Privacy Policy

Last Updated: January 1, 2026

Introduction

Welcome to Tropicure Bliss ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how Tropicure Bliss (Private) Limited (incorporated in Sri Lanka) and our US operations (Wyoming) collect, use, disclose, and safeguard your information when you visit our website www.tropicurebliss.com or engage our medical tourism and concierge services.

By accessing our services, you consent to the data practices described in this policy.

Information We Collect

We collect information necessary to facilitate your medical travel, concierge services, and recovery stays.

• Personal Identification Information: Name, mailing address, email address, phone number, passport details, date of birth, and next of kin contacts.
• Health and Medical Information: Medical history, current diagnosis, test reports, prescriptions, and doctor’s notes that you voluntarily provide to us for the purpose of obtaining treatment quotes from our medical partners.
• Payment Information: Credit card details, billing address, and transaction history.
• Travel Information: Flight details, visa status, accommodation preferences, and dietary requirements.
• Technical Data: IP address, browser type, operating system, and access times when you visit our website.

How We Use Your Information

We use your information for the following specific purposes:

• Service Facilitation:To share your medical records (with your consent) with our partner hospitals (such as Hemas Hospitals) to obtain treatment plans and cost estimates.
• Logistics: To book flights, hotels, recovery accommodations, and airport transfers.
• Communication: To send you quotes, itineraries, appointment confirmations, and updates regarding your journey.
• Billing: To process payments for our packages and services.
• Legal Compliance: To comply with applicable laws, including US and Sri Lankan regulations.

Disclosure of Your Information

We do not sell your personal data. We disclose your information only to the following parties necessary to deliver our services:

• Medical Providers: We share your health data with our partner hospitals and specialists in Sri Lanka strictly for the purpose of medical assessment and treatment planning.
• Service Providers: We may share relevant details with airlines, hotels, transport providers, and recovery centers to fulfill your travel and concierge arrangements.
• Legal Obligations: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

International Data Transfers

Our services involve cross-border operations. Your information, including sensitive medical data, will be transferred to and processed in Sri Lanka, where our partner hospitals and operations team are located. By using our services, you explicitly consent to this transfer. We ensure that our partners in Sri Lanka act in compliance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 and align with international standards.

Data Security and HIPAA Alignment

We implement robust administrative, technical, and physical security measures to protect your personal and health information.

• Secure Conduit: We act as a secure facilitator. We do not store medical records longer than operationally necessary to coordinate your care.
• HIPAA Alignment: While we operate internationally, we use reasonable efforts to align our data handling practices with HIPAA standards for our US clients, ensuring your health information is treated with the utmost confidentiality.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Medical documentation forwarded to hospitals is deleted from our active facilitation systems once your care coordination is complete, subject to any legal retention obligations.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data ("Right to be Forgotten"), subject to legal limitations.
• Withdraw Consent: Withdraw your consent to our processing of your data at any time (this may prevent us from providing further services).

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Tropicure Bliss LLC

US Address: 30 N Gould St. Ste R, Sheridan, Wyoming 82801

Sri Lanka Address: No. 14, Cooperative Mawatha, N.H.S., Kiribathgoda 11600, Sri Lanka

Email: info@tropicurebliss.com

Phone: +1 307 855 1585 (USA) | +94 11 291 8993 (Sri Lanka)