Privacy Policy
Last updated: August 2026
Contact Form Privacy
This section covers information you submit through HealMatch contact forms and related main-site services. The separate planner section below explains how the HealMatch Health Checkup Planner handles analytics and planner data.
1. Information We Collect
When you use HealMatch, we may collect the following types of information:
- Contact Information: Name, email address, phone number, and country of residence when you submit an inquiry form.
- Medical Information: General medical condition or procedure interest that you voluntarily provide to help us connect you with appropriate healthcare providers.
- Usage Data: Information about how you interact with our website, including pages visited, time spent, and referring sources.
- Device Information: Browser type, operating system, and device identifiers for website optimization.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries about medical tourism services in Thailand
- Connect you with JCI-accredited hospitals and healthcare providers
- Provide personalized information about procedures, costs, and travel logistics
- Improve our website and services based on usage patterns
- Send you relevant updates if you opt-in to communications
- Comply with legal obligations
3. Information Sharing
We may share your information with:
- Healthcare Providers: Hospitals and medical facilities you express interest in, with your consent.
- Service Providers: Third-party services that help us operate our website, such as email services and analytics.
- Legal Requirements: When required by law or to protect our rights and safety.
We do not sell your personal information to third parties.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Secure HTTPS encryption for all data transmission
- Access controls limiting who can view personal data
- Regular security assessments of our systems
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
5. Cookies and Tracking on the Main Website
The disclosures in this subsection apply to the main HealMatch website and its contact form experience. The planner uses the separate analytics setup described in the planner section below.
Analytics (Google Analytics 4 via Google Tag Manager)
We use Google Analytics 4 (GA4), loaded through Google Tag Manager (GTM), to understand how visitors use our website. When active, GA4 may collect:
- Pages visited and time spent on each page
- Traffic source (how you arrived at our site)
- General geographic region (country/city level, not precise location)
- Device type, browser, and operating system
- Interactions such as button clicks, form submissions, and scroll depth
Your Consent Choice
Analytics tracking is only activated after you click "Accept" on the cookie consent banner. If you click "Decline," no analytics scripts are loaded and no tracking cookies are set.
How to Change Your Consent
Your consent preference is stored in your browser's local storage under the key
healmatch-consent. To
change your choice:
- Clear your browser's local storage for this site (via Developer Tools → Application → Local Storage)
- Clear all site data in your browser's privacy settings
- Use your browser's private/incognito mode for a fresh consent prompt
Other Local Storage Usage
Besides your consent preference, we store the following data locally in your browser:
- Health checkup quiz answers (to show your results)
- A/B experiment assignments (to maintain a consistent experience)
None of this local data is transmitted to third parties. For more information about how Google processes analytics data, see Google's Privacy Policy.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Opt out of marketing communications
- Lodge a complaint with a data protection authority
To exercise these rights, contact us at contact@healmatch.net.
7. International Data Transfers
Your information may be transferred to and processed in Thailand and other countries where our service providers are located. We ensure appropriate safeguards are in place for such transfers.
8. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "Last updated" date.
10. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
- Email: contact@healmatch.net
- Location: Bangkok, Thailand
HealMatch Health Checkup Planner Privacy
Analytics in the HealMatch Health Checkup Planner
You control analytics in the HealMatch Health Checkup Planner. The planner sends nothing to Google Analytics 4 (GA4) unless you choose Allow. HealMatch never sends GA4 your health answers, report content, or provider identities or content. It never sends GA4 your exact location, payment-method details, or Stripe identifiers.
What the Planner Sends and Why
After you allow analytics, HealMatch's application code sends only the approved data below to GA4.
- Planner use: The code sends progress, completed workflow steps, plan completion, and report views.
- PDF reliability: The code sends generation attempts, successful downloads, and broad failure reasons, such as a network error or timeout.
- PDF pass: The code sends Checkout starts and pass activations after a purchase.
- Provider activity: The code sends a result-count range and a website, directions, or call action, but never the provider.
- Sharing and acquisition: The code sends successful sharing methods plus approved virtual page, campaign, and referral-source categories.
For a PDF-pass purchase, HealMatch sends the fixed product type and US$5 price. It also sends a random analytics-only transaction ID. It does not send a Stripe ID or payment-method details.
HealMatch uses this information to understand product use, improve workflows, and find reliability problems. These analytics data do not describe your health or the content you enter.
What HealMatch Never Sends
HealMatch never sends the sensitive data below to GA4.
- Identity and profile: HealMatch never sends names, contact details, birth dates, ages, sex, or other profile answers.
- Health: HealMatch never sends symptoms, conditions, allergies, medicines, family history, height, weight, BMI, test selections, or recommendations.
- Reports: HealMatch never sends report content, screening history, notes, or other free text.
- Providers and location: HealMatch never sends provider identities, searches, care needs, postal codes, coordinates, or exact locations.
- Payments and internal IDs: HealMatch never sends payment-method details, Stripe identifiers, planner or storage identifiers, or Report Access Codes.
- Raw browser data: HealMatch never sends URLs, queries, hashes, referrers, or form values.
- Raw application data: HealMatch never sends API request or response bodies, error messages, or stack traces.
How Your Choice Works
Your browser stores your analytics choice locally for the planner site until you change it or clear the site's data. This choice contains no health data and remains separate from GA cookies.
The planner configures Google Analytics to create host-only cookies that expire with the current browser session. Google may count you again when you return in a later session. Other HealMatch pages may create different GA cookies.
Before you choose Allow, the planner loads no Google tag and creates no analytics queue or GA cookie. It sends no analytics request, including any cookieless signal. The planner does not queue events or page views before consent, and it never replays them later.
To change your choice, open Settings > Analytics in the planner. If you choose Do not allow, the planner stops new analytics requests. It removes the Google tag and in-memory queue. It also tries to delete known GA cookies. Google may keep data it received earlier under its own terms.
How Google Handles the Data
After you allow analytics, Google creates standard first-visit, session-start, and user-engagement events. Google may also create a random client ID in a first-party GA cookie. It may receive session statistics, language, and browser or device details.
Google may use your IP address to estimate your general location. Google says it discards the IP address before it logs analytics data.
For the planner, HealMatch keeps advertising consent denied. HealMatch turns off Google Signals, ad personalization, automatic page views, raw referrers, URL passthrough, and cross-domain linking. HealMatch also turns off user-provided data collection, granular location and device collection, and automatic interaction measurement.
HealMatch sets a two-month retention period for user-level and event-level data in GA4. Staff can use that data in Explorations and funnel reports during that period. Google may keep standard aggregate reports longer under its own terms.
Google may process analytics data outside your country. Read Google's Privacy Policy to learn how Google handles this information.
How the Planner Differs from the Main Website
The main HealMatch website may use Google Tag Manager and other measurement tools that
this policy covers elsewhere. The planner uses Google's direct gtag.js
library instead. HealMatch keeps Google's automatic interaction and page-view tracking
off for the planner.
This section also covers GA4 on the planner's Next Steps page. The embedded provider-search tool does not load Google Analytics, but it does load Google Maps and Places as described in the Care Navigation section below. Your GA4 choice does not control the separate Google Maps and Places processing needed for that tool.