Introduction MedSanctuary ("we," "us," "our") is committed to protecting the privacy and personal data of our patients, website visitors, and other users of our services. This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, the choices available to you, and your rights under applicable laws. This policy applies to information collected through our websites, in-person consultations, clinics, telemedicine services, marketing activities, and any other interactions with MedSanctuary. By accessing our services or providing information to us, you agree to the terms of this Privacy Policy.

Information We Collect We collect personal information necessary to provide medical services, manage bookings, process payments, improve our services, and comply with legal obligations. The types of information we collect include:

• Identification and contact information: name, date of birth, gender, passport or national ID number, mailing address, email address, phone number, emergency contact.

• Medical and health information: medical history, allergies, diagnoses, treatment plans, surgical records, medication lists, lab and imaging results, pre-operative photographs, clinical notes, pathology reports, anesthesia records, consent forms.

• Payment and billing information: payment method, bank account details, credit/debit card details (handled in accordance with payment processor rules), billing address, invoices, insurance details when provided.

• Appointment and scheduling information: appointment dates and times, consultation notes, travel and accommodation arrangements related to treatment packages.

• Communications and consent records: records of phone calls, emails, chat messages, telemedicine consultations, consent forms, and requests.

• Technical and usage data: IP address, device identifiers, browser type and version, operating system, pages visited and actions taken on our websites, cookies and similar technologies, log data, referral source.

• Marketing and preference information: communication preferences, marketing opt-ins/opt-outs, survey responses, feedback, and demographic data you provide.

• Video and photographic records: pre- and post-procedure photos and videos used for clinical records, treatment planning, or with explicit consent for marketing/educational purposes.

• Other information: any other personal data you provide directly or that is generated in the course of providing our services.

How We Collect Information We collect information in the following ways:

• Directly from you: when you register, book consultations or procedures, complete forms, communicate with us, or attend consultations and treatments.

• From healthcare providers: referring physicians, clinics, laboratories, imaging centers, or other healthcare professionals involved in your care.

• From payment processors and insurers: to process payments, claims, and reimbursements.

• Through our website and apps: using cookies, analytics tools, forms, and tracking technologies.

• From third parties: where you have authorized the sharing of your information, such as for medical records transfer, or where permitted by law.

• From publicly available sources: limited public records or directory information when needed for identification or safety checks.

Purposes for Processing Personal Data We process personal data for the following purposes:

• To provide medical care: assess, diagnose, plan and deliver surgical and non-surgical medical treatments, perform procedures, provide post-operative care, and manage follow-up.

• To manage appointments and logistics: scheduling, travel and accommodation arrangements included in our packages, reminders, and coordination with