We use few cookies and we do not use them to work out what is wrong with you. This page lists every one, and gives you a switch for each.
| Operator | Global Healing Tourist LLP |
| LLPIN | ACZ-7035 |
| Registered office | MIG 3/423, Satya Sai Enclave, Aiginia , Bhubaneswar,Odisha, 751030 India |
| Effective date | 12 December 2025 |
| Version | 2.0 |
No analytics or advertising cookie is placed on any page where you enter or upload medical information. That covers every intake form, the records upload portal, the teleconsultation booking page, the quote request, and any page displaying a written opinion. On those pages only strictly necessary cookies load. This is enforced technically, not by policy alone the measurement script is not present in the page source.
The reason is straightforward. On a site like this, knowing which pages you visited would reveal what condition you may have. Sending that anywhere is not something we are willing to do, so we have built the site not to collect it in the first place.
Small text files a site stores on your device. Some exist only until you close the browser (session cookies); some persist for a set period (persistent cookies). Some are set by us (first-party); some by a service we use (third-party). Where this policy says "cookies" it also covers local storage, session storage and pixel tags.
| Category | Consent | Default | Can you switch it off? |
|---|---|---|---|
| Strictly necessary | Not required | On | No, the site would not function |
| Functional | Opt-in | Off | Yes |
| Analytics | Opt-in | Off | Yes |
| Advertising | Opt-in | Off | Yes, and see section 7 |
Everything except strictly necessary cookies is off until you turn it on. Nothing is pre-ticked. Refusing is one click, the same as accepting.
Set on the basis of legitimate use under the DPDP Act 2023, and as strictly necessary under the GDPR/ePrivacy regime for patients in the EU and UK. These load on every page, including medical pages.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| ht_consent | Healing Tourist | Records which categories you allowed, so we stop asking. Contains category flags and a timestamp, no identifier. | 6 months |
| ht_session | Healing Tourist | Keeps you signed in to the records portal during a visit. | Session |
| ht_csrf | Healing Tourist | Prevents another site submitting a form as you. | Session |
| __cf_bm | Cloudflare | Distinguishes humans from bots. Protects the site from automated abuse. | 30 minutes |
| cf_clearance | Cloudflare | Records that you passed a security check, so you are not challenged repeatedly. | 30 minutes / per Cloudflare config |
| Name | Purpose | Duration |
|---|---|---|
| ht_country | Remembers your country so we show the right track and currency without asking again. | 6 months |
| ht_lang | Remembers your language preference. | 6 months |
| ht_currency | Remembers your display currency (USD, GBP, INR, AED). | 6 months |
What we removed. An earlier version of this site saved partially completed enquiry forms in a cookie so you could resume later. We have withdrawn that. A half-finished medical enquiry sitting in browser storage on a shared or family device is a privacy risk that outweighs the convenience.
We use Google Analytics 4 to understand which pages people find useful. It is loaded only if you switch analytics on, and it is never loaded on medical pages (section 1).
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | Distinguishes one visitor from another for aggregate reporting. | Up to 2 years set to 14 months in our config | |
| _ga_ZH4DWM3ZPB | Maintains session state for our specific property. | Up to 2 years set to 14 months in our config |
How we have configured it:
An honest limitation. Google Analytics is operated by Google LLC and involves processing outside India. If that is unacceptable to you, leave analytics off the site works identically. We are evaluating a cookieless, self-hosted alternative and will update this page if we move.
We do not currently place any advertising cookie. The category exists in the preference panel so that the answer is unambiguous rather than absent.
Whatever we do in future, these commitments are unconditional:
If we introduce an advertising cookie, it will appear in this table with its purpose and duration, the version number below will change, and existing consent will be re-requested rather than assumed.
| Service | Where it appears | Cookies |
|---|---|---|
| Cloudflare (hosting, CDN, security) | Every page | Strictly necessary only see section 4 |
| Google Analytics | Public information pages only, and only with consent | Analytics section 6 |
| Payment aggregator | Payment flow only | Necessary for the transaction, set by the aggregator under its own policy. It does not receive health data. |
| Video platform (domestic teleconsultation) | During a scheduled consultation only | Session-only technical cookies. Deleted when the call ends. |
| Google Fonts | Every page | None fonts are self-hosted, so no request goes to Google on page load |
We do not embed social media widgets, chat widgets, session-recording tools, heatmaps or A/B testing scripts. Session recording in particular is incompatible with a site where people type medical information.
change your choices at any time. Your selection is stored for six months, after which we ask again.
If your browser sends a GPC signal, we treat it as a refusal of all non-necessary cookies. You do not need to do anything else.
Chrome: Settings → Privacy and security → Third-party cookies. Firefox: Settings → Privacy & Security. Safari: Settings → Privacy. Edge: Settings → Cookies and site permissions. Blocking all cookies will break sign-in and form submission here.
It removes ht_consent along with everything else, so you will be asked again on your next visit. Preferences are per-browser and per-device.
| Category | India DPDP Act 2023 | EU / UK GDPR & ePrivacy |
|---|---|---|
| Strictly necessary | Legitimate use (security, service delivery) | Art. 6(1)(f) / strictly necessary exemption |
| Functional | Consent | Art. 6(1)(a) consent |
| Analytics | Consent | Art. 6(1)(a) consent required, not claimed as legitimate interest |
| Advertising | Consent | Art. 6(1)(a) explicit consent |
Consent is sought as freely given, specific, informed and unambiguous. Withdrawing is as easy as giving.
Under the DPDP Act a child is anyone under 18. We do not use cookies for tracking, behavioural monitoring or targeted advertising directed at children in any circumstances.
If we add a cookie category or a third-party provider, we update this page, increment the version, and re-request consent rather than relying on what you agreed to previously.
| Data Protection Officer | privacy@healingtourist.com |
| Grievance Officer | grievance@healingtourist.com acknowledgement within 24 hours |
| Escalation, India | Data Protection Board of India |
| Escalation, EU/UK | Your supervisory authority; in the UK, the ICO |
See also our Privacy Policy.