1. Information collected
The enquiry form asks for name, country or region, contact details, preferred contact method, journey stage and service interest. Partner applications ask for applicant type, role or service category, contact details, service city, languages and an optional experience summary. A brief health-related note is optional only in the customer enquiry. The website does not request medical records, identity documents, test reports or payment-card information.
2. Why information is used
Enquiry information is used to respond and understand non-medical support needs. Partner-application information is used only for human review, verification planning and follow-up about a possible engagement.
3. Optional health-related information
If you voluntarily provide a brief health-related note, separate consent is required. It should be limited to the minimum necessary. AI-assisted resource information is never sent to you without human review.
4. Delivery, database storage and service providers
Forms are submitted over an encrypted connection. A Cloudflare Pages Function first stores the record in Cloudflare D1, then uses the Resend email API to send it to a designated GBA Health Concierge mailbox and records the delivery status. Names, contact details and optional notes or application summaries are encrypted at application level with a separate key. Records are scheduled for deletion after 90 days, and the portal does not intentionally write form text to website access logs. Resend and the receiving email provider process and retain the message under their applicable service terms.
5. International and EEA users
Before serving users in the European Economic Area or transferring personal data internationally, GBA Health Concierge must confirm the responsible legal entity, lawful basis, transfer mechanism, retention period and user-rights procedure. This prototype does not claim that those production arrangements are already active.
6. Website analytics
The website uses Google Analytics to understand page visits, language, content area, hospital filtering and whether an enquiry or partner application was submitted successfully. Analytics events do not include names, phone numbers, email addresses, medical details, application text, test results or reference numbers. Google Analytics may use cookies and similar technologies to process device and visit data; visitors can restrict cookies and analytics processing through browser settings or applicable Google tools.
7. Your choices and rights
You may ask about access, correction, deletion, restriction or withdrawal of consent, subject to applicable law and necessary service records.
8. Contact
Email privacy enquiries to [email protected].
Updated: 4 September 2026