Privacy & GDPR notice

GoodTreatmentForU acts as the data controller for the information you share through this website. For any privacy question or request, contact us at care@goodtreatmentforu.com. Our full legal entity name and registered address are available on request and will be published here once confirmed by the site owner.

• Enquiry data — name, email, phone/WhatsApp, country, the treatment you are interested in and the message you write in our quote or contact forms.
• Health data — medical reports and descriptions of symptoms that you choose to upload for a medical opinion or teleconsult. This is a special category of data under Article 9 GDPR and we process it only with your explicit consent.
• Account data — email address and profile name if you create a patient portal account, plus authentication timestamps.
• Technical data — aggregated, cookie-free analytics (page views, referrer, country, device type) collected only if you accept analytics.

• Consent (Art. 6(1)(a) and Art. 9(2)(a)) — to review your medical reports, obtain an opinion from a treating specialist or partner hospital, and to run optional analytics.
• Contract (Art. 6(1)(b)) — to prepare your quote, coordinate appointments, travel and follow-up care.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, prevent abuse and improve our content.
• Legal obligation (Art. 6(1)(c)) — where record keeping is required by law.

We do not sell your data and we do not use it for automated decision-making.

We share the minimum necessary information with the hospitals and specialists you ask us to contact, and with the service providers that run this platform on our behalf (application hosting, managed database, secure file storage, email delivery and privacy-friendly analytics). These providers act as processors under contract and may process data outside your country; such transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Data is transmitted over HTTPS and stored in access-controlled systems. Medical reports live in a private storage bucket that is not publicly listable; each file is reachable only through a short-lived signed link. Portal accounts are protected by password authentication and row-level access rules that limit each patient to their own records. Staff access is limited to authorised coordinators.

Enquiries and quotes are retained for up to 24 months after our last contact so we can answer follow-up questions. Medical reports and portal records are kept while your account is active and are deleted within 30 days of an erasure request, unless a legal obligation requires longer retention. Analytics data is aggregated and contains no identifiers.

• Access a copy of the data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting past lawful processing.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, email care@goodtreatmentforu.com with the subject “GDPR request”. We respond within 30 days.

We set a small number of strictly necessary cookies: your language preference, your cookie choice, and — if you sign in — a session token. These are required for the site to work and cannot be switched off. Analytics only load after you accept them, and our analytics provider does not use tracking cookies or build cross-site profiles.

When we coordinate treatment for a minor, we rely on the consent of a parent or legal guardian, who remains our point of contact.

We update this notice whenever our practices change. Material changes are highlighted on this page.