Privacy Policy
Last updated: 23 August 2026
This notice explains what personal information ExBeauty (“we”, “us”, “our”) collects, why, and what rights you have over it. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
ExBeauty operates this website as a directory connecting patients with independent medical providers. [Insert your registered company name, company number and registered address here.]
2. What Information We Collect
We collect personal information you give us directly, through:
- Enquiry / “Get a Free Quote” forms — your name, email, phone number, country, treatment of interest, and any preferred dates or messages you include.
- Reviews — your name, the treatment you received, your rating and review text, and (if you provide it) the country you’re writing from.
- Contact form — your name, email, and the content of your message.
- Provider sign-up / checkout — business name, address, contact details and payment information (processed securely by Stripe — we never see or store your full card details).
We also collect limited technical information automatically (such as IP address and browser type) for security and to keep the site running properly — see our Cookie Policy.
3. How We Use It, and Our Legal Basis
| Purpose | Legal basis |
|---|---|
| Passing your enquiry to the provider(s) you’ve asked to hear from | Contract / your consent |
| Helping you find a suitable destination or provider | Legitimate interest |
| Moderating and publishing reviews | Legitimate interest / consent |
| Processing a provider’s listing subscription and payment | Contract |
| Responding to contact form messages; legal/accounting record-keeping | Legitimate interest / legal obligation |
We do not use your personal information for automated decision-making, and we do not sell it to third parties for their own marketing purposes.
4. Who We Share It With
When you submit an enquiry naming a specific provider (or a general enquiry we then match to one), we share the details of that enquiry with that provider so they can respond to you directly — this is the core service the site provides. We also use trusted processors to run the site and take payments, including our hosting provider, email delivery provider, and Stripe for payment processing. We require these processors to keep your data secure and only use it for the purpose we’ve engaged them for.
5. International Transfers
Because the providers listed on ExBeauty are based outside the UK — including in Turkey, Moldova, Vietnam and other destinations — any enquiry you send to a provider will necessarily be transferred to, and processed in, that provider’s country. By submitting an enquiry to a specific provider, you understand and accept that your data will be sent to that country, which may not have data protection laws equivalent to the UK GDPR. We are not responsible for a provider’s own handling of your data once it has been passed to them — please refer to that provider directly for information on how they process your data.
6. How Long We Keep Information
We keep enquiry and contact form data for as long as reasonably needed to support your enquiry and for a limited period afterwards for record-keeping, then delete or anonymise it. Published reviews are kept for as long as the relevant provider remains listed, unless you ask us to remove yours. Payment and subscription records are kept for as long as required by UK tax and accounting law.
7. Your Rights
Under UK GDPR, you have the right to: access the personal data we hold about you; ask us to correct inaccurate data; ask us to erase your data; restrict or object to certain processing; and request that we transfer your data to another organisation (“data portability”). Where we rely on your consent, you can withdraw it at any time. To exercise any of these rights, contact us. We aim to respond within one calendar month.
8. How to Complain
If you’re unhappy with how we’ve handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk/make-a-complaint
This is placeholder text based on common industry practice for medical tourism marketplaces — please have it reviewed, localised and completed by a qualified solicitor before launch, with your actual company name, registration number and registered address inserted throughout.