How your medical records are handled
Encrypted transfer, encrypted temporary storage, transfer to the clinical record, then automatic deletion — and never on the website’s servers.
Sending scans and discharge summaries to a foreign provider is a reasonable thing to be cautious about. This is what happens to them.
The route
Files are sent over an encrypted link, held in encrypted temporary storage, passed into the clinical record, and then deleted automatically from the temporary store. They are not kept on the web server.
The contact form does not accept attachments at all. Indicate that you have records and the secure upload link arrives with the reply — which is also why you should not email scans unprompted.
What is never asked for
National identity numbers are not requested on any form on this site. Neither is payment information. A form that asks for either is not ours, and that is worth knowing in an industry with a lot of imitation.
Consent to process health information is a separate, explicit checkbox rather than something bundled into a general acceptance.
Who sees them
The clinical team preparing the plan, and the international office coordinating the case. Records are not used for marketing and are not passed to third parties for that purpose.
If you want the detail rather than the summary, the privacy policy on this site sets out the legal basis, the retention periods and how to exercise your rights.
Topic
More in Medical records and data
- Why the images matter more than the reportA radiology report answers the question it was asked. Rehabilitation often asks a different one — so send the study, not the summary.
- Your rights over your own dataAccess, correction, deletion and withdrawal of consent — how to exercise them and what to expect.
