COMPREHENSIVE PRIVACY NOTICE

Last Updated: August 11, 2026

HealthBridge Travel is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by our users, prospective patients, and patients.

This Comprehensive Privacy Notice explains how we collect, use, disclose, store, transfer, and protect personal data in connection with our website, www.travelhealthbridge.com, our medical evaluation process, international patient coordination services, communications, and related services.

1. Identity of the Data Controller

[LEGAL ENTITY NAME], doing business as HealthBridge Travel (“HealthBridge Travel,” “HealthBridge,” “we,” “us,” or “our”), with registered address at:

[FULL BUSINESS ADDRESS]
Monterrey, Nuevo León, Mexico

is responsible for the processing and protection of your personal data.

Contact information:

Email: Info@travelhealthbridge.com
Phone: +52 1 811 000 00
Website: www.travelhealthbridge.com

For purposes of applicable Mexican data protection legislation, HealthBridge Travel acts as the data controller with respect to the personal data it collects directly from you.

2. Personal Data We Collect

Depending on your interaction with HealthBridge Travel and the services you request, we may collect the following categories of personal data.

Identification and Contact Information

We may collect:

• Full name;

• Email address;

• Telephone or mobile number;

• Preferred time to be contacted;

• Country or place of residence;

• Treatment or procedure of interest;

• Stage of your treatment decision;

• Information included in messages, inquiries, or evaluation requests; and

• Any other contact or identification information that you voluntarily provide.

Medical and Health Information

Because our services include preliminary medical evaluation, specialist matching, treatment planning, patient coordination, and follow-up, we may also collect information related to your health, including:

• Medical history;

• Dental history;

• Current or previous medical conditions relevant to the requested treatment;

• Medical records voluntarily provided by you;

• Photographs provided for medical, dental, surgical, or aesthetic evaluation;

• X-rays;

• Medical or dental scans;

• Diagnostic studies;

• Laboratory results when applicable;

• Information regarding previous treatments, surgeries, or procedures;

• Current medications or relevant medical information voluntarily disclosed by you;

• Treatment goals, expectations, and concerns; and

• Other health information necessary to evaluate or coordinate a requested procedure.

Health and medical information may constitute sensitive personal data and will receive enhanced protection.

We will process sensitive personal data only to the extent necessary for the purposes described in this Privacy Notice and, where required by applicable law, after obtaining your express consent.

Travel and Coordination Information

When necessary to coordinate your treatment or visit to Monterrey, Mexico, we may collect information such as:

• Travel dates;

• Appointment availability;

• Arrival and departure information;

• Accommodation preferences;

• Transportation and local logistics information;

• Emergency contact information when voluntarily provided; and

• Information necessary to coordinate your stay, treatment, recovery, and follow-up.

Technical and Website Information

When you visit our website, certain technical information may be collected automatically through cookies, server logs, analytics technologies, or similar tools, including:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Pages visited;

• Date and time of access;

• Referral source;

• General website usage and interaction data; and

• Cookies or similar online identifiers.

3. Sensitive Personal Data and Express Consent

Certain information processed by HealthBridge Travel, particularly information regarding your present or past health, medical history, dental history, diagnostic studies, medical images, photographs, X-rays, scans, treatment needs, procedures, and health conditions, may constitute sensitive personal data.

We will use sensitive personal data only when reasonably necessary to:

• Conduct your preliminary medical or dental evaluation;

• Understand your medical history, treatment needs, goals, and expectations;

• Determine whether you may be an appropriate candidate for a procedure;

• Match you with an appropriate medical, dental, surgical, or aesthetic specialist;

• Develop or coordinate a proposed treatment plan;

• Facilitate communication with participating healthcare professionals;

• Coordinate appointments and procedures;

• Provide treatment-related guidance and patient support;

• Coordinate your travel and treatment experience when necessary; and

• Coordinate post-treatment follow-up and continuity of care.

Where required by applicable law, we will obtain your express consent before processing sensitive personal data.

4. Primary Purposes of Processing

Your personal data may be processed for the following primary purposes, which are necessary to provide the services you request:

• Receiving and responding to your inquiries;

• Processing requests submitted through our website;

• Contacting you regarding your request for information or evaluation;

• Conducting preliminary medical or dental evaluations;

• Reviewing medical information, photographs, X-rays, scans, records, or studies that you provide;

• Understanding your treatment goals, preferences, concerns, and needs;

• Determining preliminary suitability for a requested treatment or procedure;

• Matching you with healthcare professionals or specialists;

• Preparing or coordinating treatment plans;

• Providing information regarding procedures, expected timelines, recovery periods, required visits, and estimated costs;

• Coordinating appointments with medical or dental providers;

• Facilitating communication between you and participating specialists;

• Coordinating travel-related logistics connected to your treatment;

• Providing guidance regarding accommodations, transportation, and local logistics when applicable;

• Coordinating your arrival and treatment schedule in Monterrey;

• Providing patient support during your stay;

• Coordinating post-treatment care and follow-up;

• Maintaining continuity of communication after you return home;

• Providing customer and patient support;

• Maintaining appropriate administrative and service records;

• Protecting the security and integrity of our website and communication systems;

• Preventing fraud, misuse, or unlawful activity;

• Responding to lawful requests from competent authorities; and

• Complying with applicable legal, regulatory, contractual, or administrative obligations.

5. Secondary Purposes

Subject to applicable law and, where necessary, your consent, we may also use your contact information for secondary purposes such as:

• Sending information about HealthBridge Travel services;

• Following up regarding treatments or services in which you previously expressed interest;

• Sending promotional, educational, informational, or service-related communications;

• Conducting satisfaction surveys;

• Requesting feedback regarding your experience;

• Improving our services, website, and patient coordination processes; and

• Developing aggregated or statistical information that does not directly identify you.

You may opt out of these secondary purposes at any time by contacting us at:

Info@travelhealthbridge.com

Choosing not to authorize these secondary purposes will not affect your ability to request an evaluation or receive patient coordination services.

We will not publish your name, photographs, medical information, testimonial, treatment results, before-and-after images, videos, or other identifiable patient information for advertising, social media, promotional, or testimonial purposes without obtaining a separate authorization where required by applicable law.

6. Disclosure and Transfer of Personal Data

To provide the services you request, HealthBridge Travel may disclose or transfer personal information to third parties when reasonably necessary.

These recipients may include:

Healthcare Professionals

Personal and medical information may be shared with selected physicians, dentists, surgeons, clinics, hospitals, laboratories, diagnostic centers, or other healthcare professionals for purposes such as:

• Medical or dental evaluation;

• Reviewing your case;

• Determining treatment suitability;

• Preparing or reviewing a treatment plan;

• Estimating treatment requirements;

• Scheduling consultations or procedures;

• Providing medical, dental, surgical, or aesthetic services; and

• Providing follow-up care.

Because HealthBridge Travel coordinates services with healthcare providers in Mexico for international patients, your information may be transferred between countries as necessary to coordinate your care.

Travel and Logistics Providers

When specifically necessary to coordinate your trip or treatment experience, limited personal information may be shared with transportation, accommodation, or other logistics providers.

Health or medical information will not ordinarily be shared with these providers unless necessary for your safety, specifically requested or authorized by you, or otherwise permitted or required by applicable law.

Technology and Service Providers

We may use third-party service providers that support our operations, including providers of:

• Website hosting;

• Cloud storage;

• Email services;

• Communication systems;

• Customer relationship management systems;

• Appointment management systems;

• Data security services;

• Website analytics;

• IT support;

• Administrative services; and

• Other technological infrastructure.

Such service providers may process personal information only as necessary to perform services on our behalf and subject to applicable confidentiality, security, and data protection obligations.

Legal and Regulatory Disclosures

We may disclose personal information when required to do so by applicable law, court order, regulatory requirement, governmental request, or when reasonably necessary to:

• Comply with legal obligations;

• Protect the rights or safety of patients, users, healthcare professionals, or third parties;

• Prevent fraud or unlawful conduct; or

• Establish, exercise, or defend legal rights.

Where consent for a transfer is legally required, HealthBridge Travel will obtain such consent before carrying out the transfer.

7. International Data Transfers

HealthBridge Travel serves international patients, including individuals residing outside Mexico who travel to Mexico for medical, dental, surgical, or aesthetic treatments.

As a result, your personal information may be processed or transferred across national borders when necessary to provide the services you request.

When international transfers occur, we will take reasonable measures to ensure that personal data is processed with appropriate confidentiality, security, and privacy safeguards and in accordance with applicable data protection requirements.

By requesting international patient coordination services and, where legally required, providing your consent, you acknowledge that certain personal information may need to be shared across jurisdictions in order to evaluate and coordinate your requested services.

8. Cookies and Similar Technologies

Our website may use cookies, analytics technologies, and similar tools to operate properly, maintain security, remember user preferences, understand website performance, measure interactions, and improve the user experience.

Cookies may include:

• Strictly necessary cookies;

• Security cookies;

• Functional cookies;

• Preference cookies; and

• Analytics or performance cookies.

Where required by applicable law, non-essential cookies will be used only after obtaining the appropriate consent.

Users may configure their browser to reject, block, or delete certain cookies. Please note that disabling certain cookies may affect the operation or functionality of some website features.

9. Data Security

HealthBridge Travel maintains reasonable administrative, technical, physical, and organizational safeguards designed to protect personal and sensitive personal data against:

• Unauthorized access;

• Unauthorized use;

• Unauthorized disclosure;

• Loss;

• Alteration;

• Destruction;

• Misuse;

• Accidental disclosure; and

• Unlawful processing.

Because some of the information we process may relate to your health, medical history, or treatment, we apply additional confidentiality considerations to medical and sensitive personal information.

Access to personal information is intended to be limited to individuals, healthcare professionals, and service providers who reasonably require access for the purposes described in this Privacy Notice.

Nevertheless, no Internet transmission, electronic communication, or data storage system can be guaranteed to be completely secure.

10. Data Retention

We retain personal data only for as long as reasonably necessary to:

• Provide the services requested;

• Complete medical or dental coordination;

• Coordinate treatment and follow-up;

• Maintain necessary administrative records;

• Respond to questions or requests;

• Comply with legal, contractual, accounting, tax, or regulatory obligations;

• Resolve disputes; and

• Establish, exercise, or defend legal claims.

The specific retention period may vary depending on the type of information, the nature of the services provided, applicable legal requirements, and whether an ongoing relationship exists with you.

When personal data is no longer necessary for the purposes for which it was collected and there is no legal obligation requiring continued retention, it will be securely deleted, anonymized, blocked, or otherwise disposed of in accordance with applicable requirements.

11. Your ARCO Rights

Under applicable Mexican data protection legislation, you may have the right to exercise your ARCO Rights:

Access

You may request information about the personal data we hold about you and how it is being processed.

Rectification

You may request the correction or updating of personal data that is inaccurate, incomplete, incorrect, or outdated.

Cancellation

You may request the cancellation or deletion of your personal data when legally appropriate.

Opposition

You may object to the processing of your personal data for specific purposes when legally permitted.

To exercise any ARCO right, please submit a request to:

Info@travelhealthbridge.com

Your request should include, as applicable:

• Your full name;

• Contact information for purposes of responding to your request;

• Information reasonably necessary to verify your identity;

• A clear description of the ARCO right you wish to exercise;

• A description of the personal data involved;

• Any information that may help us locate the relevant personal data; and

• Any supporting documentation reasonably necessary to process your request.

If the request is submitted through a legal representative, documentation demonstrating the representative's identity and authority may also be required.

We will process ARCO requests in accordance with the procedures and time periods established by applicable law.

12. Withdrawal of Consent

Where the processing of your personal data is based on your consent, you may request to withdraw that consent at any time by contacting:

Info@travelhealthbridge.com

Your request should contain sufficient information to identify you and understand the consent you wish to withdraw.

Withdrawal of consent will not have retroactive effect and may not apply where continued processing is required or permitted by applicable law.

Please note that withdrawing consent for the processing of medical or health information may make it impossible for HealthBridge Travel to continue:

• Your preliminary evaluation;

• Specialist matching;

• Treatment planning;

• Medical or dental coordination;

• Appointment scheduling;

• Patient support; or

• Post-treatment follow-up.

13. Limiting the Use or Disclosure of Your Information

You may request that we limit the use or disclosure of your personal information for certain non-essential purposes by contacting us at:

Info@travelhealthbridge.com

You may also unsubscribe from promotional or marketing electronic communications using the unsubscribe mechanism included in the communication, when available.

Requests to limit processing will be handled in accordance with applicable law and may be subject to exceptions where processing is necessary to provide requested services or comply with legal obligations.

14. Healthcare Professionals and Independent Third Parties

HealthBridge Travel facilitates and coordinates access to healthcare professionals and providers.

Physicians, dentists, surgeons, clinics, hospitals, laboratories, diagnostic centers, and other healthcare providers involved in your evaluation or treatment may act independently with respect to the professional healthcare services they provide.

These providers may:

• Create and maintain their own medical records;

• Request additional personal or medical information directly from you;

• Require you to sign separate consent forms;

• Maintain their own privacy notices or policies; and

• Have independent professional, legal, or regulatory obligations regarding your information.

This Privacy Notice applies to personal information processed by HealthBridge Travel.

You should also review the privacy notices, consent forms, and policies provided by the healthcare professionals or facilities that ultimately evaluate or treat you.

15. Medical Disclaimer and Privacy Scope

HealthBridge Travel provides patient coordination and facilitation services. Information submitted through our website or provided during an initial evaluation request should not be interpreted as emergency medical care.

If you are experiencing a medical emergency, you should contact the appropriate local emergency services or seek immediate professional medical attention.

The submission of information through our website does not, by itself, create a physician-patient relationship with HealthBridge Travel.

A physician-patient or provider-patient relationship may arise separately between you and an individual healthcare professional or medical facility according to their own procedures and applicable law.

16. Minors

Our services are generally intended for adults.

If personal information regarding a minor is submitted to HealthBridge Travel, it should be provided by the minor's parent, legal guardian, or another person legally authorized to act on the minor's behalf.

We may request additional documentation or authorization where reasonably necessary to verify legal authority before processing sensitive personal information concerning a minor.

17. Third-Party Websites and Social Media

Our website may contain links to social media platforms, healthcare providers, clinics, travel providers, or other third-party websites or services.

HealthBridge Travel does not control and is not responsible for the privacy practices, security measures, content, or data processing activities of third-party websites or platforms.

We encourage you to review the privacy notices and policies of those third parties before submitting personal information directly to them.

18. Changes to This Privacy Notice

HealthBridge Travel may modify or update this Privacy Notice from time to time due to:

• Changes in applicable laws or regulations;

• Changes to our services;

• Changes to our data processing practices;

• Changes to technology or security practices;

• Changes to our relationships with service providers; or

• Internal operational requirements.

The current version of this Privacy Notice will be made available through:

www.travelhealthbridge.com

The “Last Updated” date at the beginning of this Privacy Notice indicates when the most recent revision became effective.

If a modification materially affects the way sensitive personal information is processed, additional notice or consent will be obtained where required by applicable law.

19. Contact Us

If you have questions about this Privacy Notice, the processing of your personal data, the exercise of your ARCO Rights, the withdrawal of consent, or a request to limit the use or disclosure of your information, please contact:

HealthBridge Travel
Legal Entity: [LEGAL ENTITY NAME]
Address: [FULL BUSINESS ADDRESS, MONTERREY, NUEVO LEÓN, MEXICO]
Email: Info@travelhealthbridge.com
Phone: +52 1 811 000 00
Website: www.travelhealthbridge.com

EXPRESS CONSENT FOR SENSITIVE PERSONAL DATA

By voluntarily submitting medical, dental, health, diagnostic, photographic, radiographic, or other sensitive personal information to HealthBridge Travel, and where required by applicable law by actively selecting the corresponding consent option, you acknowledge that you have read this Privacy Notice and expressly consent to the processing of your sensitive personal data for the purposes described herein, including:

• Preliminary medical or dental evaluation;

• Review of your medical history and treatment needs;

• Review of photographs, X-rays, scans, diagnostic studies, or medical records you submit;

• Specialist matching;

• Treatment planning;

• Communication with healthcare professionals;

• Appointment and procedure coordination;

• International patient coordination;

• Travel-related treatment logistics;

• Patient support; and

• Post-treatment follow-up.

You understand that you may withdraw your consent in accordance with the procedures described in this Privacy Notice by contacting:

Info@travelhealthbridge.com