Legal
Privacy notice
General summary
Who we are
Global Health provides online medical consultations across several European countries. The legal entity acting as data controller depends on the country you book in — see our country pages for local details.
Summary
This page is a plain-language summary. It is not the governing legal document — that document is maintained for each country, together with the applicable data controller and the current version.
Governing document for your country
What we collect
- Account data: name, email, phone, hashed password.
- Booking data: the country and consultation type you requested, your notes, and the timestamps for status changes.
- Payment data: Stripe charge IDs, amounts, and timestamps. We never see card numbers — Stripe holds those directly.
- Email-delivery metadata: when SendGrid accepted, opened, or bounced our messages.
Cookies
Strictly-necessary cookies: gh_auth keeps you signed in, gh_locale and gh-last-country remember your language and country, and gh-consent records the choice you make below. Only with your consent do we also load Google Analytics (_ga, _ga_… — usage statistics, set by Google Ireland Ltd), Microsoft Clarity (_clck, _clsk — usage statistics and session replay, set by Microsoft Ireland Operations Ltd), the Meta Pixel (advertising measurement, set by Meta) and Doctify review widgets (patient reviews, set by doctify.com) — each places its own cookies. Refuse them and none is ever loaded. Withdrawing consent stops both analytics tools and deletes their cookies from this site; cookies Microsoft sets on its own clarity.ms and bing.com domains are outside our reach, which is why we never authorise Clarity's advertising storage.
You can change or withdraw your choice at any time:
Your rights
Under GDPR you can:
- Request a copy of everything we hold — sign in and go to Account → Security → Download my data.
- Delete your account — same page. Booking history is preserved for regulatory reasons but stripped of identifying details.
- Contact us at privacy@myglobalhealth.online for anything else (access, rectification, restriction, portability, objection).
Retention
Account data is kept while your account is active. Booking and payment data is retained for 7 years to satisfy medical record-keeping and tax-audit requirements, even if you delete your account.
Sub-processors
We use Railway (hosting), Stripe (payments), and SendGrid (transactional email). Each is GDPR-compliant and bound by Data Processing Agreements. Subject to your cookie choice, we also use Google (Google Analytics — usage statistics), Microsoft (Clarity — usage statistics and session replay), Meta (advertising measurement) and Doctify (patient reviews). Neither analytics tool runs on booking, cart, checkout, upload, verification or signed-in portal pages, and page addresses are stripped of identifying values before they are sent.