Privacy Policy

Last updated: October 13, 2026

1. Introduction

Medicard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical information management service.

2. Information We Collect

We collect information you provide directly to us, including:

  • Personal Information: Name, date of birth, national ID number, contact information
  • Medical Information: Medical conditions, medications, allergies, blood type, emergency contacts
  • Account Information: Email address, password, subscription details
  • Payment Information: Billing details processed securely through Stripe
  • Usage Data: Information about how you access and use our services

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and support messages
  • Respond to your comments and questions
  • Enable emergency access to your medical information by healthcare providers
  • Comply with legal obligations

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

  • Emergency Access: Healthcare providers can access your medical information during emergencies
  • With Your Consent: We may share information with your explicit consent
  • Legal Requirements: If required by law or to respond to legal process
  • Protection: To protect the rights, property, and safety of Medicard, our users, or others
  • Business Transfers: In connection with any merger, sale of company assets, or acquisition

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Secure backup and disaster recovery procedures

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Medical records are retained in accordance with applicable healthcare regulations. You may request deletion of your account and associated data, subject to legal retention requirements.

7. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Request deletion of your information
  • Object to processing of your information
  • Request restriction of processing
  • Data portability
  • Withdraw consent at any time

8. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We ensure appropriate safeguards are in place to protect your information.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]

Address: Medicard Ltd, Malta

Data Protection Officer: [email protected]

13. Supervisory Authority

If you are located in the European Union, you have the right to lodge a complaint with your local data protection supervisory authority.