Book Appointment Now
PRIVACY POLICY
Effective Date: January 9, 2026
Last Updated: January 9, 2026
1. Data Controller
MTP Consulting S.A. (“Medical Tourism Packages”), registered in Panama under number 155756653, is the data controller for personal information collected through this website and in connection with our coordination services.
Privacy Contact: privacy@medicaltourismpackages.com
2. Information We Collect
For a better experience while using our services, we may require you to provide certain personally identifiable information, including but not limited to:
- Identity Information: Name, passport details, nationality, date of birth
- Contact Information: Email address, phone number, physical address
- Financial Information: Payment details for coordination services
- Health Information: Medical records, imaging, and treatment history (for coordination purposes only)
3. Health Data Processing (Transient)
Health information is processed TRANSIENTLY. We collect medical records, imaging, and test results solely to transmit them to Healthcare Partners for quotations and care coordination.
Once transmission is confirmed, health data is deleted without undue delay from our systems, except where retention is required to establish, exercise, or defend legal claims.
This means:
- Health data is not retained in permanent files
- We perform NO clinical review or interpretation of medical data
- Data already transmitted cannot be retrieved from our systems
Administrative data (identity, contact, payment, compliance documentation) is retained for 7 years per Panama regulatory requirements.
4. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Type of Data |
|---|---|
| Providing quotations and coordinating medical tourism services | All categories |
| Transmitting information to Healthcare Partners | Identity, Contact, Health (transient) |
| Processing payments | Identity, Financial |
| Regulatory compliance (KYC/AML) | Identity, Compliance documentation |
| Communication and support | Contact information |
| Website analytics and improvement | Technical data (anonymized) |
Purpose Limitation: We do not use health data for marketing, profiling, or any purpose other than transmission to Healthcare Partners.
5. Healthcare Partners as Independent Controllers
Once your information is transmitted to a medical provider (hospital, clinic, or physician):
- That provider becomes an independent data controller
- MTP cannot access, modify, or delete data held in their systems
- Contact the healthcare provider directly for data requests concerning their records
- MTP makes NO representations about their data security practices or policies
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Health Data | Transient (deleted without undue delay after transmission) |
| Compliance/KYC Documentation | 7 years |
| Financial Records | 7 years |
| Administrative Records | 7 years |
| Contact Information | Until you request deletion |
| Website Analytics | 14 months |
7. Cookies and Log Data
Log Data: When you visit our website, we collect information your browser sends, including your IP address, browser version, pages visited, time and date of visit, and time spent on pages.
Cookies: Our website uses cookies to collect information and improve our service. You can accept or refuse cookies through your browser settings. Refusing cookies may limit some functionality.
8. Security Measures
We implement commercially reasonable security measures to protect your information.
By deleting health data without undue delay after transmission to Healthcare Partners, MTP reduces the window of exposure to potential security incidents. However, data during transmission remains subject to inherent electronic communication risks.
No method of electronic transmission or storage is 100% secure. You acknowledge that you provide personal information at your own risk.
9. Data Breach Notification
In the event of a security incident affecting data in our direct control, we will notify Panama authorities (ANTAI) without undue delay and in accordance with applicable statutory timeframes.
Data transmitted to Healthcare Partners is their responsibility. Contact your provider regarding their breach notification procedures.
10. Your Data Protection Rights
Under Panama Law 81, you have the following ARCO rights:
| Right | Description |
|---|---|
| Acceso (Access) | Request a copy of your personal data |
| Rectificación (Rectification) | Request correction of inaccurate data |
| Cancelación (Cancellation) | Request deletion of your data (subject to 7-year retention requirements) |
| Oposición (Opposition) | Object to certain processing activities |
Response time: Within the statutory timeframes established by Panama Law 81
To exercise your rights:
- Email: privacy@medicaltourismpackages.com
- Subject line: “Data Protection Request”
Limitations: We cannot delete data required for legal compliance (7-year retention) or retrieve health data already deleted under the transient processing model.
11. Third-Party Services
We may engage third-party companies for:
- Facilitating our services
- Processing payments
- Analyzing website usage
These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Healthcare Partners operate as independent data controllers, not as our service providers. They process your data under their own privacy policies and applicable local laws.
12. Children’s Privacy
Our services are not directed to individuals under 18 years of age.
13. International Data Transfers
Your data may be transferred to and processed in:
- Panama (MTP headquarters)
- Colombia, Costa Rica, Mexico (Healthcare Partner locations)
- United States (payment processing, cloud services)
By using our services, you consent to these international transfers.
14. Policy Hierarchy
This Privacy Policy is supplemental to any Service Agreements (including, but not limited to, Quotes, Waivers, and KYC Disclosures) you execute with MTP. In case of conflict between this website content and any executed Service Agreement, the executed Service Agreement prevails.
For comprehensive data protection information, see our full Data Protection Policy.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted with a new effective date.
Continued use of our services after changes constitutes acceptance of the updated policy.
16. Contact Us
For questions about this Privacy Policy or to exercise your data protection rights:
Email: privacy@medicaltourismpackages.com
Subject Line: “Privacy Inquiry” or “Data Protection Request”
MTP Consulting S.A.
Medical Tourism Packages
Panama Registration No. 155756653