Privacy Policy

This Policy does not apply to third-party websites, healthcare providers, or payment processors. Please review their respective privacy policies separately.

3.1 Data You Provide Directly

When you fill out a contact or inquiry form on our website, we collect:

• First and last name
• Email address
• Phone number (including country code)
• Time zone and preferred time for contact
• General description of your inquiry (optional)

3.2 Data Collected Automatically

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Date and time of visit
• Pages viewed
• Referring URL
• Cookie and similar tracking data (see Section 7)

3.3 What We DO NOT Collect or Store

Important: Healthy Way provides informational services only. We do not facilitate, arrange, or coordinate any medical procedures or treatments. Any decisions regarding healthcare providers, treatments, or travel are made independently by you. We do not receive or store any medical or health-related documentation.

We do not use automated decision-making or profiling.

5.1 Categories of Recipients

We may share your personal data with the following categories of third parties:

• Healthcare Information Providers — if you request information about specific healthcare providers, we may share your name and contact details solely so they may respond to your inquiry. Any further relationship, including medical consultations, is established directly between you and the healthcare provider.
• Technical Service Providers — email services, CRM systems, and website analytics tools, only to the extent necessary to operate our informational services.
• Government and Regulatory Authorities — only when required by applicable law in Ukraine, the EU, or the United States.

5.2 What We Do Not Do

We do not sell, rent, exchange, or otherwise transfer your personal data to any third parties for commercial purposes without your prior written consent.

5.3 International Transfers

Our informational services involve international data transfers. When transferring personal data outside the European Economic Area (EEA), we ensure an adequate level of protection through Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized mechanisms.

6.1 Rights Under GDPR (EU/EEA Residents)

If you are a resident of the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (EU) 2016/679:

• Right of Access (Art. 15) — obtain confirmation whether we process your data and receive a copy thereof;
• Right to Rectification (Art. 16) — request correction of inaccurate data;
• Right to Erasure / Right to be Forgotten (Art. 17) — request deletion of your data where no longer necessary;
• Right to Restriction of Processing (Art. 18) — request suspension of processing in certain circumstances;
• Right to Data Portability (Art. 20) — receive your data in a structured, machine-readable format;
• Right to Object (Art. 21) — object to processing based on legitimate interest;
• Right to Withdraw Consent (Art. 7(3)) — withdraw consent at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with your national data protection supervisory authority (e.g., your country's Data Protection Authority).

6.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — the categories and specific pieces of personal information we collect, use, disclose, and sell;
• Right to Delete — request deletion of your personal information, subject to certain exceptions;
• Right to Correct — request correction of inaccurate personal information;
• Right to Opt-Out of Sale or Sharing — we do not sell or share personal information for cross-context behavioral advertising;
• Right to Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond what is necessary to provide our informational services;
• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise any California rights, contact us at privacy@healthyway.us or submit a verifiable consumer request. We will respond within 45 days.

6.3 How to Exercise Your Rights

Submit your request to: privacy@healthyway.us

We will respond within 30 calendar days (GDPR) or 45 calendar days (CCPA). We may request identity verification before processing your request.

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us understand how visitors use our site and improve user experience.

7.2 Types of Cookies We Use

You may disable cookies through your browser settings. Note that disabling certain cookies may limit functionality of the website. EU residents will be asked to provide cookie consent via a banner upon their first visit.

Upon expiry of retention periods, data is securely deleted or anonymized.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority within the timeframes prescribed by applicable law (72 hours under GDPR).

EU residents also have the right to lodge a complaint with the competent data protection supervisory authority in their country of residence.

US (California) residents may also contact the California Privacy Protection Agency (CPPA).

© Healthy Way. All rights reserved.