PRIVACY POLICY
Last Updated: 18 September 2026
DRGO International Ltd (“DRGO International”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, make an enquiry or booking, make a payment, or use our travel and health tourism coordination services.
1. Data Controller
DRGO International Ltd is the data controller responsible for personal information that we collect and process for our own business and coordination purposes.
Healthcare providers, hospitals, clinics, doctors, dentists and certain other third-party service providers may act as separate data controllers in relation to the information they receive and process for their own purposes. Their processing may also be subject to their own privacy policies.
DRGO International Ltd
Company Registration Number: 17419324
Registered Office: 17 Green Lanes, London, N16 9BS, United Kingdom
Email: info@drgointernational.co.uk
2. Information We Collect
Depending on the services you request, we may collect:
- your name, date of birth and identification information;
- your email address, telephone number and postal address;
- passport and travel information where required for travel arrangements;
- booking, accommodation and transportation information;
- payment and transaction information;
- information provided during enquiries, consultations and communications with us;
- medical, treatment-related or health information where necessary to coordinate healthcare services;
- photographs or other information you choose to provide in connection with a treatment enquiry or booking; and
- any other information you voluntarily provide to us.
Health information is treated as special category personal data under UK data protection law and is subject to additional protections.
We will only collect health-related information where it is relevant and reasonably necessary for the requested health tourism coordination services.
3. How We Collect Your Information
We may collect personal information:
- directly from you when you contact us, complete a form, make a booking or communicate with us;
- through our website and online communication channels;
- through authorised representatives acting on your behalf;
- from healthcare providers or other service providers involved in your booking, where appropriate;
- from Stripe, Wise, banks or other payment providers in connection with payments, refunds or transactions; and
- from other third parties involved in delivering the services you request.
4. How We Use Your Information
We may use your personal information to:
- respond to enquiries and provide information about our services;
- process and manage bookings and payments;
- arrange accommodation, airport transfers and transportation where included in your booking;
- coordinate medical, dental, surgical or aesthetic treatment with the relevant healthcare provider;
- communicate with healthcare providers where necessary for the services you have requested;
- communicate with you regarding your booking, travel arrangements and services;
- provide customer support;
- process payments, refunds and resolve payment or booking issues;
- maintain appropriate business and transaction records;
- comply with legal, regulatory, accounting and tax obligations;
- prevent fraud and maintain the security of our services and systems; and
- improve our services and customer experience.
We only collect and use personal information that is reasonably relevant and necessary for these purposes.
5. Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may process your personal information where:
Contract: processing is necessary to take steps at your request before entering into a contract or to perform our contract with you, including managing bookings, payments and coordinating requested services.
Legal obligation: processing is necessary for us to comply with legal, tax, accounting, financial or regulatory obligations.
Legitimate interests: processing is necessary for our legitimate business interests, such as providing customer support, managing our business, preventing fraud, protecting our systems and improving our services, provided those interests are not overridden by your rights and interests.
Consent: where required, we may rely on your consent for specific processing activities. You may withdraw your consent at any time, although this will not affect processing that took place before withdrawal.
6. Health and Special Category Information
Medical and health information is classified as special category personal data under UK data protection law.
Where we need to process health information in connection with health tourism coordination, we will identify both an appropriate lawful basis under Article 6 of the UK GDPR and an appropriate condition for processing special category information under Article 9.
Depending on the circumstances and applicable law, this may include your explicit consent or another applicable legal condition.
We will only request and share health information that is reasonably necessary to coordinate the services you have requested.
Clinical assessment, diagnosis, medical advice and treatment decisions remain the responsibility of the relevant independent healthcare professional or healthcare provider.
7. Sharing Your Information
Where reasonably necessary to provide the services you have requested, we may share relevant personal information with:
- healthcare providers, clinics, hospitals, doctors and dentists;
- hotels and accommodation providers;
- airport transfer and transportation providers;
- Stripe, Wise, banks, payment processors and other financial institutions;
- technology, website hosting, communication, CRM and customer support service providers;
- accountants, lawyers and other professional advisers; and
- regulators, courts, law enforcement agencies or other authorities where required by law.
We only share personal information that is reasonably necessary for the relevant purpose.
Third-party providers may process your information as our service providers or as independent data controllers depending on the circumstances and the services they provide.
8. International Transfers
As part of our international travel and health tourism coordination services, personal information may be transferred to or accessed by healthcare providers, payment providers and other service providers located outside the United Kingdom, including in Türkiye.
Where UK international data transfer rules apply, we will ensure that the transfer is made using a mechanism permitted by applicable UK data protection law.
Where the destination is not covered by applicable UK adequacy regulations, we may use appropriate safeguards, including approved contractual data protection arrangements, or another permitted transfer mechanism or exception where legally applicable.
Where required, we will take appropriate steps to assess and protect personal information transferred outside the United Kingdom.
9. Payments, Stripe and Wise
We may use Stripe and Wise, as well as banks and other financial institutions, to receive and process payments, transfers, refunds and other financial transactions.
When you make a payment or transfer, certain personal and transaction information may be provided directly to Stripe, Wise or the relevant financial institution for purposes including:
- processing payments and transfers;
- confirming transactions;
- processing refunds;
- fraud prevention and security;
- identity or payment verification where required;
- regulatory and legal compliance; and
- handling payment disputes or transaction enquiries.
Where payments are made by debit or credit card through Stripe, we do not normally store complete payment card details ourselves. Card details are generally collected and processed through Stripe's secure payment systems.
Where payments or transfers are made using Wise, Wise may process information relating to the sender, recipient, bank account, payment or transfer and other information required to complete the transaction and comply with its legal and regulatory obligations.
Stripe and Wise may process personal information as independent data controllers or service providers depending on the particular processing activity. Their processing is also governed by their respective privacy notices and applicable legal obligations.
We may receive payment-related information from Stripe, Wise or other financial institutions, including:
- payer or sender information;
- transaction amount;
- currency;
- payment or transfer date;
- transaction status;
- payment reference;
- refund information; and
- limited information concerning the payment method or account used.
We may retain appropriate transaction information for accounting, tax, legal, regulatory, fraud prevention, dispute resolution and business record purposes.
10. Marketing Communications
Where permitted by law, we may contact you regarding our services, offers or other relevant information.
Where consent is required for electronic marketing, we will obtain the appropriate consent before sending such communications.
Where applicable law permits us to contact existing customers without separate consent, we will provide a clear opportunity to opt out.
You may ask us to stop sending marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.
Service-related communications concerning an existing enquiry, booking, payment or transaction are not marketing communications and may continue where necessary to provide the requested services.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Certain cookies may be necessary for the website to function correctly. Other cookies, including analytics, advertising or marketing technologies, will be used in accordance with applicable legal requirements and, where required, only after obtaining your consent.
You may manage your cookie preferences through the cookie settings available on our website.
Further information about the cookies we use may be provided in our Cookie Policy.
12. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
The appropriate retention period may depend on:
- the nature of the information;
- the services provided;
- contractual requirements;
- legal, accounting, tax or regulatory requirements;
- the need to establish, exercise or defend legal claims; and
- the nature of any ongoing relationship with you.
When personal information is no longer reasonably required, we will securely delete, anonymise or otherwise dispose of it in accordance with applicable law and our retention procedures.
13. Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse or destruction.
Access to personal information is limited to personnel, service providers and other authorised parties who require access for legitimate business or service-related purposes.
Because no electronic transmission or storage system can be guaranteed to be completely secure, we cannot guarantee absolute security.
14. Your Data Protection Rights
Subject to applicable law and certain exemptions, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing;
- request transfer of information where the right to data portability applies; and
- withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, please contact us using the details provided below.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.
15. Automated Decision-Making
DRGO International Ltd does not currently make decisions about clients based solely on automated processing where those decisions produce legal effects or similarly significant effects.
If this changes, we will provide the information and safeguards required by applicable data protection law.
16. Information Required to Provide Our Services
Certain personal information may be required in order for us to process a booking, receive or process a payment, arrange travel-related services or coordinate healthcare services.
If you do not provide information that is reasonably necessary for these purposes, we may be unable to provide some or all of the requested services.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, business practices, payment providers or legal requirements.
The latest version will be published on our website together with the date on which it was last updated.
18. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
DRGO International Ltd
Company Registration Number: 17419324
Registered Office: 17 Green Lanes, London, N16 9BS, United Kingdom
Email: info@drgointernational.co.uk