Last reviewed 2026-10-04
Privacy and your medical information
To quote a procedure honestly we have to ask you for real medical information — your age, your conditions, your medication, sometimes photographs or imaging. This page says plainly what we do with it. If anything here is not clear, ask us before you send anything.
What this website collects: nothing
The site you are reading is static HTML. It sets no cookies, runs no analytics, loads no advertising pixels and makes no calls to third-party scripts. Typefaces are served from our own server, so not even a font provider sees your visit.
There is one exception and it is deliberately small: if your browser is set to Spanish and you land on an English page, we store the value hb_lang in your browser's local storage so we do not move you again on later visits. It holds two letters — en or es. It never leaves your device, it is not an identifier, and clearing your browser data removes it.
There is also no contact form. We decided against one: a form on a static site either fails silently or quietly routes your medical details through a third party. Everything reaches us through channels you can see.
What you send us, and through what
Everything we hold about you is what you chose to send through one of these: WhatsApp, SMS, email or a phone call. Typically that is:
- Your name, country and the best way to reach you.
- Your age and relevant medical history: chronic conditions, previous surgeries, current medication.
- For aesthetic and dental cases, photographs of the area. For orthopaedic, fertility or pain cases, imaging and reports you already have.
This is health data. In the European Union it is a special category under the GDPR, and in Colombia it is dato sensible under Ley 1581 de 2012. We treat it as such. We ask only for what changes the answer: if a detail does not affect your quote or your safety, we do not need it.
One thing to understand about WhatsApp
WhatsApp is operated by Meta, not by us. Messages are encrypted in transit, but the fact that you contacted us — your number, the timing, the frequency — is visible to Meta under its own terms, not ours. The same applies to SMS and your mobile carrier.
We are not warning you off it; it is how most of our patients prefer to write, and it is the fastest way to reach us. But if you would rather not route health details through Meta, write to info@healthbridgemedicaltourism.com instead, or send only a general message there and share details later by email.
Who else sees it
To get you a real quote we share what is clinically relevant with the surgeon or clinic in Colombia who would treat you. That is the point of sending it, and we do not do it with anyone else. We do not sell data, we do not share it for advertising, and we do not pass your contact details to other facilitators or agencies.
Colombian physicians and clinics are bound by medical confidentiality under Colombian law and by their professional obligations.
If you are in the United States: we are not a HIPAA entity
This matters and most sites in our sector leave it out. HIPAA governs U.S. health plans, U.S. providers and their business associates. HealthBridge is a Colombian company and is not a HIPAA covered entity, so the protections you are used to at home do not attach to what you send us. What applies instead is Colombian data protection law, and the commitments on this page.
We would rather say that clearly than let you assume otherwise.
How long we keep it
We keep your enquiry while your case is active and afterwards for as long as it is useful to you — a follow-up question a year after surgery is easier to answer if we still have the file — or for as long as Colombian law requires us to.
You can ask us to delete it at any time and we will, except where we are legally required to keep something. Ask through any of the channels below; you do not need to give a reason.
Your rights, and how to use them
Wherever you are, you can ask us to show you what we hold, correct it, delete it, or stop using it. Write to info@healthbridgemedicaltourism.com or message us and say what you want; we answer in English or Spanish.
In the European Union and Spain, the GDPR gives you access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may also complain to your national supervisory authority — in Spain, the Agencia Española de Protección de Datos.
In Colombia, Ley 1581 de 2012 and Decreto 1377 de 2013 give you the rights of habeas data: to know, update, rectify and delete your data, and to revoke the authorisation you gave. The supervisory authority is the Superintendencia de Industria y Comercio.
Your data is processed in Colombia. If you write to us from the EU, that is an international transfer, and you are consenting to it when you send us your case.
Photographs and stories
We never publish a patient photograph, name or story without written permission for that specific use. Consent to be treated is not consent to be shown, and permission given once is not permission forever — tell us and we take it down.
Who we are
HealthBridge Medical Tourism
Carrera 43A # 1-50, El Poblado, Medellín, Antioquia 050021, Colombia
Email: info@healthbridgemedicaltourism.com · Phone and WhatsApp: +573013391088
If this page changes we update the review date at the top. Material changes are rewritten here, not buried in a version history.
Not sure what to send?
Ask first. Tell us what you are considering and we will say what we actually need before you send anything personal.
El Poblado, Medellín · Mon–Fri 8:00 AM – 6:00 PM · Sat 9:00 AM – 1:00 PM (COT)