Privacy policy

Who we are

Book Colombia Medical ("we," "us") is a booking-referral service operated by Scout Theory LLC, an Ohio limited liability company. We are not a clinic, hospital, insurer, or medical provider. Reach us at andy@colombiamedical.co.

What we collect

• Information you give us — name, email, phone/WhatsApp number, procedure of interest, timeline, city preference, and any notes you add to a form or message. If you contact us via WhatsApp, the message content and your phone number are stored in that thread.
• Information collected automatically — page views, referrer, device type, and approximate location (city-level) via Google Analytics 4. IP address is truncated per GA4 defaults. We do not use cookies for advertising.

Why we collect it

• To route your quote request to appropriate partner clinics.
• To reply to your questions on your preferred channel.
• To improve the site (aggregate analytics only).

Who we share it with

• Partner clinics — we forward only what's needed to produce a quote (procedure, timeline, city preference, first name, and how to reach you). We do not share medical history at the quote stage.
• Google (Analytics 4, Apps Script) — for site analytics and to receive form submissions. Governed by Google's privacy policy.
• Legal compliance — if compelled by valid legal process.

We do not sell your data. We do not add you to marketing lists. We do not share your data with data brokers.

Colombian data protection (Habeas Data / Ley 1581 de 2012)

Where information is transmitted to Colombian clinics, those clinics act as independent data controllers under Colombia's Habeas Data law (Ley Estatutaria 1581 de 2012) and its regulations. You have rights to access, correct, update, and delete data held about you by any such clinic — contact the clinic directly for those requests, or contact us and we will facilitate the introduction.

Your rights

• Access: ask what we have on file for you.
• Correction: ask us to fix or update it.
• Deletion: ask us to delete it (subject to legitimate retention needs).
• Portability: ask us to send you a copy.

Send requests to andy@colombiamedical.co. We respond within 30 days.

How long we keep data

Form submissions and message threads: 24 months from your last activity, unless you request earlier deletion. Analytics: 14 months (GA4 default).

Security

We use industry-standard TLS for data in transit and encrypted-at-rest storage for form submissions. No online transmission is 100% secure — do not send sensitive medical documents through the site's forms; email or WhatsApp them directly instead.

Children

This site is intended for adults 18 and older. We do not knowingly collect information from minors. If we learn we've received information from a minor, we delete it.

Changes

We update this policy when practices change and post a new "last updated" date at the top.