Privacy Policy

This Privacy Policy explains how Lena's Diamond Consulting (“we”, “us”, “our”) collects, uses, shares and protects your information when you visit lenasdiamondconsulting.com or contact us about dental and medical tourism services in Romania. We are committed to protecting your privacy and handling your information responsibly.

1. Who we are

The business responsible for your information (the “data controller” where the GDPR applies) is Lenna's Diamond Consulting LLC, a single-member limited liability company formed in the State of Georgia, United States, trading as Lena's Diamond Consulting, with its principal place of business at 136 Harden Dr, Ringgold, GA 30736, United States. You can reach us about privacy at contact@lenasdiamondconsulting.com or by phone at +1 (937) 782-7171.

2. The information we collect

Information you give us

When you enquire — by WhatsApp, email or our website contact form — you may provide your name, email address, phone number, country/city, the treatment or package you are interested in, your preferred travel dates and any message or details you choose to share. Please note our website contact form does not store your details on our servers; it helps you send them to us directly through WhatsApp or email, which you choose to send.

Health information

To advise on treatment you may choose to share health-related information, such as photographs of your teeth or treatment area, your medical history or a description of your goals. Health data is a special category of personal data; we only process it where you have voluntarily provided it and given your consent, and solely to assess your enquiry and coordinate your care.

Payment information

Card payments are processed by Stripe, and by Apple Pay or Google Pay if you choose to use them. Your full card number is entered on Stripe’s secure checkout — we never receive or store your full card details. We receive only confirmation of payment and limited details such as your name, email, the amount, and the last four digits and brand of the card, which we keep for accounting, fraud-prevention and dispute-handling purposes. Stripe processes this data as an independent controller under its own privacy policy. If you pay with Apple Pay, Apple does not share your real card number with us.

Information we collect automatically

We use Vercel Web Analytics and Speed Insightsto understand, in aggregate, how the site is used and how it performs. These tools are privacy-friendly: they do not use cookies and do not collect information that personally identifies you. They provide anonymized, aggregated data such as page views, referring sources and performance metrics. Our hosting provider may also process standard technical data (such as IP address) to deliver and secure the website.

3. How we use your information

• To respond to your enquiry and provide information, assessments and quotes;
• To coordinate consultations, treatment and travel with partner clinics and providers;
• To communicate with you about your enquiry and provide concierge support and aftercare follow-up;
• To improve our website and services (using aggregated, anonymized analytics);
• To comply with legal obligations and protect our legitimate business interests.

4. Legal bases for processing (EU/UK GDPR)

Where the GDPR applies, we rely on: your consent (for example, when you share health information or contact us); the performance of, or steps to enter into, services you request; our legitimate interests in responding to enquiries and running our business; and legal obligations where applicable. You may withdraw consent at any time by contacting us.

5. How we share your information

We do not sell your personal information. We may share it with:

• Partner clinics, hospitals, surgeons and travel providers in Romania, strictly to assess your enquiry and arrange your treatment, accommodation and transfers;
• Our payment processor, Stripe, to take payment, prevent fraud and handle refunds or disputes;
• Service providers (processors) who help us operate, such as our website host and analytics provider (Vercel), our email provider (Google), and the messaging platform you choose to use (WhatsApp/Meta);
• Authorities or advisors where required by law, or to establish, exercise or defend legal claims.

6. International data transfers

We are established in the United States and your information is primarily processed there. Because the services you book are delivered in Romania, we transfer the details necessary to arrange your trip and treatment to partner clinics, hotels and travel providers in Romania (EU). Where the GDPR applies to a transfer, we rely on appropriate safeguards such as Standard Contractual Clauses or your explicit consent.

7. How long we keep your information

We keep your information only for as long as necessary to respond to your enquiry, provide the services you request, and meet legal or accounting obligations, after which it is securely deleted or anonymized.

8. Your rights

Depending on where you live, you may have the right to access, correct, update, delete, restrict or object to our use of your information, to data portability, and to withdraw consent.

US residents (California and other states with privacy laws): you have the right to know what personal information we collect and why, to request a copy, to request deletion or correction, to limit the use of sensitive personal information (which includes health information), and not to be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

EU/UK residents: you have the rights above under the GDPR and may also lodge a complaint with your local supervisory authority.

To exercise any right, contact us at contact@lenasdiamondconsulting.com. We will verify your request and respond within the time required by applicable law. You may use an authorised agent where the law allows it.

9. Cookies & tracking

Our analytics tools are cookieless and do not track you across other websites. We do not currently run advertising or remarketing trackers on the site. If we add any in the future, we will update this policy and, where required, ask for your consent.

10. Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

Our services are intended for adults (18+). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last revised. Significant changes will be reflected on this page.

13. Contact us

Questions about this policy or your information? Email contact@lenasdiamondconsulting.com or message us on WhatsApp at +1 (937) 782-7171.