Privacy & Data Protection Policy

Last Updated: January 2026

1. Introduction

Welcome to Oviya Group. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website or use our medical concierge services, and tell you about your privacy rights and how the law protects you.

2. Who We Are

Oviya Ltd is a company registered in England and Wales.

Company Number: 16917033
Registered Office: 128 City Road, London, United Kingdom, EC1V 2NX
Data Controller: Nada Demnati

3. The Data We Collect About You

To facilitate your medical journey, we may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: First name, last name, passport details (for travel bookings).
• Contact Data: Billing address, email address, telephone numbers.
• Medical Data (Special Category Data): To provide you with accurate quotes and assess your eligibility for surgery, we collect health information such as X-rays, MRI scans, medical history, and current medication lists. We only collect this data with your explicit consent.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

To process your quote request and assess medical eligibility.
To manage your bookings (flights, accommodation, nursing care).
To coordinate with our partner surgeons and clinics in Morocco.
To process payments via our secure partners (Wise/Bank Transfer).

5. Sharing Your Personal Data

We act as a facilitator. To perform our contract with you, we must share your data with:

➜ Medical Providers: Our partner surgeons (e.g., Dr. Tazi’s team) and clinics in Rabat, Morocco.
➜ Logistics Partners: Private drivers, nursing staff, and accommodation providers (Only Identity Data).

International Transfers

By using our services, you acknowledge and consent that your data will be transferred to Morocco for the performance of your medical treatment. We ensure our partners in Morocco adhere to strict confidentiality agreements.

6. Data Security & Your Rights

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Under GDPR, you have rights to request access, correction, or erasure of your personal data.

To exercise any of these rights, please contact us at: info@oviyagroup.com