Effective October 8, 2026. Applies to brazilmedtour.com and to BrazilMedTour's coordination services.
Who we are
BrazilMedTour is a medical travel coordination service operated from New York, United States, and Rio de Janeiro, Brazil. We are not a healthcare provider, and we are not a HIPAA covered entity. Contact: hello@brazilmedtour.com.
What we collect
Quote requests: your name, email, optional phone or WhatsApp number, the procedure you are interested in, city preference, rough timing, and anything you write in the notes field.
After a clinic is matched: only with your separate, explicit consent, the medical information needed for the clinic to prepare a quote (for example photos or records). We ask you not to send these through the website form.
Clinic applications: business details (name, CNPJ, address, website, accreditation), professional registration numbers (CRM, CRO, specialty), pricing, and contact details of the person applying.
Technical: our hosting provider, Cloudflare, records standard server logs (IP address, browser, pages requested) for security and performance. We do not run advertising trackers.
How we use it
To respond to your request, match you with a partner clinic, obtain and review a quote, and coordinate travel and recovery.
To verify clinics and professionals against public registries before listing them.
To send you messages about your request. We do not send marketing email unless you opt in separately.
Who we share it with
Partner clinics: we send your quote request, and later any medical information you have consented to share, to the clinic preparing your quote. The clinic is an independent data controller bound by Brazilian law (LGPD, Lei 13.709/2018) and by medical or dental confidentiality rules.
Service providers: Cloudflare (hosting and database, with data stored in Cloudflare's network) and our email provider. They process data only on our instructions.
Legal requirements: where a law or court order requires disclosure.
We do not sell personal information and never share it with advertisers.
International transfers
Your information moves between the United States and Brazil as part of the service. By requesting a quote you agree to that transfer.
How long we keep it
Quote requests that do not lead to a booking are deleted after 12 months. Booking records are kept for 7 years for tax and legal reasons. Medical information shared for a quote is deleted from our systems within 90 days of the quote or the end of your coordinated trip, whichever is later; the clinic keeps its own records under its legal duties.
Your rights
You can ask us at any time to see, correct, or delete the personal information we hold about you, or to stop processing it. Residents of Brazil have these rights under the LGPD; residents of California and some other US states have similar rights under state law. Email hello@brazilmedtour.com and we answer within 30 days. Deleting data we need to complete a booked service may end that service.
Security
The site is served over HTTPS. Form submissions are stored in an access-controlled database. Medical records are never requested through the public website form. No system is perfectly secure; if we learn of a breach affecting you, we will tell you promptly.
Children
Our services are for adults. We do not knowingly collect information from anyone under 18.
Changes
We will post any change here with a new effective date. Material changes will be emailed to anyone with an open request.