1. Introduction
NexOrtho ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, process, and secure your personal and sensitive health data in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
When you submit a consultation request via our secure portal, we may collect:
- Identity Data: Full name.
- Contact Data: Email address, UK postcode, phone number.
- Health Data (Special Category Data): NHS wait status, joint pain severity, procedure of interest (e.g., Knee Replacement, Spine Surgery), and submitted medical imaging (X-rays/MRIs).
3. How We Use Your Data
Your data is exclusively used to facilitate medical tourism services, specifically:
- To provide preliminary clinical assessments.
- To securely share necessary health data with our JCI-accredited partner hospitals in India for quotation and surgical viability purposes.
- To assist with medical visa processing and travel logistics.
4. Data Security & Sharing
All sensitive health data is encrypted in transit and at rest. We never sell your data. Your medical information is only shared with board-certified physicians and hospital admissions teams directly involved in your care pathway.
5. Your Rights
Under UK GDPR, you have the right to access, rectify, or erase your personal data. To exercise these rights, please contact our Data Protection Officer at contact@nexortho.com.