Legal
Privacy Policy
Last updated: 1 June 2026
1. Who We Are
BalcanCare ("we", "us", "our") is a medical tourism platform that connects patients from Western Europe with verified clinics in Bulgaria, Turkey, Greece and Romania. Our platform operates at balcancare.com.
For all data protection enquiries, contact us at: privacy@balcancare.com
2. What Data We Collect
2.1 Inquiry Data
When you submit an enquiry form, we collect: your name, email address, country of residence, the procedure you are interested in, and any message you provide. This data is used solely to connect you with the relevant clinic and to send you information about your enquiry.
2.2 Analytics Data
We use Google Analytics to understand how visitors use our site. This includes pages visited, time spent, device type, and approximate location (country/city level). This data is anonymised and aggregated.
2.3 Cookie Data
We use cookies to remember your preferences and to improve your experience. See our Cookie Policy for full details.
3. Legal Basis for Processing
Under the UK GDPR and EU GDPR, we process your data on the following legal bases:
- ✓Consent: For analytics cookies and marketing communications — you can withdraw consent at any time.
- ✓Legitimate Interest: To respond to your enquiries and improve our platform.
- ✓Contract Performance: To facilitate the connection between you and the clinic you've requested.
4. How We Share Your Data
We share your data only as necessary:
- •With clinics: When you submit an enquiry, your contact details and procedure interest are passed to the relevant verified clinic so they can respond to you.
- •Service providers: We use Resend for email delivery and Google Analytics for site analytics. Both are bound by data processing agreements.
- •Legal requirements: We may disclose data if required by law or to protect our legal rights.
- ✗We never sell your data to third parties or use it for advertising purposes.
5. Data Retention
We retain inquiry data for up to 24 months from the date of submission to allow clinics to follow up and for us to improve our service. Analytics data is retained for 14 months as per Google Analytics settings. You may request deletion at any time.
6. Your Rights
Under the GDPR, you have the following rights:
Right of Access
Request a copy of the data we hold about you.
Right to Rectification
Ask us to correct inaccurate data.
Right to Erasure
Request deletion of your personal data.
Right to Restrict
Ask us to limit how we use your data.
Right to Portability
Receive your data in a portable format.
Right to Object
Object to processing based on legitimate interests.
To exercise any right, email privacy@balcancare.com. We will respond within 30 days.
7. International Transfers
Our partner clinics are located in Bulgaria, Greece and Romania (EU member states) and Turkey. For transfers to Turkey (a non-EEA country), we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.
8. Security
We use HTTPS encryption for all data transmission. Our platform is hosted on Vercel with enterprise-grade security infrastructure. We regularly review our security practices.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email (if you have an active inquiry) or by posting a notice on our website.
10. Contact & Complaints
For any privacy questions: privacy@balcancare.com
If you are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority (e.g. the ICO in the UK, or CPDP in Bulgaria).