Privacy Policy & Patient Data Security Standards
International Support Group (ISG) adheres to the highest international security protocols to protect your sensitive Protected Health Information (PHI), medical imaging, and personal records in strict compliance with HIPAA, GDPR (Art. 9), and global cybersecurity protocols.
Zero Commercialization
We never sell, rent, or trade patient data to brokers or advertisers.
AES-256 Cloud Vault
All clinical reports, DICOM scans, and passports encrypted at rest & transit.
HIPAA & GDPR Standards
Rigorous consent checks for cross-border international patient transfers.
Right to Erasure
One-click request to permanently delete all medical history upon treatment end.
Introduction & Global Privacy Scope
At International Support Group (ISG), we understand that seeking medical care across international borders requires entrusting us with deeply personal, confidential health diagnostics and identification records. Protecting this information is not merely a legal requirement — it is the cornerstone of our patient advocacy mission.
The ISG Data Protection Pledge
We operate strictly as an independent healthcare facilitator. We will never sell, lease, monetize, or trade your medical history or contact details with pharmaceutical companies, advertisers, or third-party marketing brokers.
Categories of Information We Collect
To generate transparent hospital treatment estimates, obtain second medical opinions from senior specialists, and arrange medical travel visas, we collect only the necessary data categories: Personal Identifiers, Protected Health Information (PHI), Travel Documents, and Technical Telemetry.
| Data Category | Specific Examples | Primary Purpose | Protection Standard |
|---|---|---|---|
| Personal Identifiers | Full name, email address, phone/WhatsApp number, country of residence. | Direct communication, appointment scheduling, and case updates. | TLS 1.3 Encrypted |
| Protected Health Info (PHI) | Clinical summaries, MRI/CT scans, biopsy reports, pathology notes, surgical histories. | Hospital clinical review, doctor second opinion, and customized cost quotation. | AES-256 Vaulted |
| Travel & Identity Documents | Passport copies, medical visa invitation requests, flight itineraries. | Facilitating e-Medical Visa issuance and international border clearance. | Restricted Access |
| Technical Telemetry | IP address, browser type, preferred language, site interaction telemetry. | Site security, DDOS prevention, language selection persistence. | Anonymized |
How Your Data is Utilized
Every piece of data collected by International Support Group is utilized strictly to provide end-to-end medical concierge services: Clinical Evaluation & Estimates, Medical Visa Assistance, Dedicated Care Coordination, and Border Compliance.
Clinical Evaluation & Estimates
Presenting anonymized or consent-backed reports to JCI/NABH-accredited hospital surgical boards for accurate cost estimates.
Medical Visa & Travel Concierge
Assisting accredited partner hospitals in issuing official Medical Visa Invitation Letters (FRRO clearance) for patients and attendants.
Dedicated Care Coordination
Assigning a personal medical travel coordinator to provide continuous assistance, schedule appointments, and coordinate language translators.
Legal & Cross-Border Compliance
Adhering to bilateral immigration mandates, border health verifications, and healthcare audit reporting requirements.
Handling of Medical Records & Imaging
Diagnostic reports, DICOM imaging, and surgeon assessments receive elevated defense parameters across their complete lifecycle with 256-bit SSL in transit, AES-256 at rest, zero-trust role-based access, and secure purging.
SSL/TLS Transit
Files uploaded via our portal use 256-bit encrypted SHA-256 tunnels.
AES-256 at Rest
Stored in isolated, partition-encrypted cloud buckets in compliant data centers.
Zero-Trust Access
Only your assigned coordinator and the specific reviewing doctor have decrypt keys.
Safe Purge
Records securely deleted upon patient request or post-operative closure.
Cross-Border Hospital Transfers & Disclosure
To fulfill our medical travel facilitation services, International Support Group transfers patient clinical information to accredited international medical centers (e.g. in India, Turkey, Thailand, UAE) only under explicit patient authorization and strict Business Associate Agreements.
- Accredited Partners Only: Reports are solely shared with hospitals holding valid JCI (Joint Commission International) or NABH accreditations.
- Explicit Scope: Information transferred is strictly limited to the clinical fields necessary for surgical opinion and price estimation.
- No Secondary Resale: Partner institutions contractually agree not to reuse or transfer patient data for independent marketing purposes.
HIPAA & GDPR Compliance Frameworks
We enforce administrative, physical, and technical safeguards specified by the U.S. Health Insurance Portability and Accountability Act (HIPAA). All electronic Protected Health Information (ePHI) is insulated from unauthorized visibility through role-based access management.
For European residents, processing of special category health data is conducted solely under explicit consent (Art. 9(2)(a) GDPR) to establish medical contracts and treatment plans abroad, with complete data portability rights.
Your Privacy Rights & Controls
Regardless of where you reside, International Support Group grants you the Right to Access, Right to Rectify, and Right to Erasure (the right to be forgotten).
Request a complete copy of all medical and demographic information stored about you.
Update inaccurate or incomplete clinical histories, passports, or contact details.
Request permanent deletion of all medical scans and case history from active databases.
Data Retention & Scheduled Purging
Unprocessed inquiries are purged after 90 days of inactivity. Completed travel records are retained for 24 months to support surgeon tele-consultations, after which files are safely archived or destroyed upon request.
- Unprocessed Inquiries: Inquiries without treatment progression are purged after 90 days of inactivity.
- Completed Medical Trips: Retained for 24 months to support tele-consultation follow-up with overseas operating surgeons.
- Financial & Invoicing Records: Preserved in accordance with international taxation and auditing guidelines.
Frequently Asked Privacy Questions
Who can see my uploaded MRI, CT scans, and medical history?
Only your designated ISG Medical Care Coordinator and the authorized clinical review board at the specific accredited hospital evaluating your surgery have access. No third parties or unrelated staff members can view your records.
Does ISG charge any fee for handling my medical data?
Never. Our medical travel coordination, case evaluation, and preliminary hospital cost quotations are 100% free of charge for patients.
Can I request that my records be erased immediately after my treatment?
Yes. Under GDPR Art. 17 and our global patient rights charter, simply send an email to contact@theinternationalsupportgroup.com requesting data erasure, and all active clinical files will be permanently purged within 7 business days.
Are WhatsApp communications with my care coordinator secure?
WhatsApp features built-in end-to-end encryption. However, for sensitive clinical imaging and diagnostic files, we also provide our dedicated 256-bit encrypted online portal for maximum security compliance.
Have Questions About Your Health Data?
Our Data Protection Officer and clinical compliance team are available 24/7.