Effective 23 September 2026. Last updated 23 September 2026. This policy applies to the GMT mobile app and to globalmedicaltravel.co.
Global Medical Travel and GMT are trading names of MDM & Company, LLC, a California limited liability company. In this policy, “we” and “us” mean that company.
You are telling us about a medical procedure. That is not ordinary customer data, and this page says plainly what happens to it.
When you open an account. Your name, email address and phone number. Your password is handled by our sign-in provider and is never visible to us.
When you plan a trip. The procedures or treatments you are asking about; your travel date, and the pickup location and address you give us in San Diego County; your passport expiration date; details of anyone travelling with you, and group details if you join a group trip; and the amount you are quoted and the amount you pay.
Documents you upload. Medical estimates, receipts, aftercare instructions and photographs. You choose what to upload. Nothing is taken from your phone automatically, and the app reads your photo library only at the moment you pick a file.
Messages you send. Anything you write in the in-app chat, and our replies.
Payments. We never see your card number. Card details go directly from your device to Stripe, our payment processor. What reaches us is the amount, the date, whether it succeeded, and the last four digits.
The procedure you are asking about, and the documents you upload, are information about your health. We treat them accordingly.
Uploaded files are stored in a private area that is not reachable by any web address. Each file sits in a folder tied to your account, and the check is made on who is asking rather than on what they asked for, so guessing another person’s file name gets nowhere. When you open one of your own documents, the app requests a link that works briefly and then expires.
We do not use anything about your health to advertise to you, and we never will.
People on a group trip are often only loosely acquainted, and an estimate names a procedure. So sharing a trip gives no one any access to anyone else’s documents or medical details. Other passengers can see the shared itinerary and who is travelling. They cannot see your files, and they cannot see what you are having done.
To book your appointment we pass the clinic what it needs to treat you: your name, the procedure, the date and time, and anything you have asked us to send ahead, such as an estimate or a photograph.
Clinics in our network are independent businesses in Mexico and South Korea. Once your information reaches a clinic, that clinic handles it under its own policies and under the law where it operates, not under this one. We choose who joins the network, and we can stop working with a provider, but we do not control their records.
We use a small number of services to run the app. Each is named here with what it actually receives. None of them is paid for your data, and none is allowed to use it for anything but the job listed.
We may also disclose information if the law requires it, or where it is necessary to protect someone’s safety.
Your account and trips stay for as long as your account is open. Payment records — the amount, the date and the invoice, not your medical details — are kept for seven years because tax and accounting law requires it, even after an account closes. Everything else is deleted when you close your account.
Close your account from inside the app, at any time. Settings, then Close my account. It takes effect immediately and takes your profile, your trips and your documents with it. We do not ask you to email us and wait.
You can see and change your name, email, phone and documents in the app whenever you like. If you want a copy of everything we hold, or you want something corrected that you cannot edit yourself, write to us and we will do it.
Everything travels encrypted between your phone and our systems, and is encrypted where it is stored. Access to your records is enforced by the database itself rather than by the app asking politely, so a flaw in one screen cannot expose another person’s file. Inside GMT, only staff who are coordinating your trip can see your details.
No system is perfect, and anyone who tells you otherwise is selling something. If a breach ever affects your information, we will tell you.
GMT operates from California. Our database and file storage are hosted in the United States, in Oregon. Stripe, Resend, Microsoft and Google process information in the United States and elsewhere.
Because our clinics are in Mexico and South Korea, booking your treatment means your information travels to the country where you will be treated. That is inherent in medical travel rather than a choice we make, and it is worth knowing before you book.
California law gives you the right to know what personal information we collect, to ask for a copy, to ask us to correct it, and to ask us to delete it. The app lets you do the last of those yourself, in one step.
Health information is sensitive personal information under California law. We use it only to arrange and deliver the travel and treatment you asked for. You have the right to limit the use of sensitive personal information; we already limit ours to that single purpose, so there is nothing further to switch off.
We have not sold or shared personal information for advertising in the past twelve months, and we have no plans to. We will not treat you differently for exercising any of these rights.
GMT is for adults. You must be 18 or older to open an account. We do not knowingly collect information from children, and if we learn that we have, we delete it.
If we change how we handle your information, we will update this page and change the date at the top. If a change is significant, such as a new company handling your data or a new purpose, we will tell you in the app before it takes effect rather than expecting you to notice.
Questions about this policy, or about your own information: hello@medicaldestinationmanagement.com
MDM & Company, LLC
1111 6th Ave, Ste 550 #205454
San Diego, California 92101