Privacy Policy

Last updated: 24 August 2026

Pre-launch legal review: This operational draft should be reviewed by qualified Albanian counsel before the production-domain launch.

1. Who controls your information

Albania Medical Tour, 7, Rruga Endri Keko 760, Tiranë, Albania, operates this website and coordinates treatment enquiries. Contact: info@albaniamedicaltour.com.

2. Information we collect

When you submit a treatment-plan request, we collect the information you provide, which may include your name, email address, country of residence, preferred language, treatment interest, preferred clinic, your question, consent record and source page. A free-text response may contain health-related information. The initial form does not request passports, identification numbers, payment-card data, file uploads or complete medical records.

We may also process limited technical and security information needed to deliver the website, prevent abuse and diagnose faults. Logged-in administrators and ecommerce functions may use essential cookies as described in the Cookie Policy.

3. Why and on what basis we process information

We use ordinary contact information to respond to requests, operate the website, maintain security and take steps requested before arranging a service. Where you choose to provide health-related information, we rely on your explicit consent for the specified treatment-enquiry coordination purpose, subject to applicable law. You may withdraw consent by contacting us; withdrawal does not affect processing already completed lawfully.

4. How we use treatment enquiries

We review the request, identify or contact a clinic consistent with your selection, organise communications and help clarify the next practical step. A submission does not create a doctor-patient relationship and is not a diagnosis, medical advice, confirmation of suitability, quotation or appointment.

5. Recipients

Access may be provided to authorised Albania Medical Tour personnel; the clinic or clinics you select or later approve; hosting, email, form, security and technical providers acting for website operation; professional advisers where necessary; and authorities where disclosure is legally required. A clinic becomes independently responsible for information it receives and processes for clinical assessment and care.

6. International transfers

Albania is outside the EU and EEA and is not currently covered by an EU adequacy decision. If personal information is transferred from the EU or EEA to Albania or another country, we will assess the transfer and use an applicable safeguard or lawful exception where required. Sensitive documents should not be transferred until the recipient, purpose and transfer method have been confirmed.

7. Security and communications

Form entries are stored in the WordPress database with access restricted to authorised administrators. Administrative notification emails contain limited routing information and direct staff to review the full entry in WordPress. No internet transmission is completely secure. Do not send passports, payment information or complete medical files through ordinary email.

8. Retention

Treatment enquiries are normally retained for up to 180 days after the last meaningful contact, then deleted or anonymised, unless an active request, legal obligation, complaint, security incident or legal claim requires longer retention. Consent and deletion records may be retained as necessary to demonstrate compliance.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or information about recipients; object to certain processing; and withdraw consent. We may need to verify identity. You may also complain to the Albanian Information and Data Protection Commissioner or another competent supervisory authority.

10. Cookies, third-party content and marketing

See the Cookie Policy for current website storage. We do not currently use advertising pixels or analytics on staging. We do not use treatment-enquiry information for unrelated marketing without separate permission. Third-party embedded content may operate under the provider’s own privacy terms.

11. Children, emergencies and changes

The enquiry service is intended for adults. A parent or lawful guardian should contact us before submitting information about a child. Do not use this website for emergencies. We may update this policy as services, providers, domains or legal requirements change.