Medical & Wellness Privacy Policy

This policy covers our medical & wellness pages specifically — what happens to the information you share when you enquire about a treatment or wellness stay in Albania (for example a hair transplant, dental work, a cosmetic procedure, or a wellness programme). For everything else, our general Privacy Policy applies.

AlbaniaVisit is operated by Ronin Holdings LLC, a Texas (US) limited liability company (“AlbaniaVisit,” “we,” “us”). We are a travel and coordination facilitator, not a healthcare provider. We do not perform, supervise, or give medical advice, diagnosis, or treatment. Medical care is provided solely by independent partner clinics. This policy is written to meet the UK GDPR and Data Protection Act 2018 (for UK visitors), the EU GDPR (for EU/EEA visitors), and applicable US state privacy law.

Questions or requests about your data go to privacy@albaniavisit.com.

The information we collect

• From the enquiry form:your name, email, phone, the type of care you're interested in (hair transplant, dental, wellness, or cosmetic), and anything you write in the message.
• Health information. The type of care you select and anything you write can reveal information about your health. Under the UK/EU GDPR this is a “special category”of data (Article 9) that gets extra protection. Please only share what's necessary at this stage — you don't need to send medical records, diagnoses, images, or test results through the form, and we ask that you don't.
• Automatically: basic technical data (IP address, browser type, pages visited) to run and secure the site.

Our medical & wellness services are for adults aged 18 or over. We don't knowingly collect health information from children.

Why we use it, and our lawful basis

We use your information only to respond to and coordinate your enquiry. Because your enquiry can reveal health information, we rely on your explicit consent under Article 9(2)(a) of the UK/EU GDPR to process it and to share it with partner clinics — the consent you give at the form. That consent is specific to responding to and coordinating your enquiry; we won't use your health details for anything else, we never use them for marketing, and we never sell your data.

• Receive and respond to your enquiry, and contact you to discuss it.
• Share the relevant details with partner clinic(s) and operator(s) so they can assess your enquiry, provide information or a quote, and coordinate treatment and travel.
• Coordinate the non-medical side — travel, transfers, and accommodation.
• Keep records and, where necessary, establish, exercise, or defend legal claims.

Who we share it with

• Partner clinics and operators in Albania— only the details they need to respond to your enquiry, and only after you've consented. Once we pass your details to a clinic, that clinic is an independent provider and an independent controller of your data; its own privacy terms then apply to how it uses it.
• Service providers that run our systems (hosting, database, email, secure storage) under contracts that require them to protect your data and use it only on our instructions.
• Professional advisers, insurers, or authorities where the law requires it or to establish, exercise, or defend a legal claim.

We do not sell your personal data or share it with advertisers.

Sending your information to Albania

To act on your enquiry we transfer your information to partner clinics and operators in Albania. Albania has adopted a data-protection law modelled on the GDPR, but it is not currently covered by a UK or EU “adequacy” decision. We therefore protect these transfers using recognised safeguards — Standard Contractual Clauses(and, for UK data, the UK International Data Transfer Agreement) with the receiving clinic/operator — or, where those aren't available for a particular clinic, your explicit consent to that specific transfer, given after we've told you about the risks of sending health data to a country without an adequacy decision. You can ask us about the safeguards we use at privacy@albaniavisit.com.

How long we keep it

• Enquiries that don't proceed: kept for up to 12 months in case you re-contact us, then deleted or anonymised.
• Enquiries that lead to a booking: we keep the records needed to coordinate your trip and to meet legal, tax, and complaint-period requirements.
• Health details you write in the message: kept only as long as needed for your enquiry, and deleted or minimised sooner where we can.

If you withdraw consent, we stop processing your health data and delete it, unless we have another lawful basis to keep a limited record (for example, to handle a complaint or legal claim).

How we protect it

We use appropriate technical and organisational measures — encryption in transit, access controls, and need-to-know staff access — and we work with contracted providers under written agreements. No transmission over the internet is completely secure, so we can't guarantee absolute security, but we take reasonable steps to protect your information and to limit who can see health-related details.

Your rights

You can email privacy@albaniavisit.com to get a copy of what we hold, correct it, delete it, restrict or object to a use of it, or withdraw your consent at any time— free, and without affecting anything we did before you withdrew. Once we've already shared details with a clinic at your request, you may also need to contact that clinic directly about data it holds as an independent controller. We respond within one month (extendable for complex requests, and we'll tell you if so), and we may need to verify your identity first.

If you're in the UK or EU/EEA, these are your rights under the GDPR and you may also complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU/EEA, your national data protection authority. California residents may exercise equivalent rights; we do not “sell” or “share” personal information as California law defines those terms.

Changes & contact

We'll post updates here with a new “last updated” date. Material changes affecting an active enquiry or booking will be emailed to you.

Contact: Ronin Holdings LLC (Texas, USA) · privacy@albaniavisit.com