Last updated:
Who is responsible for your information?
MedCare by Vacations Georgia is operated by Vacations Georgia LLC, which is responsible for the personal information we handle. Our business address is 15 Petre Kavtaradze St, Tbilisi 0186, Georgia. For privacy questions or requests, email medcare@vacationsgeorgia.ge.
What we collect and why
Our enquiry forms request your name, email address, country calling code and phone number so we can respond. Your message and attachments are optional. You may send relevant photographs, scan reports and PDF or Word documents to help a doctor prepare a detailed treatment plan. Please send only information relevant to your enquiry.
The MedCare and Vacations Georgia team handles your enquiry and coordinates the services you request: appointments, doctor consultations, treatment planning, hotels, airport transfers, transport and follow-up. We use your information for enquiries and bookings only. We do not use it for promotional emails or WhatsApp campaigns.
We process contact and booking details to respond to your request and arrange or fulfil your booking. We rely on your explicit consent to handle any health information you choose to provide. Medical files are optional for an initial enquiry, although a doctor may need them before preparing an individual plan. We also process limited technical data for our legitimate interest in protecting the website from abuse, and retain records where a legal obligation requires it.
Who we share information with
Our team obtains your confirmation before sharing your personal information with a doctor or clinic. Relevant scans and photographs are shared for assessment and treatment planning. Website submissions go to our team and are not automatically forwarded to a clinic.
With your confirmation, hotels and transport providers receive only the guest name and the programme or itinerary needed for the arrangement. They do not receive your scans or medical photographs. Information may also be disclosed where required by law.
Where your information is handled
We keep enquiry correspondence and files in Gmail and WhatsApp. Website forms are processed through Cloudflare and delivered to our business Gmail inbox. Uploaded files are checked and handled temporarily in server memory; they are not saved as public website files or in a website patient database. Our team accesses your information to handle your enquiry and arrangements.
Cloudflare, Google and WhatsApp operate internationally, so information may be processed outside Georgia, including in the United States and Europe. Their notices explain their processing and transfer safeguards: Cloudflare, Google and WhatsApp. Contact us for more information about the services used for your enquiry.
The website uses encrypted connections and checks uploaded file types and sizes. Hosting providers process connection information to deliver and protect the service. Our spam and duplicate-submission checks keep hashed identifiers and delivery status, rather than message or file contents. These checks expire after 15 minutes; expired entries are cleared when subsequent requests are processed.
How long we keep information
We keep enquiries and medical files while handling your enquiry, arranging care and completing follow-up. When that work is closed, our team reviews and deletes information no longer needed, including copies we hold in Gmail and WhatsApp. Necessary records are kept longer where legal obligations or an unresolved claim require them, and only for those purposes.
Deletion from service-provider backups may take additional time under their retention procedures. A clinic may have separate requirements for its clinical records; we can help direct a request to the relevant clinic.
Your choices and rights
Contact medcare@vacationsgeorgia.ge to request access to or a copy of your information, correction, deletion or restriction of its use. You may withdraw consent at any time and, where applicable, object to processing or request a portable copy. Withdrawal does not affect earlier lawful processing, but may prevent us from continuing arrangements that need that information.
We may need to verify your identity. Legal retention requirements can limit deletion. You may complain to the State Audit Office of Georgia or seek a remedy through the courts, as provided by Georgia’s data protection law.
Cookies and links
Optional analytics and advertising tracking are disabled. Our hosting provider may use essential security technologies. Fonts are hosted locally. Opening WhatsApp or another external link takes you to a service with its own privacy terms.
Updates to this policy
We will update this page and its date when our practices change.
