Privacy Policy

Privacy Policy & Cookies Policy

Last updated: Jan 2026

1. Introduction

Medis Health Ltd (“Medis Health”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, or use our services.

Medis Health Ltd is a UK-based medical travel and patient facilitation service. We support patients seeking access to international medical care, including treatment at Sheba Medical Center and other affiliated healthcare providers.

Medis Health does not provide medical advice, diagnosis, or treatment. All medical services are provided directly by independent healthcare providers.


2. Who We Are (Data Controller)

Medis Health Ltd
United Kingdom
Email: admin@medishealth.co.uk

For the purposes of UK GDPR and the Data Protection Act 2018, Medis Health Ltd is the data controller of your personal data.


3. Personal Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide Directly
  • Name
  • Email address
  • Phone number
  • Medical information you choose to share
  • Enquiry details and correspondence
b) Technical and Usage Data
  • IP address
  • Browser type and version
  • Pages visited and time spent on the site
  • Device and operating system information
c) Special Category Data (Health Data)

Where you voluntarily provide medical or health information, this is treated as special category data and processed with enhanced safeguards.


4. How We Use Your Information

We use your personal data only where lawful and necessary, including to:

  • Respond to enquiries and provide requested information
  • Facilitate communication with international healthcare providers
  • Coordinate medical travel and administrative support
  • Improve our website and services
  • Comply with legal and regulatory obligations

Medical information is used solely to support coordination and communication with healthcare providers, at your request.


5. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Consent – where you submit information voluntarily
  • Contractual necessity – to provide requested services
  • Legitimate interests – to operate and improve our services
  • Legal obligation – where required by law

Health data is processed only with explicit consent or where necessary for medical coordination requested by you.


6. Sharing Your Data

We may share your data with:

  • International healthcare providers, including Sheba Medical Center
  • Medical coordinators and administrative partners
  • IT, hosting, and website service providers

We do not sell your personal data.

All third parties are required to handle your data securely and in accordance with applicable data protection laws.


7. International Data Transfers

As part of medical coordination, your data may be transferred outside the UK, including to Israel or other countries where healthcare providers are based.

Where international transfers occur, we ensure appropriate safeguards are in place, including contractual protections and compliance with UK GDPR requirements.


8. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes outlined in this policy
  • Meet legal, regulatory, or contractual obligations

Medical information is retained only as long as required to support your enquiry or care coordination.


9. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact: admin@medishealth.co.uk


10. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or disclosure.

However, no online transmission is completely secure, and we cannot guarantee absolute security.


11. Cookies Policy

What Are Cookies?

Cookies are small text files placed on your device to help websites function properly and improve user experience.

Cookies We Use

Our website may use:

  • Essential cookies – required for basic site functionality
  • Analytics cookies – to understand how visitors use our site
  • Performance cookies – to improve site performance

We do not use cookies to collect sensitive medical information.

Managing Cookies

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality.


12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.


13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Continued use of our services indicates acceptance of the updated policy.


14. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Medis Health Ltd
United Kingdom
Email: admin@medishealth.co.uk