Privacy Policy

Curelia is a healthcare travel coordination platform helping people globally access high-quality medical care in Central Europe. We act as a coordination intermediary — we do not provide medical treatment ourselves.

For the purposes of GDPR, Curelia is the data controller of the personal data you provide to us.

Contact: info@curelia.health

We collect personal data only when you actively provide it. This includes:

• Name and email address — to identify you and communicate about your enquiry
• Country of residence — to understand your context and applicable healthcare options
• Treatment interests — to match you with the right clinic and coordinate your care
• Travel timing preferences — to schedule your trip
• Profile information (phone, address, passport, emergency contact) — only if you choose to provide it, to help coordinate your trip logistics
• Messages and documents — shared during trip coordination

We do not collect or store medical records, diagnoses, or clinical health data. Treatment interest selections (e.g. "Rehabilitation") are logistical preferences, not medical records.

We process your data on the following legal bases under GDPR Article 6:

• Consent — you explicitly tick a consent checkbox when submitting an enquiry
• Contractual necessity — to coordinate your medical travel arrangements
• Legitimate interests — to improve our service and respond to your enquiries

We share your data with:

• Partner clinics in Prague — only the specific clinic coordinating your treatment, only the data necessary for your appointment
• Our internal team — for coordination and support purposes

We do not sell your data. We do not share it with advertisers.

We retain your data for as long as your account is active or as needed to coordinate your care. You may request deletion at any time (see Section 7). Enquiry and communication records are retained for up to 3 years for coordination and legal purposes, unless you request earlier deletion.

We use the following categories of cookies. You can manage your preferences at any time via the "Cookie settings" link in the website footer.

• Strictly necessary — always on, no consent required. Used for login, security, and basic site function.
• Analytics — off by default. Helps us understand how the site is used so we can improve it. Only runs if you accept this category.
• Marketing / attribution — off by default. Lets us see which channels bring visitors to Curelia (e.g. UTM tracking). Only runs if you accept this category.

Non-essential cookies do not run until you actively consent. Visitors from the EU, UK, and Switzerland (and anywhere we cannot reliably determine location) see an opt-in banner with analytics and marketing off by default. US visitors additionally have access to a "Do Not Sell or Share My Personal Information" control, as required by the CCPA/CPRA, available from the same "Cookie settings" link.

As an EU/EEA resident, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of all your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting prior processing
• Restrict processing — in certain circumstances
• Object — to processing based on legitimate interests

You can exercise the right to erasure directly from your profile page in your CurePass account. For all other requests, contact us at info@curelia.health. We will respond within 30 days.

All data is stored on secure, encrypted servers. Access is restricted to authorised team members. We use industry-standard security practices to protect your information.

We may update this policy from time to time. We will notify you of significant changes by email if you have an account with us.