الخصوصية
Privacy Notice
How Tvarus Global collects, uses, shares and protects personal information — including health information — when you use this platform to plan treatment in India.
الإصدار 1، ساري اعتبارًا من 23 أغسطس 2026.
About this notice
This notice explains how TVARUS HEALTHCARE GLOBAL PRIVATE LIMITED (“Tvarus”, “we”, “us”), which operates this platform under the name Tvarus Global, handles personal information when you visit this website, send an enquiry, open a patient account, or travel for treatment with our coordination.
Read it together with our Terms of Use, which set out the agreement between you and us. Where a hospital, doctor, service partner, diplomatic mission or payment provider receives your information, that organisation decides for itself what it does with what it holds and publishes its own notice. This one covers what we do.
Who we are, and how to reach us
Tvarus is a company incorporated in India. On this platform we decide why and how your personal information is processed: under India’s data protection law we are the data fiduciary for that processing, and laws elsewhere may call the same role the controller.
- Company
- TVARUS HEALTHCARE GLOBAL PRIVATE LIMITED
- Trading name
- Tvarus Global
- General enquiries
- info@tvarusglobal.com
- Patient support
- support@tvarusglobal.com
- Telephone and WhatsApp
- +91 99597 09994
- Hours
- Monday to Saturday, 09:00–18:00 India Standard Time
- Website
- www.tvarusglobal.com
A message about privacy, a request about your rights, or a grievance can be sent to either address above; mark it for the attention of the privacy team and it is routed to the person responsible for privacy and grievances.
What this notice covers
It covers:
- the public website — the hospital and doctor directory, treatment and care-area pages, packages, guides and articles;
- the enquiry you send and the case that is opened from it;
- your patient account, and everything you can reach while signed in;
- documents you upload, and documents a hospital issues to you;
- consultations arranged through the platform, and the messages exchanged around them;
- the emails, SMS and WhatsApp messages we send you about a case; and
- payments of platform fees made on this site.
It does not cover what a hospital or a treating doctor does with records you asked us to send them, what a mission does with an application you make to it, or what an independent website does when you follow a link away from here. Those organisations act on their own account and answer for their own handling.
The information we collect
We ask for the least we need at each step, and most of the platform can be browsed with no account and no personal information at all.
- Identity and contact
- Name, date of birth, sex, nationality, country and city, email address, telephone and WhatsApp number, the language you prefer to read, and — where you are travelling with someone — the same details for your companions.
- Health information
- The condition you describe, your symptoms and history, the treatment or opinion you are seeking, medical reports, imaging, laboratory results, prescriptions, discharge summaries and any clinical question you send. This is sensitive information and section 7 sets out the extra rules that apply to it.
- Travel and immigration
- Passport and identity documents, visa documents and application details, planned travel dates, and accommodation and attendant preferences.
- Case records
- Your enquiries, the hospitals you selected, the estimates and quotations returned to you, appointments, consultation records, coordination tasks, and post-treatment follow-up.
- Payments
- Records of the platform fees you pay here: the amount, the currency, the date, the reference and the result. Card and bank details are entered with the payment provider and are not stored by us.
- Communications
- Messages you exchange with our coordinators and, where you have asked us to, with a hospital; support requests; and delivery records for the messages we send you.
- Consents and permissions
- What you agreed to or withdrew, when you did so, and the version of the document or request it applied to.
- Technical information
- IP address, device and browser, the pages you open, approximate region, sign-in events, and the security and audit records the platform keeps.
Where the information comes from
- From you — what you type, upload, choose and tell us.
- From someone acting for you with your authority: a family member, a referral partner, a facilitator or a mission that opens or manages an enquiry on your behalf.
- From the hospitals and doctors handling your case, in the responses, opinions, quotations, appointment records and documents they return.
- Automatically from your device when you use the site, as described in section 12.
Why we use it
Every use has a purpose and a lawful basis. Where the basis is consent, the choice is yours, it is asked separately from every other choice, and you can withdraw it.
- Answering your enquiry and coordinating your case
- To provide the service you asked us for.
- Sending your records to hospitals for review
- Your specific consent, asked for each hospital and each purpose.
- Arranging and running consultations
- Your consent to take part. Recording, and transcription or translation of a consultation, are asked for separately and stay off unless you agree.
- Supporting visa and travel preparation
- To provide the service you asked us for. The decision on a visa belongs to the mission, never to us.
- Taking payment of platform fees and issuing receipts
- To perform our agreement with you, and to meet tax and accounting duties.
- Keeping your account and the platform secure
- Our legitimate interest in operating the service safely, and our legal duties. This includes the audit trail described in section 11.
- Sending service messages about your case
- To provide the service. These are not marketing; while a case is live you can choose the channel but not switch the messages off.
- Sending marketing messages
- Your separate consent, withdrawable at any time without affecting anything else.
- Meeting legal obligations and lawful requests
- Compliance with the law that applies to us.
We do not use health information to advertise, we do not build advertising profiles, and we do not make health information available to advertising networks.
Health information, and the consent that governs it
Health information is the most sensitive thing you give us, and it moves only when you tell it to.
- Nothing about your condition reaches a hospital until you ask for it. Permission is asked per hospital and per purpose, and it is recorded with the time and the version of the request you agreed to.
- Hospitals receive the minimum needed at the stage the case has reached. Documents are released in stages, so an identity document such as a passport goes only to the hospital you have chosen, at the point that hospital genuinely needs it — not to every hospital that was asked for an estimate.
- You can withdraw a sharing permission at any time. Withdrawal stops further access and cancels outstanding links.
- Withdrawal cannot un-send what has already been delivered. A record a hospital has already received is held by that hospital under its own notice and its own legal duties, and you may need to approach it directly.
We keep a record of each permission and each withdrawal, so that both you and we can see what was agreed and when.
Where it is held, and transfers between countries
The platform and its records are hosted in India.
Coordinating treatment in India necessarily moves information across borders: what you send from your own country reaches us and the hospital in India, and their responses travel back to you. Asking us to coordinate is asking for that transfer.
Where a provider we use processes information outside the country you live in, we put contractual protections in place. The law of another country may differ from your own, and its public authorities may have rights of access that your own law does not give.
How long we keep it
We keep information for as long as the purpose needs it, and after that for as long as a law, a contract, or a live or reasonably expected dispute requires.
Categories are not kept for the same length of time. An enquiry that never became a case, a completed case with clinical records in it, a payment record with tax significance and a security log each have their own period. We do not apply one blanket period to everything, and we do not keep information merely because storage is cheap.
At the end of a period, records are deleted or irreversibly anonymised. Where a record is under a legal hold we keep it until the hold lifts; if that limits what we can do with a deletion request, we tell you so rather than quietly refusing it.
How we protect it
- Sign-in is passwordless: a single-use code is sent to your registered address. We hold no password for your account and will never ask you for one.
- Information is encrypted in transit, and sensitive fields and documents are encrypted where they are stored.
- Documents live in private storage that is not publicly addressable. Access is through short-lived, narrowly scoped links issued to a person entitled to them.
- Access is limited by role. Our staff see what their role requires; a hospital user sees only the cases released to them, and only for as long as the purpose lasts.
- Sensitive views, downloads, exports and access grants are written to an audit trail that records what was done and by whom, without copying the contents.
- Fonts, images and scripts are served from our own infrastructure rather than a third-party network, so simply reading a page here does not disclose your address to another company.
No platform can promise perfect security. If a breach occurs that is likely to affect you, we will inform you and the relevant authority as the law requires.
Children, and people who cannot decide for themselves
The platform is for adults. A person under 18, or an adult who cannot make this decision for themselves, must be represented by a parent, a legal guardian or a lawful representative, who provides the information and gives the permissions on their behalf.
We do not knowingly allow a child to open an account. If you believe a child’s information has reached us in that way, write to us and we will remove it.
Decisions about you
We do not make decisions about your treatment by automated means. Search, filters, ordering and suggestions on this site are tools for comparing options. They are not a medical opinion, they are not paid placement, and every choice — which hospital, which quotation, whether to travel — is yours.
Your rights
Subject to the law that applies to you, you can:
- ask what we hold about you, and obtain a copy of it;
- have inaccurate or incomplete information corrected, completed or updated;
- ask for information to be erased where we no longer have a reason to keep it;
- withdraw a consent at any time, as easily as you gave it;
- nominate another person to exercise your rights if you die or become unable to act for yourself;
- complain to us, and to the data protection authority with jurisdiction over you or over us.
Depending on the country you live in, you may also be able to ask us to restrict or stop a particular use, or to receive a copy of what you gave us in a portable form.
Signed-in patients can see and change most permissions under Privacy and consent in their account. For anything else, write to us. We will ask for enough to be satisfied that the request is genuinely yours, answer within the time the law allows, and — if we cannot do what you asked — say so and say why.
Complaints and grievances
If something has gone wrong, tell us first. Write with what happened and what you would like done about it. We acknowledge grievances, look into them, and reply with an outcome.
If our answer does not satisfy you, you may take the matter to the data protection authority with jurisdiction over you or over us.
The law that applies
Our processing in India is governed by the Digital Personal Data Protection Act, 2023 and the rules made under it. Other laws may apply to you where you live, and where they do we honour the rights they give you.
This notice describes what we actually do. It is not a claim to hold a certification, an audit report or a compliance seal from any body, and nothing on this site should be read as one.
Changes to this notice
This notice is versioned and effective-dated; the version and date shown at the top of this page are the ones in force. When we change something that materially affects you we will bring it to your attention, and where a use rests on your consent we will ask again rather than assume an old answer covers a new purpose.
The notice is published in English. A translation may be offered for convenience; where a translation and the English text disagree, the English text governs.
Contact us
Write to us about anything in this document, or about how your information or your case is being handled.
- Company
- TVARUS HEALTHCARE GLOBAL PRIVATE LIMITED
- Trading name
- Tvarus Global
- General enquiries
- info@tvarusglobal.com
- Patient support
- support@tvarusglobal.com
- Telephone and WhatsApp
- +91 99597 09994
- Hours
- Monday to Saturday, 09:00–18:00 India Standard Time
- Website
- www.tvarusglobal.com
Tvarus is not an emergency service and does not provide medical care. If you have a medical emergency, contact your local emergency number or go to the nearest hospital immediately.