Last updated: August 1, 2025
Sultan Global Health Care ("Sultan GHC," "we," "us," or "our") is committed to protecting your personal information and health data. This Privacy Policy explains how we collect, use, share, and safeguard information when you visit our website or use our services.
Sultan Global Health Care (SGHC) is a United States-based healthcare facilitation and medical tourism concierge company. We are incorporated and operate in the United States. Our services connect U.S. patients with internationally accredited hospitals and medical specialists in India and Türkiye.
Sultan GHC is not a hospital, clinic, or licensed healthcare provider. We are a concierge and facilitation service. However, in the course of providing our services, we may receive, process, and transmit health-related information on your behalf.
We collect information in the following categories:
This information is collected only with your explicit consent when you submit an enquiry or upload reports.
We use the information we collect to:
We will not use your medical information for marketing purposes or share it with third parties for advertising without your express consent.
We process your personal information on the following legal bases:
Consent
You provide explicit consent when submitting your medical reports or enquiry form.
Contract Performance
Processing necessary to deliver the facilitation services you requested.
Legitimate Interest
Improving our services, preventing fraud, and maintaining security.
Legal Obligation
Compliance with applicable U.S. laws and regulations.
Important: Sultan GHC is a healthcare facilitation company operating in the United States. While we are not a Covered Entity under HIPAA (as we are not a healthcare provider, health plan, or healthcare clearinghouse), we handle your health information with the same care and security standards that HIPAA requires.
Your medical reports and health information are:
To facilitate your medical treatment abroad, we will necessarily share relevant portions of your medical information with partner hospitals and physicians in India and Türkiye. These transfers occur only with your explicit consent.
Our partner hospitals in India and Türkiye are bound by their national healthcare privacy laws and international accreditation standards (JCI). We require contractual commitments from our partners to maintain appropriate data security and confidentiality.
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
| Data Type | Retention Period |
|---|---|
| Contact information (name, email, phone) | 5 years from last contact |
| Medical reports and health information | 7 years from date of receipt |
| Enquiry and communication records | 5 years from last interaction |
| Website analytics data | 26 months (anonymised after 14 months) |
| Financial transaction records | 7 years (U.S. legal requirement) |
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:
Right to Know
You may request a copy of the personal information we hold about you and details of how it is used and shared.
Right to Delete
You may request deletion of your personal information, subject to certain exceptions required by law.
Right to Correct
You may request correction of inaccurate personal information we hold about you.
Right to Opt-Out of Sale
Sultan GHC does not sell your personal information. We will never sell your data to third parties.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, contact us at info@sultanghc.com. We will respond within 45 days as required by law.
We use cookies and similar tracking technologies to improve your experience on our website. For full details on what cookies we use and how to control them, please review our Cookie Policy.
We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction, including:
No method of transmission over the internet is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.
Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at info@sultanghc.com and we will promptly delete such information.
Our website may use third-party services including analytics providers, email platforms, and communication tools. These third parties have their own privacy policies and we encourage you to review them. We do not control their data practices.
We may share aggregated, de-identified, non-personal information with third parties for analytics and business improvement purposes. This information cannot be used to identify any individual.
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy regularly.
For any privacy-related questions, requests to access or delete your data, or concerns about how we handle your information, please contact us:
Sultan Global Health Care — Privacy Team
We will respond to all privacy requests within 45 days. For urgent matters, please call directly.
