Privacy Policy

Action needed: replace the bracketed placeholders below (legal company name, registration number and registered address) with your real details, then have this policy reviewed by a qualified lawyer before you rely on it — especially because you handle health information and serve patients in the EU and the United States. This is a careful, accurate starting template, not legal advice.

This Privacy Policy explains how Lena's Diamond Consulting (“we”, “us”, “our”) collects, uses, shares and protects your information when you visit lenasdiamondconsulting.com or contact us about dental and medical tourism services in Romania. We are committed to protecting your privacy and handling your information responsibly.

1. Who we are (Data Controller)

The data controller responsible for your information is [FULL LEGAL COMPANY NAME], trading as Lena's Diamond Consulting, registered in [Country] under company number [COMPANY REGISTRATION NUMBER], with its registered office at [REGISTERED ADDRESS]. You can reach us about privacy at contact@lenasdiamondconsulting.com.

2. The information we collect

Information you give us

When you enquire — by WhatsApp, email or our website contact form — you may provide your name, email address, phone number, country/city, the treatment or package you are interested in, your preferred travel dates and any message or details you choose to share. Please note our website contact form does not store your details on our servers; it helps you send them to us directly through WhatsApp or email, which you choose to send.

Health information

To advise on treatment you may choose to share health-related information, such as photographs of your teeth or treatment area, your medical history or a description of your goals. Health data is a special category of personal data; we only process it where you have voluntarily provided it and given your consent, and solely to assess your enquiry and coordinate your care.

Information we collect automatically

We use Vercel Web Analytics and Speed Insightsto understand, in aggregate, how the site is used and how it performs. These tools are privacy-friendly: they do not use cookies and do not collect information that personally identifies you. They provide anonymized, aggregated data such as page views, referring sources and performance metrics. Our hosting provider may also process standard technical data (such as IP address) to deliver and secure the website.

3. How we use your information

• To respond to your enquiry and provide information, assessments and quotes;
• To coordinate consultations, treatment and travel with partner clinics and providers;
• To communicate with you about your enquiry and provide concierge support and aftercare follow-up;
• To improve our website and services (using aggregated, anonymized analytics);
• To comply with legal obligations and protect our legitimate business interests.

4. Legal bases for processing (EU/UK GDPR)

Where the GDPR applies, we rely on: your consent (for example, when you share health information or contact us); the performance of, or steps to enter into, services you request; our legitimate interests in responding to enquiries and running our business; and legal obligations where applicable. You may withdraw consent at any time by contacting us.

5. How we share your information

We do not sell your personal information. We may share it with:

• Partner clinics, hospitals, surgeons and travel providers in Romania, strictly to assess your enquiry and arrange your treatment, accommodation and transfers;
• Service providers (processors) who help us operate, such as our website host and analytics provider (Vercel), our email provider (Google), and the messaging platform you choose to use (WhatsApp/Meta);
• Authorities or advisors where required by law, or to establish, exercise or defend legal claims.

6. International data transfers

We are based in Romania (EU). If you contact us from the United States or elsewhere, your information will be processed in the EU and may be processed by service providers located in the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

7. How long we keep your information

We keep your information only for as long as necessary to respond to your enquiry, provide the services you request, and meet legal or accounting obligations, after which it is securely deleted or anonymized.

8. Your rights

Depending on your location, you may have the right to access, correct, update, delete, restrict or object to our use of your information, to data portability, and to withdraw consent. EU/UK residents may also lodge a complaint with a supervisory authority. California and other US-state residents may have rights to know, delete and opt out of “sale/sharing” of personal information (we do not sell your information). To exercise any right, contact us at contact@lenasdiamondconsulting.com.

9. Cookies & tracking

Our analytics tools are cookieless and do not track you across other websites. We do not currently run advertising or remarketing trackers on the site. If we add any in the future, we will update this policy and, where required, ask for your consent.

10. Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

Our services are intended for adults (18+). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last revised. Significant changes will be reflected on this page.

13. Contact us

Questions about this policy or your information? Email contact@lenasdiamondconsulting.com or message us on WhatsApp at +1 (937) 782-7171.