Your information, explained
What we collect, why we use it, and how to contact us about it.
Updated 28 October 2026
Who handles your request
The MedLantern team operates medlantern.com and handles the enquiries submitted here. For a privacy question, correction or deletion request, use our contact form and select “Privacy or deletion”. You do not need to purchase a service.
What we collect and why
A quote request asks for your service category, country and email so we can assess whether we can help and respond. Timing, insurance category, preferred city, an existing price and WhatsApp are optional. Contact requests include your email, topic and message. We use these details to respond to your request and discuss a possible service, not to sign you up for marketing.
Please do not submit medical records, diagnoses, passport details, payment-card numbers or other people's information. If a hospital needs clinical information later, the appropriate secure sharing route and consent must be agreed first. Submitting this form does not authorise sharing your details with hospitals.
Website measurement and service providers
The website is hosted by Vercel. Vercel Web Analytics measures website use under its privacy information. We also keep daily counts of quote-button clicks, form starts, successful requests, errors and chat openings, grouped by a small set of page labels. Our own event counters do not contain your email, form answers or a visitor identifier, and do not set tracking cookies.
Enquiries are stored using Upstash Redis with access restricted to the team. Hosting and storage providers process information to run the service and may process it outside your country. Their own infrastructure logs and backup policies also apply. We do not sell your information.
The optional AI assistant
If you send a chat message, that message and recent conversation context are sent to DeepSeek to generate a reply. This is an automated general-information assistant, not a clinician. Do not enter medical records, identifying details or contact information in chat. Use the request or contact form to reach the team instead. The website keeps chat history in the open page; we do not save full chat transcripts in the enquiry store.
How long information stays
New enquiry records automatically expire from our active enquiry store 30 days after submission; changing a request's status does not extend that period. Daily first-party event counts expire after 90 days. Short-lived anti-abuse counters use hashed values and expire after their rate-limit window; contact deduplication hashes expire after 30 days. Any later agreed paid service will need its own record-keeping arrangements, explained before payment. Providers may retain security logs or backups under their policies.
Your choices
Only the fields marked required are needed for an enquiry. You can ask us to access, correct or delete the information we hold, or withdraw your permission for further enquiry handling. Use the same email as your original request and include your reference if available. We may verify that you control that email before sharing or deleting a record. Depending on where you live, you may also have rights to object, restrict processing, request portability or complain to your local data-protection authority.
We use enquiry details to take the steps you request before a possible service agreement, your agreement for optional disclosures, and our interest in keeping the site secure for limited anti-abuse processing. No medical assessment or automated eligibility decision is made from the form.