Home / Privacy Policy

Privacy Policy

Version of 9 October 2026 (English translation of the Ukrainian version of 27 July 2026, with the additions that apply to the English version of the site).

This Policy explains what personal data the website mediukraine.com collects, why, on what legal basis, who it is shared with and how you can control it. We have written it in plain language and without generic phrases: below is exactly what the site actually does.

MediUkraine is an information catalogue of medical facilities and doctors. We do not provide medical services, do not carry out diagnostics or treatment and are not a healthcare facility. We help you find a clinic or a doctor and pass your request on to the facility you choose.

1. Who is responsible for your data

The controller of personal data is the operator of the website mediukraine.com (“we”).

You can contact us about any personal data question at info@mediukraine.com or through the contact form.

2. What data we collect

2.1. Data you provide yourself

Consultation request (the “Request a consultation”, “Get a treatment plan with prices” forms and similar). We collect your name, phone number, the country you indicate and the page from which the request was sent. If you add other information in a free-text field, we process that too.

Review of a doctor or clinic. We collect: a rating from 1 to 5, the review text, your name, your email address and, optionally, your city and the month of your appointment.

Correspondence. If you write to us by email or through the contact form, we keep the correspondence and the contact details it came from.

2.2. Data collected automatically

Technical request data. Our server, like any web server, records the IP address, browser type and time of access. When a review is submitted we store not the IP address itself but an irreversible hash of it — it is used only to limit spam and rating manipulation, and the address cannot be recovered from it.

Visitor analytics. The site uses Google Analytics 4 (stream ID G-Q5RQN36T2X, connected through Google Site Kit). Google sets the cookies _ga and _ga_Q5RQN36T2X in your browser, which make it possible to tell a repeat visit from a new one. We see anonymised statistics: how many people visited a page, where they came from and which sections they viewed. We do not use Google Analytics to show advertising and do not load social network advertising pixels on the site.

Search statistics. Through Google Search Console we see anonymised data about the queries for which the site appeared in search. This tool does not transfer personal data.

2.3. Health data — separately, and most importantly

You write the text of a request or review yourself. If you mention a diagnosis, symptoms, past operations or any other information about your health, this information becomes a special category of personal data, and we process it only on the basis of your explicit consent, which you give by ticking the relevant box in the form.

The text of a review is published on the site in full and openly — together with any health information you chose to include. Please write only what you are prepared to share publicly, and do not include other people’s data — doctors, relatives or other patients.

3. Why we process data and on what legal basis

PurposeDataLegal basis
Pass your request to the chosen clinic, agree an appointment date, prepare a cost estimate Name, phone, country, content of the request, health data if you provided it Your consent, given when you send the request; for health data — separate explicit consent (Art. 11 and Art. 7(2) of the Law of Ukraine “On Personal Data Protection”; Art. 6(1)(a) and 9(2)(a) GDPR)
Publish your review and moderate it Rating, text, name, city, month of appointment Your consent, given by ticking the box in the review form
Contact you if something needs clarifying during moderation Email Your consent
Protect the site from spam and rating manipulation IP address hash, browser type, time of submission Our legitimate interest in the security of the service and the reliability of reviews (Art. 6(1)(f) GDPR)
Handle a complaint about a review and be able to prove the circumstances of its publication IP hash, email, time consent was given Legitimate interest; fulfilling the obligation to protect the rights of third parties
Understand how the site is used and improve it Anonymised Google Analytics statistics Legitimate interest; for cookies — your consent where the law of your country requires it

4. Who we share data with

  • The medical facility or doctor you have chosen. This is the main purpose of a request: an appointment is impossible without passing on your name and phone number. The clinic becomes an independent controller of this data and processes it under its own policy.
  • Our hosting provider — the server on which the site runs and the database is stored.
  • Google LLC — anonymised visit statistics (Google Analytics 4, Google Search Console).
  • Our email provider — for correspondence with you and for internal notifications.
  • Telegram — our team receives notifications of new requests (name, phone, country and the page of the request) in a closed Telegram chat.

We do not sell personal data and do not share it with third parties for advertising.

On the automated processing of reviews: we plan to prepare short summaries of published reviews using a language model. In that case only the anonymised text of already published reviews is passed to it — without names, email addresses or any contact details. This is stated explicitly in the consent text under the review form.

5. Transfers outside Ukraine

Google LLC is based in the USA, so anonymised statistics are processed outside Ukraine and the EU. Google commits to protecting such data under the Data Privacy Framework and the EU Standard Contractual Clauses. Telegram processes messages on its own servers outside Ukraine. If you do not want your visits to be included in analytics, follow the advice in section 7.

6. How long we keep data

  • Consultation requests — 3 years from the request (the period within which questions about the service may arise), after which we delete or anonymise them.
  • Published reviews — for as long as the review remains on the site. You can withdraw it at any time, and we will remove it.
  • Rejected reviews — 1 year, as evidence that moderation removes spam and not inconvenient opinions.
  • A review author’s email, IP hash and time of consent — while the review is published, and for 1 year after removal: this is our evidence in case of a complaint.
  • Correspondence — 3 years.
  • Analytics data — according to Google Analytics 4 retention periods (typically 14 months).

7. Cookies

The site uses two kinds of cookies:

  • Technical — needed for the site to work, for page caching and for saving viewing settings. The site will not work without them.
  • Analytics — _ga and _ga_Q5RQN36T2X from Google Analytics. They do not contain your name and are not used for advertising.

You can delete or block cookies in your browser settings, and you can also install the official Google Analytics opt-out add-on. Blocking technical cookies may break some pages.

8. Your rights

Wherever you are, you have the right to:

  • find out what data of yours we store and get a copy of it;
  • correct inaccurate data;
  • delete data — including withdrawing a published review;
  • restrict processing or object to it;
  • withdraw consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal;
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, write to info@mediukraine.com. We reply within 30 calendar days. If your request concerns a specific review, please give the page and the name under which it was published.

Supervisory authorities: in Ukraine — the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua); in the European Union — the data protection authority of your country of residence.

9. How we protect data

  • The site works only over a secure HTTPS connection.
  • Only authorised persons have access to the database and the control panel, through separate password-protected accounts.
  • The IP address of review authors is stored only as an irreversible hash.
  • The email of review authors is never published or shown to other visitors.
  • Reviews are moderated manually, including for accidental disclosure of third parties’ personal data.

No service can guarantee absolute security. If a breach occurs that may create a risk to your rights, we will notify you and the supervisory authority within the time limits set by law.

10. Children

The site is not intended for people under 18, and we do not knowingly collect their data. The review form explicitly requires confirmation of legal age. If you believe a child has sent us their data, write to us and we will delete it.

11. Changes to this Policy

We may update this Policy. The date of the current version is given at the top of the page. If the changes are significant — for example, a new purpose of processing — we will announce this separately on the site.

12. How to contact us

Email: info@mediukraine.com
Contact form: mediukraine.com/en/contact
Review publication rules: mediukraine.com/pravyla-vidhukiv (in Ukrainian)

Request a consultation
By clicking the button, you agree to the processing of your personal data