1. Who we are
Care Beyond Borders ("we"). Care Beyond Borders is being set up as a private company in India; company registration details will be published here once incorporated. For India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary; for the UK GDPR we are the controller.
Grievance contact: [email protected].
2. What we collect
- Details you give us: name, email, phone or WhatsApp number, country, travel dates, the services you're interested in, and your message.
- Travel details you choose to share when we plan a trip: passport name, flight times, accommodation preferences, dietary and accessibility needs, and details of people travelling with you.
- Basic technical data our hosting provider records when you visit (such as IP address and browser type) for security.
Health details. You may share health details in your enquiry so we can answer it. Please don't send scans or medical reports through the website form; if they're needed, we'll send you a secure way to share them. We use health details only to answer your enquiry and to share them with hospitals you choose, and you can withdraw consent at any time.
3. Why we use it
- To reply to your enquiry and give you a quote for our services.
- To plan and run your trip: bookings, transfers, stays, interpreters and appointment requests to providers you choose.
- To meet legal obligations, such as tax and accounting records.
We use your data only with your consent, or where the law otherwise allows it. We do not sell personal data. We do not send marketing without separate consent.
4. Who we share it with
Only as needed to arrange your trip and with your agreement: the hospitals, centres or practitioners you choose; hotels, transport and interpreter services; any independent partner coordinators abroad; and service providers that host our website, email and forms. Enquiries sent through our contact form are delivered to us by email through a third-party form service (FormSubmit), and our website is hosted by Cloudflare. Some of these providers may be outside India.
5. How long we keep it
We keep enquiries that don't proceed for no longer than 12 months, and client records for as long as the law requires. When we no longer need it, we delete it.
6. Your rights in India (DPDP Act 2023)
- Withdraw your consent at any time, as easily as you gave it, by emailing [email protected].
- Ask for a summary of the personal data we hold and how we use it.
- Ask us to correct, complete, update or erase your personal data.
- Have your grievance addressed by us, and if you're not satisfied, complain to the Data Protection Board of India.
- Nominate a person to exercise your rights if you die or become incapable.
7. If you're in the UK (UK GDPR)
Our lawful bases are your consent (enquiries), steps before or under a contract with you (planning your trip) and legal obligation. You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. You can complain to the Information Commissioner's Office.
8. Children
Our services and this website are for adults. We don't knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian.
9. Cookies
This site sets no cookies of its own and uses no analytics. Its fonts are hosted on our own site, so no font requests go to Google or other third parties. Our contact form is processed by FormSubmit, which may show a spam check (captcha) when you send an enquiry. We will update this notice before adding analytics, chat widgets or cookies.
10. Security
We use reasonable security safeguards to protect personal data. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
11. Changes
We will post any changes here and update the date above.