Privacy Policy

1. Who We Are

Trotic (Pvt) Ltd. is a medical referral and health tourism facilitation company based in Sri Lanka. We connect patients with accredited hospitals and specialist medical professionals, primarily in India. Our registered address and contact details are available upon request.

2. Information We Collect

We collect information you provide directly when submitting a consultation request or creating an account:

• Personal identifiers: Full name, date of birth, gender, nationality, passport country
• Contact details: Email address, phone number, country of residence
• Medical information: Current health conditions, allergies, medications, past surgeries, height, weight
• Treatment preferences: Procedure type, preferred destination, budget range, travel dates
• Uploaded documents: Medical reports, scan results, referral letters (PDF, image formats)
• Technical data: IP address, browser type, pages visited, cookies (see our Cookie Policy)

3. How We Use Your Information

We use the information collected solely for the purposes of providing our referral service:

• Matching you with appropriate hospitals, specialists, and treatment programmes
• Communicating with you about your case via your preferred contact method
• Sharing relevant medical information with licensed partner hospitals and qualified medical professionals for case evaluation
• Sending OTP authentication codes and account-related notifications
• Improving our platform and services through aggregated, anonymised analytics
• Complying with our legal obligations

We will never sell, rent, or share your personal or medical data for marketing purposes or to any third party unrelated to your medical care.

4. Sharing Your Information

Your information may be shared only with:

• Partner hospitals and medical specialists in the destination country, strictly for the purpose of evaluating and facilitating your treatment
• Partner agents (if applicable) who submitted your referral on your behalf
• Technology service providers who operate our platform infrastructure (bound by strict confidentiality agreements)
• Regulatory authorities where legally required

All third parties who receive your data are required to handle it in accordance with applicable data protection laws and this Privacy Policy.

5. International Data Transfers

Because our partner hospitals are primarily located in India, your medical information may be transferred internationally. We ensure that all such transfers are made with appropriate safeguards in place, including data processing agreements with our hospital partners that reflect the standards set by applicable data protection legislation.

6. Data Retention

We retain your personal and medical records for a period of 5 years from the date of your last interaction with us, unless a longer period is required by law or you request earlier deletion. Medical documents uploaded by you are stored securely and access is restricted to authorised personnel only.

7. Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data in transit
• Restricted access controls — only authorised Trotic staff can access patient records
• Secure server infrastructure with regular security monitoring
• OTP-based authentication — no passwords stored

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete information via your patient portal
• Deletion: Request that we delete your personal data (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Withdrawal of consent: Withdraw your consent at any time — this will not affect the lawfulness of prior processing
• Objection: Object to certain types of processing

To exercise any of these rights, contact us at privacy@trotic.co. We will respond within 30 days.

9. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18 without parental or guardian consent. If a minor requires medical referral, a parent or legal guardian must submit the request on their behalf.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of material changes via email. The "Last updated" date at the top of this page will always reflect the most current version.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact us:

• Email: privacy@trotic.co
• Website: trotic.co