LAST UPDATED: April 2026
PRIVACY NOTICE
MEDam is a platform that enables individuals to connect with medical tourism providers in Armenia (the "Platform"), including medical facilities or centers, medical professionals, hotel service providers, transportation service providers and other related service providers (the "Service Providers"). MEDam is operated by MEDam LLC (the "Company," "we," or "us") which processes information that identifies you as an individual or relates to you as an identifiable individual ("Personal Information") when you use the Platform (as a potential patient ("User"), representative of a healthcare facility ( "Medical Provider"), as a doctor, or as a (representative of a) provider of a related service ("Related Service Provider") (the Medical Provider and Related Service Provider are together referenced as "Service Provider")), or otherwise interact with us in the context of our Platform or business (e.g., as a vendor, service provider or business partner ("Third Party")). This Privacy Notice describes how we process Personal Information in the context of the Platform and our business.
COLLECTION AND PROCESSING OF PERSONAL INFORMATION
How we collect Personal Information
We collect Personal Information for various purposes and in various contexts as part of our Platform (see descriptions in the table below).
If you are a Medical Provider and you disclose Personal Information relating to your doctors or other medical professionals to us, you represent that you have obtained all necessary consents and have the authority to disclose such information to us and to permit us to use the information in accordance with this Privacy Notice.
Where required by applicable law, we will rely on your consent for the processing of your Personal Information, in addition to the legal bases mentioned in this Privacy Notice.
Users
We process Personal Information of Users, such as:
- Name
- Contact details (e.g., email address and phone number)
- Log-in credentials
- Services requested (this may include health information)
- Status and progress of requested services (this may include health information)
- Date of birth
- Country of residence
-
Content of your communications with us, including:
- Reviews and ratings
- Specific requests
- Feedback or comments
- Questions
- Reports and/or reported events
- Any other information you provide to us on or through the Platform
Due to the nature of the Platform, our processing of your Personal Information will include health information, such as the fact that you’ve requested and/or received a medical service or have undergone a medical procedure. We may also enable you to upload certain medical information for purposes of assessing your eligibility for the requested medical service. We will generally process such health information with your explicit consent.
We will not process any information contained in your medical file or medical records related to the requested medical service beyond what is necessary to facilitate the connection between you and the Service Provider and comply with our tax reporting or other legal obligations. Your detailed medical records will be processed by the Medical Provider and/or the individual doctor, who will be the sole controller for such health information. We are not responsible for the Medical Provider's or doctor's processing of your medical records, and you should review their separate privacy notices to learn how they process your personal information.
| Purpose | Personal Information | Legal Basis |
|---|---|---|
|
Providing the Services
We process your Personal Information as necessary to provide the requested service, such as to enable your access to the Platform, connect you with a Service Provider or doctor, and handle specific requests. We also process your Personal Information to process payments related to your requested services. |
We process the following information to provide you with our service:
|
We process the Personal Information in order to perform our contract with you and to pursue our legitimate interest in providing you a trustworthy and reliable Platform. |
|
Reviews and feedback
Processing and publishing your reviews and feedback about our Service Providers. This includes reviews and feedback about the Medical Provider, the doctor(s), and the Platform. Feedback can be collected through surveys or interviews. |
We process the following information to process and publish your reviews and
feedback:
By default, we will publish your review in a pseudonymized form, so only your initials will be visible, unless you explicitly choose to publish your full name. You can select your preference when submitting your review. |
We process the Personal Information to pursue our legitimate interest of ensuring a high quality of Service Providers and doctors on our platform. Providing a review is not mandatory and does not affect your ability to receive the requested services. Moreover, by posting a review you consent to the processing of the Personal Information contained in such review. |
|
Adverse events and emergency response
We will process your Personal Information if this is necessary to handle an adverse event or respond appropriately to an emergency. |
We process the following information for this purpose:
|
We process the Personal Information to protect your vital interests or to pursue our legitimate interest of ensuring our Service Providers and individual doctors are and remain of high quality and trustworthy. |
Doctors
We process Personal Information of the doctors or other medical professionals providing services, such as:
- Name
- Contact details (e.g., email address and phone number)
- Log-in credentials
-
Professional credentials, including:
- Information about your services
- Expertise
- Diploma(s)
- Certificates
- Experience
- Education
- Ratings and feedback received
- Services provided to Users
- Status and progress of services provided to Users
- Availability dates and times
- Information about (serious) adverse events
-
Content of your communications with us, including:
- Reviews and ratings
- Specific requests
- Feedback or comments
- Questions
- Reports and/or reported events
- Any other information you provide to us
| Purpose | Personal Information | Legal Basis |
|---|---|---|
|
Providing the Services
We process your Personal Information as necessary to provide the requested service, such as to enable your access to the Platform, connect you with a User, and handle specific requests. We also process your Personal Information to assess, review and monitor your or the Medical Provider's eligibility to be or stay included on the Platform. |
We process the following Personal Information to provide you with our Service:
|
We process the Personal Information to perform our contracts with you and the Medical Provider and to pursue our legitimate interest in providing you a trustworthy and reliable Platform. |
|
Adverse events and emergency response.
We will process your Personal Information if this is necessary to handle an adverse event or respond appropriately to an emergency; to review your eligibility to remain featured on the Platform. |
We process the following information for this purpose:
|
We process the Personal Information to protect your vital interests or to pursue our legitimate interest of ensuring our Service Providers and individual doctors are and remain of high quality and trustworthy. |
Service Provider
We process names, contact details and log-in credentials of individuals working for our Service Providers to enable the Service Provider’s inclusion on the Platform, allow the Service Provider to provide its services and to otherwise perform our contract with the Service Providers.
Third Party
If you are one of our vendors or suppliers or a member of their staff, we will use Personal Information about you to manage and execute our contracts or to conclude new contracts. The Personal Information includes name, contact details, the company’s name, payment details, and financial information included on invoices.
Other purposes for processing - All Individuals
| Purpose | Personal Information | Legal Basis |
|---|---|---|
|
Customer service
We will process your Personal Information when you contact us with requests for support, complaints or questions. |
We collect Personal Information as needed to process your request, complaint or
question.
|
We rely on our legitimate interest to respond to questions or complaints.
If you request a specific service from us, we will rely on the performance of the contract to process Personal Information needed to provide you with such service. If you submit a request on the basis of a law (such as an access request based on your rights under European data protection law), we will process your Personal Information as needed to comply with our legal obligation to respond and process your request. |
|
Communicating important changes / Service messages
In certain situations we may need to contact you directly to communicate administrative information with you. This may include important information regarding our relationship with you, our Platform, any changes to our terms, conditions, policies and procedures, and/or other administrative information. |
We use your first and last name and at least one contact method to contact you. Depending on the content of the communications, we may also process other Personal Information related to you for this purpose. |
We rely on our legitimate interest, such as to ensure our Platform is used in
accordance with our terms, conditions, and policies.
We rely on the performance of contract, where the communication relates to our Platform. In certain instances we may also have a legal obligation to inform you of material changes to our Terms of Service or Privacy Notice (e.g., in case of mergers, acquisitions and other restructurings of our business). |
|
Improving the Platform and developing new features
We will use the Personal Information that we collect about you for analytical purposes, so that we can improve our Platform and existing services and develop new services or features of interest. For example, we will conduct data analysis to monitor and analyze where most of our Users travel to Armenia from, their age range and what procedures and services are requested most often. We may also use the insights gained to offer new services, such as on the basis of visitor feedback, or to improve existing services or the way we promote them. |
We use the Personal Information that we have collected from or about you for this purpose. Where possible and feasible, we will do this in a manner that does not directly identify you (e.g., by creating aggregated insights from pseudonymized data, as described below). | We rely on our legitimate interest for these activities. We have an interest in making sure our Platform remains relevant to our Users. |
|
Aggregating or anonymizing Personal Information.
Where we don't need your Personal Information in identifiable form to pursue our purposes (such as performing analytics to obtain aggregate insights), we will aggregate and/or anonymize your Personal Information so that it is no longer considered Personal Information. |
We may aggregate, anonymize or pseudonymize any of your Personal Information as is necessary or required for the relevant purpose of anonymization or pseudonymization. | We rely on our legitimate interests to anonymize your information, such as the interest to generate other data for our use. |
|
Fraud prevention and security
We may use your Personal Information if this comes up in the context of:
|
Depending on the specific purpose, this may include any Personal Information that we have collected about you. |
We rely on our legitimate interests, and our legal obligations such as identifying
and/or preventing fraudulent transactions and ensuring the security of our systems.
We have a legal obligation to conduct audits. |
|
Legal and compliance
We have general legal and compliance obligations to process your Personal Information. This includes complying with applicable laws; complying with legal processes; responding to requests from public and government authorities; meeting national security or law enforcement requirements. Enforcing our terms and conditions; protecting our operations; protecting our rights, privacy, or property; and allowing us to pursue available legal remedies, defend claims and limit the damages that we may sustain. |
We use the Personal Information as relevant for the specific legal action, regulatory investigation, and/or legal processes in question. |
We rely on our relevant legal obligation to process the relevant Personal
Information.
We rely on our legitimate interest, such as enforcing terms and conditions and bringing or defending legal claims. |
|
Emergency and incident response
In exceptional circumstances, we may need to process your Personal Information to respond to an incident or emergency. This may include purposes such as: ensuring the safety of Users; responding to and handling medical and other emergencies. |
We use Personal Information as necessary and relevant for the specific purpose and context. | We have a legal obligation to adequately address emergencies and incidents. In certain instances, processing Personal Information may also be necessary to protect an individual's vital interests (such as when we need to contact medical or emergency services). |
Disclosure of Personal Information
We disclose Personal Information to the following recipients:
- The relevant Service Providers that you've requested services from will receive Personal Information relevant to their provision of the services. The Service Providers are independent controllers for the processing of the Personal Information that we share with them. We have entered into appropriate data sharing agreements with these Service Providers to ensure compliance with applicable data protection requirements.
- Our third party service providers, such as IT and related infrastructure service providers, including the videoconferencing platform we use to facilitate your communication with the Service Provider(s).
Other Disclosures
We will also disclose your Personal Information as necessary or appropriate, in particular when we have a legal obligation or legitimate interest to do so:
- to public and/or government and/or regulatory authorities, including courts, tribunals, regulators, tax authorities and other government authorities;
- to third persons (legal or natural), as relevant for the specific legal action and/or processes in question (such as lawyers, auditors, insurers, advisory firms, etc.); or
- to third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). You will be notified of any such business transaction and of possible changes to the processing of your Personal Information in accordance with applicable law and the "Updates To This Privacy Notice" section.
COOKIES AND SIMILAR TECHNOLOGIES
We may collect Personal Information through the use of cookies and similar technologies. Please see our Cookies and Similar Technologies Policy located in the cookie banner.
SECURITY
We seek to use reasonable organizational, technical and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contacting Us" section below.
HOW YOU CAN EXERCISE YOUR RIGHTS
Users, Service Providers and doctors or other medical professionals can access, update and/or delete their Personal Information by logging in to their account.
In addition, if you would like to request to access, correct, update, suppress, restrict, or delete Personal Information, object to or opt out of the processing of Personal Information, withdraw your consent (which will not affect the lawfulness of processing prior to the withdrawal), or if you would like to request to receive a copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us in accordance with the "Contacting Us" section below. We will respond to your request consistent with applicable law.
In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information suppressed from our database. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain Personal Information for (i) recordkeeping purposes and/or to complete any bookings that you made prior to requesting a change or deletion or (ii) legal or regulatory compliance purposes even after deletion is requested or consent is withdrawn.
If you are a resident of the EU/EEA, you may lodge a complaint with an EU/EEA data protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here .
RETENTION PERIOD
We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law, for example, for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
The criteria used to determine our retention periods include (i) the length of time we have an ongoing relationship with you and provide the services to you (e.g., for as long as you have an account on the Platform); (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
THIRD-PARTY SERVICES
This Privacy Notice does not address, and we are not responsible for the privacy, data, or other practices of any third parties, including Service Providers or individual doctors, or any third-party operating any site or service to which the Platform links (including payment service providers). The inclusion of a link on the Platform does not imply endorsement of the linked site or service by us. We generally have no control over, and are not responsible for, any third party's collection, use and disclosure of your Personal Information.
THIRD PARTY PAYMENT SERVICES
The Platform has functionality allowing you to make payments to MEDam and the Service Providers using third-party payment services with which you have created your own account. When you use such a service to make a payment, your Personal Information will be collected by such third party and not by us, and will be subject to the third party's privacy policy, rather than this Privacy Notice. We have no control over, and are not responsible for, this third party's collection, use, and disclosure of your Personal Information.
USE OF SERVICES BY MINORS
The services are not directed to individuals under the age of eighteen (18), and we do not knowingly collect Personal Information from individuals under 18.
JURISDICTION AND CROSS-BORDER TRANSFER
MEDam is located in Armenia and its service providers may be in countries outside of Armenia, such as the United States. Your Personal Information may be stored and processed outside of your country of residence, and in any case in Armenia and the United States.
Where we transfer Personal Information that is subject to data transfer restrictions under applicable law, we ensure that the relevant requirements of applicable law are met prior to the transfer. For transfers subject to EEA/UK/Swiss data protection law, one of the following safeguards is implemented:
- Adequacy Decisions: Some countries are recognized as providing an adequate level of data protection according to UK, Swiss or EEA standards. This includes the United States under the Data Privacy Framework.
- Standard Contractual Clauses: For transfers of Personal Information from the EEA/UK/Switzerland to third countries which are not considered adequate by the competent authority, we have put in place standard contractual clauses adopted by the competent authority to protect your Personal Information. You may obtain a copy of these measures by contacting us in accordance with the "Contacting Us" section below or by following this link.
SENSITIVE INFORMATION
Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership).
UPDATES TO THIS PRIVACY NOTICE
The "Last Updated" legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. Any changes will become effective when we post the revised Privacy Notice on the Platform. When you next log in to your account, you will be presented with the updated Privacy Notice.
CONTACTING US
MEDam LLC, a company registered in the Republic of Armenia with its registered office at Dzorap Street, 70/3, Yerevan, Armenia, is the company responsible for collection, use, and disclosure of your Personal Information under this Privacy Notice.
If you have any questions about this Privacy Notice, please contact us at privacy@medam.com .
Because email communications are not always secure, please do not include sensitive information in your emails to us.