Privacy Policy

Introduction

Credible Medical Assistance ("CMA", "we", "our", "us") is committed to protecting the privacy, confidentiality, and security of personal and medical information entrusted to us. As an international medical assistance and insurance coordination provider, we handle sensitive healthcare and client data with the highest level of responsibility and compliance.

This Privacy Policy outlines how we collect, use, store, protect, and process personal information.

1. Scope of Policy

This Privacy Policy applies to:

• Insured patients and travelers
• Insurance companies and assistance partners
• Medical providers and network facilities
• Corporate clients
• Website visitors

2. Information We Collect

Due to the nature of our services, we may collect and process the following categories of data:

A. Personal Identification Information

• Full name
• Date of birth
• Passport or identification details (if required by insurer)
• Contact information (phone, email, address)

B. Medical Information

• Medical reports and diagnosis
• Treatment plans
• Hospital admission details
• Prescriptions and discharge summaries

C. Insurance & Financial Information

• Policy numbers
• Coverage details
• Invoices and billing information
• Payment confirmations

D. Operational Communication

• Case-related emails and call records
• Appointment scheduling data
• Coordination notes

We collect only the information necessary to provide medical assistance and case management services.

3. Purpose of Data Processing

Personal and medical data is processed strictly for:

• Coordinating medical care and hospital referrals
• Issuing Guarantees of Payment (GOP)
• Facilitating insurance claims and reimbursement
• Managing case documentation and reporting
• Regulatory compliance and audit requirements
• Internal quality assurance and service improvement

We do not sell, rent, or trade personal data to third parties.

4. Legal Basis for Processing

CMA processes data based on:

• Contractual obligations with insurers and clients
• Legitimate business interest in coordinating medical services
• Explicit consent where required
• Compliance with applicable healthcare and data protection laws

5. Data Sharing & Disclosure

We may share data strictly on a need-to-know basis with:

• Insurance companies and assistance partners
• Hospitals, clinics, and healthcare providers
• Regulatory authorities (when legally required)
• Authorized financial institutions for payment processing

All third parties are contractually obligated to maintain confidentiality and data protection standards.

6. Data Storage & Security Measures

CMA maintains strict technical and organizational safeguards to protect information:

• Encrypted email communication
• Secure cloud-based CRM and ERP systems
• Role-based access controls
• Multi-factor authentication (MFA)
• Automated backups every 12 hours
• Firewall and endpoint security monitoring
• Audit trails for data access and modifications

Access to sensitive data is restricted to authorized personnel only.

7. Data Retention

We retain personal and medical data only for as long as necessary to:

• Complete case management and invoicing
• Fulfill contractual obligations
• Comply with legal and regulatory requirements
• Maintain audit and compliance records

Once retention periods expire, data is securely archived or permanently deleted.

8. International Data Transfers

As an international medical assistance provider, data may be transferred across jurisdictions (Asia, Europe, Middle East).

All cross-border transfers are conducted in accordance with applicable data protection regulations and contractual safeguards.

9. Confidentiality Commitment

All employees and authorized personnel of CMA are bound by strict confidentiality agreements. Unauthorized access, disclosure, or misuse of client or patient information may result in disciplinary and legal action.

10. Data Subject Rights

Where applicable under law, individuals may have the right to:

• Request access to their personal data
• Request correction of inaccurate data
• Request deletion (subject to legal obligations)
• Restrict or object to certain processing

Requests may be submitted to: management@credibleassist.com

11. Website Data & Cookies

Our website may collect limited technical information such as IP address and browser type for security and analytics purposes.

We do not collect medical data directly through our public website.

12. Policy Updates

This Privacy Policy may be updated periodically to reflect legal or operational changes. Updates will be published on this page with a revised effective date.

Contact Us

For privacy-related inquiries, please contact:

Credible Medical Assistance
Registered Office: Kolkata, India
Email: management@credibleassist.com

You can also reach us through our contact page.