Privacy Policy

At Mediran (mediran.co), safeguarding confidential electronic health records (EHR), surgical diagnostics, and cross-border identity credentials represents our highest institutional duty. We adhere to international patient data protection principles, medical confidentiality ethics, and zero-compromise security protocols.

1. Institutional Overview & Scope

This Privacy Policy governs the collection, processing, storage, and cross-border transmission of medical records and personal data processed via the Mediran Web Portal (mediran.co), the Mediran Mobile Application (Android & iOS), and our liaison desks in Dhaka and Tehran.

By accessing our healthcare platform, submitting diagnostic records, or requesting medical travel facilitation, you acknowledge the data handling practices described in this policy.

2. Information We Collect

To facilitate clinical second opinions, pre-travel doctor matching, consular clearance, and hospital admission, Mediran collects and processes the following information:

• Identity & Consular Records: Full legal name, passport details and bio-page copy, nationality, date of birth, national ID (NID), emergency contact details, and accompanying attendant travel information.
• Clinical & Diagnostic Dossiers: Diagnostic imaging files (MRI, CT, PET scans, angiography, ultrasound), pathology and laboratory test reports, biopsy results, surgical discharge summaries, and prescriptions.
• Telemedicine & Consultation Records: Physician clinical consultation notes, pre-surgical treatment recommendations, medical questionnaire answers, and translation transcripts.
• Travel, Logistics & App Data: Travel dates, flight itineraries, hospital and hotel reservation details, designated transfer schedules, and mobile application usage diagnostics.

3. Lawful Basis and Purpose of Processing

Mediran processes patient information solely for legitimate healthcare coordination purposes:

• Express Patient Consent: Explicit authorization granted by the patient or authorized legal representative when submitting profiles and documents.
• Healthcare Service Execution: Required coordination for medical second opinions, hospital bed reservations, surgical scheduling, and post-operative follow-up.
• Consular Visa Facilitation: Official transmission of hospital acceptance and medical urgency letters to accredited diplomatic consular authorities for medical visa issuance.
• Emergency Patient Care: Timely sharing of essential blood group, allergy records, and medical conditions with emergency medical triage teams during active travel.

4. Data Encryption & Storage Security

We implement multiple layers of security to safeguard your confidential health records:

• In Transit: All web and mobile communications are encrypted using TLS 1.3 with Perfect Forward Secrecy. Unencrypted HTTP traffic is automatically blocked.
• At Rest: Diagnostic files and personal records are encrypted with AES-256 standard encryption on secured, isolated server volumes.
• Access Controls: Access to patient clinical dossiers is restricted strictly to authorized medical coordinators and the attending hospital surgical board.
• Mobile Protection: Secure device storage integration with biometric authentication safeguards stored health cards on Android and iOS devices.

5. Controlled Disclosure & Third-Party Coordination

Mediran maintains a strict policy against selling, renting, or trading personal or medical data to third-party advertisers. Information is disclosed solely to authorized partners necessary to deliver your medical care:

• Accredited Partner Hospitals: Board-certified specialist teams and IPD-certified hospitals (such as Bahman Hospital, Day General Hospital, Rajaie Cardiovascular Medical & Research Center, and Shiraz Organ Transplant Center) for clinical treatment planning.
• Consular & Visa Authorities: Verified visa desks and embassies to authenticate medical travel requirements.
• Emergency Care Providers: Ambulance services and intensive care units in the event of an active medical emergency during travel.
• Diagnostic Laboratories: Certified pathology and imaging centers when additional tests or evaluations are requested.

6. Patient Rights & Data Control

You maintain full control over your personal and medical records:

• Right to Access: You can review and obtain copies of your health profile and submitted records at any time.
• Right to Update: You can correct or update personal information, passport renewals, or medical histories via the app or through our Dhaka liaison desk.
• Right to Erasure: You can request permanent deletion of your account, profile, and uploaded medical records through our Account Deletion Portal.
• Right to Withdraw Consent: You may cancel consultations or withdraw authorization for specific hospital referrals at any point prior to hospital admission.

7. Cookies and Technical Diagnostics

The Mediran website uses only essential session cookies for system security, CSRF protection, and page navigation. We do not use third-party tracking cookies or advertising pixels. Technical diagnostic logs in our mobile app are pseudonymized and used exclusively to resolve bugs and enhance app stability.

8. International Medical Data Transfers

Because Mediran facilitates cross-border medical travel between Bangladesh and accredited international medical centers, health records are transferred internationally between our authorized offices and destination hospitals. All cross-border transfers are conducted over encrypted channels in accordance with international medical data protection practices.

9. Contact for Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal health records, please contact our privacy desk:

Mediran Privacy & Compliance Desk
Email: privacy@mediran.co
Dhaka Liaison Office: Gulshan-2, Dhaka 1212, Bangladesh
Operations HQ: Nelson Mandela Blvd, Medical District
Support Helpline: +880 1700-000000 / +98 21 8800 0000