This policy explains what personal data we collect, why, how long we keep it, and the rights you have over it. It covers the UK GDPR and Data Protection Act 2018, the EU GDPR, and — where we collect data from residents of the United Arab Emirates — the UAE Personal Data Protection Law.
Who we are
MediConnect World (“we”, “us”) is operated by Bizconnect WorldWide Portal, 1st & 2nd Floor, Holiday Inn Muscat Al Seeb, Al Mawaleh South, Muscat, Oman. We are the data controller for the personal data described here. You can contact us about anything in this policy at You can contact us about anything in this policy.
Because we are established outside the United Kingdom and the European Economic Area, where we process the personal data of people in those regions we do so in accordance with the UK GDPR and EU GDPR, and will appoint a representative under Article 27 where required.
What we collect
We collect only what we need to answer your enquiry and run the site.
- Enquiry details — your name, email address, country of residence, optional phone number, the treatment you are interested in, your approximate timeframe, and anything you choose to write in the message field.
- Newsletter details — your email address and country, if you subscribe.
- Technical data — IP address, browser type, pages visited and referring site, collected through analytics where you have consented to it.
- Attribution data — the page you arrived from and any campaign tags in the URL, so we can understand which content is useful.
- Chat messages — anything you type into our chat assistant, for as long as that conversation is open in your browser. See Chat assistant below.
We deliberately do not collect health data. Our enquiry form does not ask for medical records, diagnoses, scans or clinical history, and we ask you not to send them. Health data is “special category” data under UK and EU law and carries obligations we have chosen not to take on. Clinical information should go to the treating clinic directly, on their own systems.
Why we use it, and our lawful basis
- To respond to your enquiry and pass it to clinics you ask us to contact — lawful basis: performance of a contract, or steps taken at your request before entering one.
- To send you our newsletter — lawful basis: consent, which you give by ticking the box and can withdraw at any time.
- To understand how the site is used and improve it — lawful basis: consent, given through the cookie banner.
- To keep records of enquiries and comply with our legal obligations — lawful basis: legitimate interests and legal obligation.
Who we share it with
We share your enquiry only with the clinics or facilitators you have asked us to contact, and only the information needed to prepare a quote. We never sell your personal data to anyone, for any purpose.
We also use service providers who process data on our behalf under contract: our website host, our email delivery provider, our customer relationship system and our analytics provider. A current list is available on request from [email protected].
Chat assistant
This site offers an automated chat assistant. When you send it a message, that message and the earlier messages in the same conversation are transmitted to OpenAI, L.L.C. in the United States so that a reply can be generated. Our lawful basis is legitimate interests — providing support to visitors — and you are free simply not to use the assistant.
We do not store chat transcripts. The conversation exists only in your own browser for as long as the page is open, and is discarded when you close or reload it. There is nothing held on our servers for us to search, disclose or delete. OpenAI acts as our processor and, under its API terms, does not use the content to train its models; it retains messages for a limited period for abuse monitoring. The transfer to the United States is covered by Standard Contractual Clauses.
If you ask the assistant to pass on an enquiry, the name, email address and details you give it are then stored on this website and handled exactly as an enquiry made through the form — see the retention and rights sections below.
Please do not type medical details into the chat. The assistant is not a clinician, does not give medical advice, and cannot look at your history. As with the enquiry form, we ask you not to send us health data — it belongs with your treating clinic, on their own systems.
International transfers
Clinics you ask us to contact may be outside the UK and European Economic Area — that is inherent in medical travel. Where we transfer your details to a clinic in a country without a UK or EU adequacy decision, we do so on the basis of your explicit request and instruction. Where our own service providers are outside the UK/EEA, transfers are covered by the International Data Transfer Agreement or Standard Contractual Clauses.
How long we keep it
- Enquiries — 24 months from your last contact with us, then deleted.
- Newsletter subscriptions — until you unsubscribe, plus a suppression record so we do not email you again by mistake.
- Analytics data — 14 months.
- Backups — deleted copies persist in encrypted backups for up to 30 days before being overwritten.
Your rights
Under the UK and EU GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EU. We would rather you told us first so we can put it right.
Cookies
We use cookies that are strictly necessary for the site to work, and — only with your consent — analytics cookies that help us understand which pages are useful. No advertising or profiling cookies are set. You can change your choice at any time through our cookie policy.
Children
This site is not directed at people under 18 and we do not knowingly collect their data. If you believe a child has submitted an enquiry, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of the page, and for material changes we will tell subscribers by email.