Privacy Policy

SMC Salud ("we", "us", "our") collects information you provide directly when you submit a medical inquiry, request a consultation, upload medical reports, or communicate with our patient coordinators. This may include: • Personal identification: full name, date of birth, passport number (for visa processing) • Contact information: email address, phone number, country of residence • Medical information: diagnosis, treatment history, imaging reports, laboratory results, medication lists • Financial information: billing details, payment method (processed securely through our payment partners) • Communication records: correspondence with our medical team and coordinators We also collect limited technical data automatically when you visit our website, including IP address, browser type, pages visited, and referring URLs. This data is used for analytics and website optimization only.

We use your personal and medical information exclusively for: • Evaluating your medical case and determining treatment eligibility • Coordinating your medical travel, accommodation, and treatment program in Cuba • Communicating with you about your treatment proposal, costs, and logistics • Providing interpretation services during consultations and treatment • Processing payments securely through our payment partners • Following up with you after treatment through telemedicine • Complying with legal and regulatory requirements We never sell, rent, or trade your personal or medical information to third parties. Your data is shared only with the medical professionals directly involved in your care and the service providers necessary to coordinate your treatment program (e.g., hotels, transportation, interpreters) — and only with your explicit consent.

Your medical information is treated with the highest level of confidentiality and security. We implement administrative, technical, and physical safeguards designed to protect your data: • All medical records are stored in encrypted, access-controlled systems • Access to your medical information is restricted to authorized medical and coordination personnel only • Data transmission uses SSL/TLS encryption (HTTPS) • Payment processing is handled by PCI-DSS compliant payment partners (we never store your card details) • Medical records are retained in accordance with Cuban healthcare regulations and international best practices • Our systems undergo regular security reviews In compliance with international data protection standards including GDPR (EU), we process your medical data under the legal basis of your explicit consent for the purpose of providing medical services. You may withdraw consent at any time, though this may affect our ability to provide continued care.

We retain your personal and medical information for the duration of your treatment program and for a period of 7 years thereafter, as required for medical record-keeping and potential follow-up care. After this period, your data is securely deleted or anonymized, except where longer retention is required by law. If you do not proceed with treatment after an initial inquiry, we retain your inquiry data for 12 months for record-keeping purposes, after which it is deleted unless you request earlier deletion.

Under GDPR, CCPA, and other applicable data protection laws, you have the following rights regarding your personal data: • Right to access — You may request a copy of the personal and medical data we hold about you • Right to rectification — You may request correction of inaccurate or incomplete data • Right to erasure — You may request deletion of your data (subject to medical record-keeping requirements) • Right to restrict processing — You may request that we limit how we use your data • Right to data portability — You may receive your data in a structured, machine-readable format • Right to object — You may object to our processing of your data for specific purposes • Right to withdraw consent — You may withdraw consent for data processing at any time To exercise any of these rights, contact our Data Protection Officer at info@smcsalud.org. We respond to all requests within 30 days.

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. We use: • Essential cookies — Necessary for the website to function correctly (e.g., language preference, session management) • Analytics cookies — Google Analytics 4, loaded only after you consent via our cookie banner, to understand how visitors use our site and improve content • Functional cookies — Remember your preferences (language, treatment interests saved as favorites) We do not use advertising cookies or third-party tracking pixels. You can manage or withdraw cookie consent at any time through the cookie preferences banner. Cookie data is anonymized and does not contain personally identifiable medical information.

We engage trusted third-party service providers to help deliver our services: • Payment processing — Stripe and Adyen (PCI-DSS compliant) • Cloud storage — For medical document storage (encrypted, access-controlled) • Email communication — For coordinating with patients and medical teams • Analytics — Google Analytics 4 (consent-gated, anonymized) Each third-party provider is bound by data protection agreements and processes your data only on our behalf and under our instructions. We do not allow third parties to use your data for their own purposes.

As an international medical services provider, your data may be transferred between countries — for example, from your country of residence to Cuba for treatment coordination, or to translation service providers in different regions. We ensure all international transfers comply with applicable data protection laws, including GDPR Standard Contractual Clauses where required. By submitting your information through our inquiry forms, you consent to the international transfer of your personal and medical data for the purpose of coordinating your medical care in Cuba.

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your data is handled, please contact: SMC Salud — Data Protection Officer Email: info@smcsalud.org Phone: WhatsApp Address: Calle 2, Esquina 11, Miramar, Playa, Havana, Cuba We are committed to resolving any privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your jurisdiction.