we will use your health information to identify suitable clinics or doctors and to obtain preliminary evaluations or cost estimates on your behalf. We share relevant details with the medical provider so they can assess your case and reserve a spot for your treatment. Likewise, if you book a surgery, we use your name and contact to schedule it, and your passport details to help with visa letters if needed.

Arranging Non-Medical Services: We also use your data to book travel and

accommodation as requested – for instance, giving your name and dates to a partner hotel for a reservation, or arranging airport pickup by providing your name, arrival time, and contact to a transport company. Only the necessary information is shared with each service provider to complete the booking (see “How We Share Your Information” below for details).

Payment Processing and Account Management: If you make payments

through us (deposits or vouchers), we use your data to process those transactions, conﬁrm payment receipt, and maintain proper ﬁnancial records. We may send you payment conﬁrmations or receipts via email. For account management, we use your email/phone to send important notices about your bookings, updates to terms or policies, or responses to your inquiries.

Communications: We use your contact information to communicate with you

about your requests and bookings. This includes sending appointment conﬁrmations, itinerary details, follow-up surveys, or responding to any questions or feedback you send us. We may also use your preferred communication method (email, messaging apps, phone) to provide support and guidance before, during, and after your medical trip. If you have subscribed to any newsletter or updates, we will use your contact info to send those, but only if you have opted in (see “Marketing Communications” below). Improving Our Services: We may use usage data and feedback to analyze and improve our Platform’s performance and offerings. For example, we might look at which pages are most visited to enhance those sections, or use bug reports to ﬁx technical issues. We might aggregate data (in a way that doesn’t identify you personally) to understand trends or user needs. This analysis helps

•

us enhance user experience, optimize travel packages, or introduce new features that better serve our users.

Legal and Safety purposes: In some cases, we may need to process your

information to comply with legal obligations, such as record-keeping requirements under health regulations or ﬁnancial laws, or to respond to lawful requests by public authorities. Additionally, we use and share data as necessary to enforce our Terms and Conditions, to detect or prevent fraud or other illegal activities, and to protect the rights and safety of our users, providers, and company. For example, we may use certain data to verify your identity (preventing identity theft), or use information in investigating a security incident or a dispute.

Legal Bases for Processing: We process personal data under one or more of the following legal bases, in accordance with applicable law:

Consent: We rely on your consent to process sensitive personal data like health

information. By providing such data to us for the purpose of obtaining services, you consent to our using it as described. We also rely on consent for sending marketing communications (where required by law). You have the right to withdraw consent at any time (see Your Rights section).

Contractual Necessity: When you request our services, a contractual

relationship is formed (the Terms and Conditions). We need to process certain data to fulﬁll our contract with you – for example, using your details to secure the bookings you asked for. If you will travel for a surgery, processing your data is necessary to “perform” the facilitation contract you have with us.

Legal Obligation: We may process data when necessary to comply with a legal

obligation – for instance, retaining transaction records for tax or auditing purposes, or verifying identity to comply with anti-fraud or anti-money laundering laws.

Legitimate Interests: We process certain data as needed for our legitimate

business interests, provided those are not overridden by your privacy rights. For instance, it’s in our interest to use minimal data (like your activity on our site) to prevent fraud, secure our network, improve our platform, and send you relevant updates about the service you’re using. We will always consider your rights and ensure any such processing is not overly intrusive.

3. How We Share Your Information

We understand that your personal and health information is sensitive. We only share your data in limited circumstances and with appropriate safeguards. The main instances where we disclose personal data are:

With Medical Service Providers: When you express interest in or book a

medical treatment, we will share the relevant portion of your personal information and medical details with the chosen medical provider (hospital, clinic, or doctor). This is necessary so that the provider can review your case, offer a treatment plan or quote, schedule appointments, and prepare for your arrival. For example, if you requested a quote for a dental implant, we would forward your dental X-ray and medical history to the dental clinic; if you book surgery, we share your pre-operative lab results with the surgeon. We limit the information to what is needed by that provider. The medical provider is responsible for handling your data according to their own privacy policies and local laws once they receive it. While we try to partner only with reputable providers, please note that their handling of your data is not under our control, and you may wish to review their privacy practices as well.

With Non-Medical Service Providers: Similarly, if you book hotels,

transportation, interpreters, or other services through us, we share the necessary data with those third-party travel or service partners. For instance, we provide your name, check-in date, and room preferences to a hotel, or your name and phone number to a driver meeting you at the airport. We do not share medical details with hotels or general travel services – only what’s needed (if you have special medical needs that the hotel should know, we share that only with your consent). All these providers are independent controllers of your data for their service. They should use your data only for fulﬁlling your booking and related purposes.

With Payment Processors: When you make a payment on our Platform, your

payment details are handled by a secure third-party payment gateway or bank. These payment processors are PCI-DSS compliant and authorized to process your ﬁnancial information. We share the billing information and charge request with them, and they conﬁrm the payment status to us. Such third parties are contractually obligated to protect your data and use it only for processing the transaction.

With Our Service Providers (Data Processors): Le Medica uses a variety of

trusted third-party service providers to operate our business. This includes services like website hosting, cloud data storage, email/SMS delivery services, customer relationship management (CRM) systems, analytics providers, or customer support software. We share your data with these providers only to the extent necessary for them to perform their functions on our behalf (for example, storing data on a secure cloud server or sending you an email). These providers are bound by conﬁdentiality and data protection agreements, meaning they cannot use your data for any purpose other than to provide services to Le Medica, and they must safeguard it in accordance with our standards and

applicable law. Some of these providers may be located in other countries (see “International Data Transfers” below).

For Legal Compliance or Protection: We may disclose your information to third

parties (such as law enforcement agencies, regulators, courts, or other government authorities) when we believe, in good faith, that such disclosure is necessary to comply with a legal obligation (e.g., a court order or subpoena) or to protect our rights, your safety, or the safety of others. For example, if required by Malaysian or Thai law to report certain medical information or if we need to cooperate with an investigation, we will share data as legally mandated. We may also share information with our legal counsel or consultants in order to obtain advice, establish or exercise our legal rights, or defend against legal claims.

Business Transfers: In the event that Le Medica undergoes a business

transition, such as a merger, acquisition by another company, restructuring, or sale of all or part of its assets, your personal data may be among the assets transferred. We will ensure that any such transfer is subject to appropriate conﬁdentiality safeguards and that your data remains protected. We will also notify you (for example, via notice on our website or email) if your information becomes subject to a different privacy policy as a result of a business change, and you will have the opportunity to discontinue using our services if you do not agree with the new policies.

With Your Consent: Apart from the cases listed above, we will only share your

personal data with third parties when we have your explicit consent to do so. For instance, if you want us to share your inquiry with an additional medical expert or if you agree to participate in a testimonial or case study, we would share data accordingly with your permission. You have the right to refuse or withdraw such consent at any time.

We do NOT sell or rent your personal data to third-party marketers or unrelated parties. We may share anonymized, aggregated statistics about users (e.g., average number of international patients in a month, popular destinations) with partners or for public relations, but this information will not identify any individual.

4. International Data Transfers

Le Medica is based in Malaysia and also operates in Thailand. Depending on where you are located and where the providers or our service partners are, your personal data may be transferred to, stored in, or accessed from multiple countries. For example:

•

If you are a patient in Europe seeking treatment in Malaysia, your data will be sent to Malaysia (to the provider) and may also be processed on servers in Malaysia or Singapore (if our cloud storage is located there). If you are in Malaysia using our services for a treatment in Thailand, we will send your data to Thailand for the hospital, and possibly to other locations where our IT infrastructure or support teams are located.

We recognize that privacy laws vary by country. Wherever your data is transferred, we will take appropriate steps to ensure it remains protected in line with this Privacy Policy and applicable law. These steps may include:

Contractual Safeguards: We enter into data processing agreements with our

service providers that include standard data protection clauses (such as the Standard Contractual Clauses approved by regulators, where applicable) to ensure your data is safeguarded when transferred internationally.

Jurisdictional Compliance: When transferring data to Thailand, we comply with

the Thai PDPA requirements, and for data transferred out of Malaysia, we comply with Malaysian PDPA which may require us to ascertain that the receiving country has sufﬁcient data protection laws or to obtain consent for the transfer. By using our service and providing your information, you consent to the transfer of your data to countries which may be outside your country of residence, including Malaysia and Thailand, as necessary for the purposes described (for example, sending your health info to a foreign hospital to arrange your treatment). We will only do so as permitted by law, ensuring that adequate safeguards are in place.

While the data is under our control, we will apply consistent privacy protections. However, please note that once your information is shared with a third-party provider (e.g., a hospital abroad), it will be subject to the laws of that country, which might have different privacy standards than your home country. We encourage you to be aware of this and ask any critical questions to the providers if needed.

5. Data Retention

We will retain your personal data only for as long as necessary to fulﬁll the purposes we collected it for, including any legal, accounting, or reporting requirements. In practice:

• If you register an account or make an inquiry but do not go through with any booking, we may keep your data on ﬁle in case you return to use our services, or to follow up on why the inquiry didn’t proceed. However, if we have no

•

meaningful interaction with you for an extended period (e.g., 2 years), we may purge your data from our active systems. If you complete a booking and travel for treatment, we will retain the data related to that transaction (including personal details, medical info you provided, and booking records) at least until the treatment is completed and for some time thereafter. This allows us to assist with any follow-up care or issues, and to comply with record-keeping obligations. Typically, medical tourism facilitators may retain client records for a number of years (e.g., 7 years) in line with healthcare advice or legal requirements, but we will not keep sensitive health information longer than needed.

Financial transaction records (deposits, payments, invoices) are retained as

long as required by ﬁnancial regulations and tax laws – often 7 years in many jurisdictions – or longer if needed for audit purposes. We store minimal personal info in these records (usually name and transaction details).

Communications and support records are typically kept for a couple of years

after your interactions with us, which helps us train our team and refer back if you return for another inquiry. If you subscribe to marketing communications, we retain your contact info for that purpose until you unsubscribe or ask us to delete it. •

Server logs and analytics data are kept for a shorter period (often 6-12 months

for raw logs) unless we archive them for legal reasons.

When we no longer have a legitimate need to retain your personal data, we will either delete it or anonymize it (so it can no longer be associated with you) in accordance with our data retention policies and applicable law. For example, we might remove identifying details from old medical inquiries and keep the anonymous statistics (like how many people inquired about dental implants in 2020) for business analysis.

If you request deletion of your data (see “Your Rights” below), and we are able to honor it, we will also erase your data from our systems (except to the extent we are required or permitted to keep speciﬁc information).

6. Cookies and Tracking Technologies

Our Platform uses cookies and similar tracking technologies to provide a better user experience, remember your preferences, and understand how the site is used. Cookies are small text ﬁles placed on your device when you visit a website.

We may use the following types of cookies:

Essential Cookies: These are necessary for the website to function properly.

For example, they might keep you logged in during your session or remember your language preferences. Without these, certain features of the site may not work.

Analytics Cookies: We use these to collect information about how visitors use

our site (e.g., which pages are visited most, how users navigate between pages, if any errors occur). This helps us improve the site’s performance and design. We might use third-party analytics tools like Google Analytics, which will set their own cookies to track user interactions. The information collected is usually aggregated and not identiﬁable to you personally.

Functional Cookies: These help to enhance your experience (for example, by

remembering certain choices you made, so we can personalize content for you, such as pre-ﬁlling forms with your name).

Advertising Cookies: At present, we do not display third-party ads on our

Platform. If this changes in the future, we will update this policy. In general, advertising cookies would be used to show you relevant ads on our site or others, based on your browsing behavior.

Managing Cookies: On your ﬁrst visit, our site may prompt you with a cookie notice. You can choose to accept or adjust which non-essential cookies you allow. Additionally, most web browsers allow you to control cookies through their settings (you can usually refuse new cookies, delete existing ones, or be notiﬁed when they’re being set). Please note that disabling certain cookies (especially essential ones) might impact your ability to use some parts of our Platform.

We also may use other tracking technologies like web beacons (tiny graphic images) in our emails or site to count users or understand usage. For example, a beacon in a newsletter might tell us if you opened the email. This information helps us gauge the effectiveness of our communications and tailor future content.

7. Your Rights and Choices

We respect your rights to your personal data. Depending on the laws that apply to you (for example, Malaysian law, Thai law, or other data protection regulations if you are from elsewhere), you may have some or all of the following rights:

Right to Access: You have the right to request a copy of the personal data we

hold about you. We will provide this information, typically free of charge, within a reasonable timeframe. This allows you to verify the information and check that we are processing it in accordance with the law.

Right to Correct: If any of your personal data is inaccurate or incomplete, you

have the right to request that we correct or update it. For instance, if your phone number or address has changed, or if you ﬁnd a typo in the data we have on ﬁle, let us know and we will rectify it.

Right to Withdraw Consent: For any processing of sensitive personal data (like

health information) or for optional communications (like marketing), you have the right to withdraw your consent at any time. For example, if you initially allowed us to share your medical records with a provider but change your mind, or if you signed up for newsletters and no longer wish to receive them, you can notify us to cease those activities. Withdrawal of consent will not affect the legality of any processing done before you withdrew, but it may mean we can’t continue to provide certain services (e.g., if you withdraw consent to use your medical data, we cannot obtain quotes or make bookings for you).

Right to Deletion (Right to be Forgotten): You may request that we delete your

personal data when it’s no longer needed for the purposes for which it was collected, or if you have withdrawn consent, or if you object to processing and we have no overriding legitimate grounds to continue, or if the processing was unlawful. We will honor deletion requests to the extent possible in line with applicable laws. Note that sometimes we must retain certain information (e.g., for legal compliance or legitimate interests). If we cannot delete data you request, we will explain the reason. Deletion of your data may involve closing your account and removing identifying information from our systems.

Right to Object or Restrict Processing: You have the right to object to the

processing of your personal data in some cases – for instance, if we are processing based on legitimate interests and you have a particular situation that makes you want to object. You also can request that we restrict processing of your data while a dispute is being resolved (e.g., if you contest the accuracy of data or have objected and we’re considering it). In practice, if you object to certain processing, we will either stop the processing or explain why we are allowed to continue. For direct marketing, you can always object and we will stop sending marketing messages.

Right to Data Portability: Under certain conditions, you may request to receive

the personal data you provided to us in a commonly used and machine- readable format, and have the right to transmit that data to another service provider. For example, if you decide to use a different medical tourism facilitator, you might ask us to export the data you gave us (like your basic info and medical records) so you can easily provide it to the new service. We will assist with this, as long as it’s technically feasible and doesn’t affect the rights of others.

Right to Lodge a Complaint: If you believe we have handled your personal data

improperly or in violation of your rights, you have the right to lodge a complaint with the relevant data protection authority. For instance, Malaysian users can contact the Personal Data Protection Commissioner’s ofﬁce; Thai users can contact Thailand’s PDPA governing authority. We would appreciate the chance to address your concerns directly ﬁrst, so we encourage you to contact us with any complaint and we will do our best to resolve it.

To exercise any of these rights, please contact us using the contact details provided at the end of this policy. For security, we may ask you to verify your identity (for example, by providing information that conﬁrms you are the account owner) before fulﬁlling your request. We will respond to your request as soon as possible, typically within 30 days, and inform you of the actions taken or any necessary explanations.

Note for Sensitive Data: Because some of the data we handle is highly sensitive (health information), we especially emphasize that you have control over it. You can always choose not to provide certain health details (keeping in mind it might limit service) and you can ask us to remove health data from our records after your services are concluded (unless retention is required for legal reasons). We will treat any request involving sensitive data with priority and care.

8. Data Security

Le Medica employs reasonable and appropriate security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

Technical Safeguards: We use industry-standard encryption (such as SSL/TLS)

to secure data transmission on our website, especially for sensitive information like health records or payment details. You can verify a secure connection by looking for "https://" in our URL and a lock icon in your browser address bar. Our databases and servers are protected by ﬁrewalls, antivirus programs, and other security software to prevent external intrusions. We regularly update our systems with security patches.

Access Control: Internally, we restrict access to personal data strictly to

employees and agents who need to know that information in order to operate, develop or support our services. For example, our medical case managers will see your medical info to assist you, but our IT technicians might only see technical data. All staff are trained on conﬁdentiality and data protection. We implement authentication controls (such as strong passwords and two-factor

authentication where applicable) for our systems to ensure that only authorized personnel can access sensitive data.

Storage Security: We store personal data on secure servers, and for especially

sensitive data (like medical reports), we may use additional encryption at rest. Physical servers are located in secure data centers with controlled access. If any data is stored in cloud services, we choose reputable providers with robust security certiﬁcations. We also keep regular backups of critical data to ensure availability and integrity.

Payment Security: Any payment transactions will be encrypted and processed

through PCI-compliant payment gateways. We do not store your complete payment card information on our own infrastructure after the transaction; if we retain anything, it is tokenized or truncated data provided by the payment processor.

Monitoring and Testing: We monitor our systems for possible vulnerabilities

and attacks, and we conduct periodic security reviews and penetration tests. If we utilize third-party software or plugins, we keep them updated and monitor advisories for any known security issues.

Breach Response: Despite all efforts, no system can be 100% secure. We have

a data breach response plan in place. In the unlikely event of a data breach that affects your personal data, we will promptly notify you and the relevant authorities as required by law, and take all necessary steps to mitigate harm and prevent recurrence.

It’s important to note that you also play a role in keeping your data safe. Please use a strong, unique password for your Le Medica account and do not share it with others. Be cautious about phishing attempts – Le Medica will never ask you for your password via email or unsolicited communication. If you suspect any unauthorized access to your account or any security issues, contact us immediately.

9. Third-Party Links and Services

Our Platform may contain links to websites or services operated by third parties (for example, links to hospitals, tourism boards, insurance companies, or travel agencies not directly integrated with our booking system). This Privacy Policy does not apply to those third-party sites or services, which have their own privacy policies. If you click on a third-party link, you will be taken to a site we do not control. We encourage you to review the privacy policies of any third-party sites or services before providing any personal information to them.

Additionally, if you directly provide information to a third-party provider outside of our Platform (for example, if after being introduced through us, you ﬁll out the hospital’s

intake forms or use a third-party telehealth portal), that data is governed by the provider’s own policies. Le Medica is not responsible for how third parties treat your data that you give them directly (though we welcome feedback if you encounter issues, as it may affect our partnership decisions).

10. Marketing and Communication Preferences

Communication from Us: We may send you certain communications related to your use of our services, such as conﬁrmations, invoices, customer service responses, or policy updates. These are considered transactional or service communications and are necessary for our relationship, so you may not opt out of them if you are using the service (except by discontinuing use).

However, we may also send optional communications that you can choose to receive or not, such as:

Newsletters or Updates: If you opt in to our mailing list, we might send periodic

newsletters with medical tourism news, new services, or promotions.

Surveys and Feedback Requests: After your trip, we might invite you to provide

feedback or testimonials. Participation is voluntary.

Promotional Offers: Occasionally, we might offer special deals, discount codes,

or referral programs. These will be sent only if you have not opted out of marketing messages.

Your Choices: You have control over marketing communications. If you no longer wish to receive our newsletter or promotional emails, you can click the “unsubscribe” link in any such email or contact us to be removed from our mailing list. Please note that even if you opt out of marketing emails, we may still send you non-promotional emails, such as those about your account or bookings.

For SMS or messaging app updates (if we use those and you consent to receive them), you can follow the instructions provided in the messages to opt out (e.g., texting “STOP” to unsubscribe, or adjusting app settings).

We do not share your contact information with third parties for their own marketing unless you explicitly agree.

11. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children without veriﬁable parental consent. If you are under 18, please do not use the Platform or send any personal data to us

(have a parent or guardian do so on your behalf, such as in the case of arranging treatment for a minor). If we learn that we have inadvertently collected personal information from a child under 18 without proper consent, we will delete that information.

If you are a parent or guardian and believe we might have received information about a child, please contact us so we can investigate and address the issue promptly.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update it, we will post the new policy on this page and change the “Last Updated” date at the top. If we make material changes (signiﬁcant changes to the way we handle your data, or your rights), we will take additional steps to inform you: for example, by prominently posting a notice of such changes on our website or by directly sending you a notiﬁcation if you have provided an email address. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Platform after any changes to this Privacy Policy constitutes acceptance of those changes, to the extent allowed by law. If you do not agree with any updates or changes, you should stop using the Platform and you may request us to delete your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Le Medica Health Tech Sdn Bhd (Attention: Data Protection Ofﬁcer / Privacy Compliance) Email: [email protected]

We will do our best to address any queries or concerns you have. If you contact us to exercise a data subject right, please clearly describe your request (e.g., “I want to access my data” or “Please delete my account information”). We may need to verify your identity before acting on the request.

Thank you for trusting Le Medica with your medical travel plans. Your privacy and satisfaction are of utmost importance to us, and we are committed to ensuring that your personal information is handled safely and responsibly throughout your journey with us.