Privacy notice

JPHealth Consultancy ("we", "us") is a medical travel coordination company based in Dar es Salaam, Tanzania. We help patients and families arrange hospital treatment in India and other countries. We are the data controller for the personal information described in this notice.

You can contact us about anything in this notice using the details on our contact page.

Through our consultation form we collect your name, your phone number or email address, your country of residence, your preferred language and a description of the help you need. Some of what you tell us may relate to your health, which is sensitive personal data under the Personal Data Protection Act, 2022.

If you go on to work with us, we may also collect medical reports, scans, referral letters, passport details and travel information, but only what is needed to arrange your treatment and travel.

Our website uses Cloudflare Web Analytics, which does not use cookies and does not track you across sites, and Cloudflare Turnstile to protect the contact form from automated abuse.

We use your information to respond to your enquiry, to send enquiries to hospitals on your behalf, to help you apply for visas and arrange travel, and to keep in touch about your case.

We rely on your consent, which you give when you tick the box on the consultation form, and on the need to perform the coordination services you ask us for. You may withdraw your consent at any time by contacting us; this will not affect anything we did before you withdrew it.

We share your information only with the people needed to arrange your care: the hospitals you choose to contact, visa and travel service providers, and the technology providers that run our website and email (Cloudflare and Resend). We do not sell your information.

Hospitals and some service providers are outside Tanzania. Before sending health-related information abroad we take reasonable steps to make sure it is protected, and we send it only to the hospital or provider you have chosen.

We keep enquiry details for up to 12 months if you do not go on to use our services. If you do, we keep your case file for as long as needed to provide the service and to meet our legal and accounting obligations, after which it is deleted or anonymised.

Form submissions are sent over an encrypted connection and delivered to a restricted mailbox. Medical documents are stored in access-controlled accounts and shared only through secure channels. Only staff working on your case can see your information.

Under the Personal Data Protection Act, 2022 you have the right to ask what personal information we hold about you, to ask us to correct or delete it, to object to or restrict how we use it, and to withdraw your consent. To exercise any of these rights, contact us using the details on our contact page. You also have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania.

We may update this notice from time to time. The date at the top shows when it was last changed. Significant changes will be announced on this page.