1. Who We Are

This website is operated under the name Top Medical Health (also referred to as “TopMedicalHealth,” “we,” “us,” or “our”). The website address is https://www.topmedicalhealth.com/.

Website publisher / data controller or data fiduciary: [Top Medical Health Care Center].

Privacy contact: [[email protected]].

Postal or business address: [Shahapur-6620, Ishwardi, Pabna, Rajshahi, Bangladesh].

For privacy questions, requests, or concerns, use the contact details provided in the Contact and Privacy Requests section. Do not publish this policy until the responsible publisher identity and contact channel have been confirmed.

2. Scope of This Privacy Policy

This policy applies to information processed in connection with your use of the Top Medical Health website, including when you browse pages, use website features, follow external links, submit a message through a contact channel, or interact with advertising or embedded services displayed on the website.

The publisher will assess and follow the data-protection requirements that apply to its actual activities. These may include the Bangladesh Personal Data Protection Act, 2026 and, where its territorial and material scope is met, the EU/EEA General Data Protection Regulation (GDPR). Mentioning a law here does not mean that every provision applies to every visitor or that this page is a certification of compliance.

This policy does not automatically govern websites, applications, advertising networks, social platforms, or other services operated by third parties. Those services have their own privacy terms and controls.

Where a separate notice is presented for a particular form, feature, or service, that notice should be read together with this policy. If a feature is not enabled on the website, references to that feature in this policy should not be treated as confirmation that it is active.

3. Information That May Be Processed

The information involved depends on the features you use and the technical services enabled on the website. We do not intend to collect more information than is reasonably needed for the relevant purpose.

4. How Information Is Collected

Information may be obtained in the following ways, depending on the site's configuration:

• Directly from you: when you send a message, submit a form, post a comment, or otherwise choose to provide information.
• Automatically through technical operation: when your browser requests a page or resource, certain technical details may be processed by the website platform, hosting provider, network, or security services.
• Through cookies and similar technologies: where the website or an enabled third-party provider uses them for essential functions, preferences, analytics, measurement, or advertising.
• Through third-party services: when you interact with an advertisement, video, social embed, analytics feature, or other external content integrated into a page.

We do not treat information displayed in a browser or generated by a third-party service as information that we necessarily control. The provider's own privacy notice may also apply.

5. Why Information Is Used

Where the relevant feature is active, information may be used for the following purposes:

The actual legal basis depends on the purpose, the information involved, the user's location, and the law that applies. Where consent is the basis, you may withdraw it as permitted by law; withdrawal does not make earlier lawful processing invalid.

6. Cookies and Similar Technologies

Cookies are small files or identifiers that may be stored on your device. Similar technologies may include local storage, pixels, tags, and scripts. They can support website functions, remember choices, measure usage, or support advertising.

Types of technologies that may be used

• Essential or platform-related: technologies needed for basic website delivery, security, session handling, or technical functions provided by the publishing platform.
• Preference: technologies that remember choices such as display or consent preferences, where available.
• Analytics and measurement: technologies used to understand page visits, performance, and general usage patterns, if an analytics tool is enabled.
• Advertising: technologies used by advertising providers to deliver, limit, personalise, or measure ads, if advertising is enabled.

Cookie availability, names, duration, and providers can change when platform features or third-party services change. A cookie banner or preference centre should be used where required by applicable law. Where a consent tool is enabled, you can use it to review or change non-essential cookie choices.

You can also control cookies through your browser settings. Blocking all cookies may affect some website functions or preferences. Browser controls do not necessarily stop all forms of processing by third-party services.

Cookie preference tool: [INSERT THE REAL COOKIE-PREFERENCE-CENTRE LINK OR REMOVE THIS LINE IF NO SUCH TOOL EXISTS].

7. Advertising and Google AdSense

Keep this section only if Google AdSense or another advertising service is actually active on the website. If advertising is not enabled, remove or revise this section before publication.

Where Google advertising is used, Google and its advertising partners may use cookies or similar technologies to serve, personalise, limit, and measure advertisements. Depending on the user's settings, region, and consent choices, advertising may be based on previous visits to this website or other websites.

You can review or change Google's personalised advertising settings here: Google Ads Settings. You may also review certain third-party advertising opt-out choices at YourAdChoices.

Other advertising vendors or ad networks may also process information if they are enabled on the site. Before publishing, the publisher should identify the vendors actually serving ads and provide links to their privacy and opt-out information where available.

Ad delivery and consent requirements can differ by country or region. Where applicable law or a platform policy requires consent before non-essential advertising technologies are used, the website should implement a suitable consent mechanism and honour the visitor's choices.

Google's publisher guidance asks publishers using Google advertising cookies to explain the use of advertising cookies, the role of Google and its partners, and available personalised-advertising controls. See Google AdSense: Required content.

8. Analytics, Embedded Content and External Services

If an analytics or performance-measurement service is enabled, that provider may process technical and usage information to produce reports or help the publisher understand how the website is used. The exact provider, settings, data collected, and retention period must be verified and listed here.

Analytics provider(s): [LIST EACH ACTIVE PROVIDER AND LINK TO ITS PRIVACY NOTICE, OR STATE “NO THIRD-PARTY ANALYTICS SERVICE IS CURRENTLY USED” ONLY AFTER VERIFYING THE SITE].

Some pages may contain content or features supplied by third parties, such as videos, maps, social-media posts, fonts, or other embedded resources. When your browser loads or interacts with that content, the third-party provider may receive technical information, set cookies, or process data under its own privacy terms.

Embedded services currently used: [LIST THE ACTIVE SERVICES, SUCH AS VIDEO OR SOCIAL EMBEDS, OR REMOVE THIS FIELD IF NONE ARE USED].

9. When Information May Be Shared

We do not disclose personal information indiscriminately. Information may be made available to the following categories of recipients only where relevant to a stated purpose, permitted by law, and supported by appropriate safeguards:

• Platform and hosting providers: providers that deliver the publishing platform, hosting, storage, content delivery, or related technical infrastructure. If this website is published through Google Blogger, Google may process information in connection with the platform under its own applicable terms and privacy documentation; see Google Privacy Policy.
• Security and technical providers: providers that help detect abuse, maintain site integrity, or troubleshoot technical problems.
• Advertising and measurement providers: Google or other vendors, but only if their advertising or measurement tools are enabled.
• Communication providers: providers used to receive, store, or respond to messages, where a contact channel is configured.
• Professional advisers and authorities: legal, regulatory, or public authorities where disclosure is required or reasonably necessary to protect legal rights, safety, or the integrity of the service.
• Business changes: a successor or relevant adviser in connection with a proposed or completed restructuring, transfer, or sale, subject to applicable law.

Third-party providers may process information under their own terms and may act as independent controllers for some activities. The publisher should maintain an accurate list of active providers and update this section when integrations change.

10. International Data Transfers

Because website platforms and third-party providers may operate infrastructure in more than one country, information may be processed or accessed in a country other than the country where you are located. The countries involved depend on the providers and technical configuration actually used.

Where a cross-border transfer is subject to legal requirements, the responsible parties should use a permitted transfer mechanism and safeguards required by the applicable law. For information about a particular provider's locations and safeguards, consult that provider's current privacy and data-transfer documentation.

Transfer and hosting details to verify: [IDENTIFY THE PLATFORM, MATERIAL SERVICE PROVIDERS, RELEVANT PROCESSING LOCATIONS, AND TRANSFER MECHANISMS WHERE REQUIRED].

11. How Long Information Is Retained

Information should be kept only for as long as reasonably necessary for the purpose for which it was collected, to meet applicable legal requirements, to resolve disputes, or to protect the website and its users. Retention periods can differ by information type and by provider.

When information is no longer needed, it should be deleted, anonymised, or otherwise handled in accordance with applicable law and the relevant provider's capabilities. Some records may need to be retained for a longer period where a legal obligation or legal claim requires it.

12. Security and Confidentiality

We aim to use reasonable technical and organisational measures appropriate to the nature of the information and the risks involved. Depending on the services actually enabled, measures may include access restrictions, account-protection controls, secure connections, software updates, provider security features, backups, and procedures for reviewing suspected misuse.

Security controls vary across the publishing platform and third-party providers. We do not claim that the website uses a particular encryption architecture, certified security standard, zero-trust system, or independent security audit unless that implementation has been verified and documented.

No website, internet transmission, storage system, or electronic communication method can be guaranteed to be completely secure. You should avoid sending confidential or highly sensitive information through an ordinary website form or email.

13. Health-Related Information and Sensitive Data

Top Medical Health publishes health-related information for general educational purposes. The website is not intended to operate as a medical-record portal, patient-management system, emergency service, or secure channel for transmitting clinical records.

Unless a specific feature and separate notice expressly state otherwise, we do not ask visitors to provide medical histories or patient records. If you voluntarily include health or other sensitive information in a message, it may be processed to the extent reasonably necessary to receive, review, and respond to that communication, subject to applicable law and the actual communication system used.

Website communications do not create a doctor-patient relationship and are not a substitute for professional medical advice. Do not use this website's contact channels for emergencies. Seek appropriate local emergency or clinical assistance when needed.

14. Children's Privacy

The website is not intended to invite children to provide personal information without the involvement or authorisation required by applicable law. We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited or requires prior parental or guardian authorisation that has not been obtained.

If you believe a child has provided personal information through the website, contact us using the details below and explain the concern. We will review the request and take steps that are appropriate and legally available.

15. Your Privacy Rights and Choices

Depending on your location and the law that applies, you may have rights concerning your personal information. These rights are not identical in every jurisdiction and may be subject to legal exceptions.

• Access: ask whether we process information about you and request access to it.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Deletion: request deletion where the applicable law provides that right.
• Restriction: ask us to restrict certain processing in circumstances recognised by law.
• Portability: request a copy in a commonly used, machine-readable format where the right applies.
• Objection: object to certain processing, including certain direct-marketing activities or processing based on legitimate interests, where applicable.
• Withdraw consent: withdraw consent where processing relies on your consent. This does not affect processing that took place lawfully before withdrawal.
• Complain: lodge a complaint with the relevant data protection or supervisory authority where available.

To exercise a right, send a request to [[email protected]] with the subject line “Privacy Request.” Please describe the request and identify the website interaction concerned. We may need to ask for proportionate information to verify your identity and protect other people's information.

We will review and respond within the period required by applicable law. A request may be refused or limited where a lawful exception applies, where we cannot verify the request, or where fulfilling it would adversely affect the rights of another person. Where permitted, we will explain the reason.

Where the GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a supervisory authority. For an overview, see the European Commission's information on individual data-protection rights.

16. Third-Party Websites and Services

Our pages may link to external websites, research resources, medical organisations, publishers, social platforms, or other services. A link does not mean that we control or endorse the external provider's privacy practices.

When you leave our website, the external provider's terms, privacy policy, cookie practices, and security controls apply. Review those materials before submitting personal information or using an external service.

17. Changes to This Privacy Policy

We may update this policy when the website's features, service providers, data practices, or legal requirements change. The revised version will be published on this page with an updated effective date or version information.

Where a change is material and applicable law requires notice or consent, we will take the steps required by that law. You should review this page periodically to stay informed about the current policy.

Last reviewed: [11-10-2026].