Medical tourism works in 14 stages shared by four parties — the patient, the agency, the clinic, and the hotel and transfer company: inquiry and qualification, records and remote assessment, treatment plan and quote, deposit, contract and consent, visa, invitation and travel, arrival and transfer, pre-operative assessment, the procedure, the inpatient stay, hotel recovery, follow-up and fly-home clearance, return and remote aftercare, complications and revisions, and feedback and re-referral. Planning from first inquiry to arrival takes roughly one to twelve weeks; the surgeon sets the stay. Cases leak most at the first reply, the quote, the deposit, the visa and remote aftercare. This page maps each stage with its owner, documents, time window, typical failure, checklist and the question to ask the other side. It is a process guide, not medical or legal advice.
Updated: 2026-10-17 · Reading time: 41 min · Guide
A medical tourism case is not one transaction. It is fourteen handovers between a patient, an agency, a clinic and a hotel and transfer company, and most complaints trace back to a handover that nobody owned: the records that arrived without consent, the quote that left out the hotel, the flight booked before the surgeon cleared it, the follow-up question nobody answered in the patient’s language. This guide puts the whole process on one map, from the first inquiry to aftercare and re-referral.
It is written for agencies and for the clinics, hospitals and hotels that work with them. For each of the 14 stages it names the owner, the documents and data involved, a time window, the typical failure and how it leaks cases, a checklist and the question to ask the other side. Where the rules differ by hub country (Türkiye, India, Mexico, the United Arab Emirates, Spain, Germany) the page says so and points to the glossary entry for the patient journey and to the hubs guide instead of restating each country’s law.
The table lists the 14 stages with the lane that owns each one, a time window and the first document or data item to collect. Time windows are planning ranges, not statistics, unless a source is named in the stage; each clinic sets its own turnaround and the treating surgeon sets the stay.
Each stage has the same parts: who owns it, what happens, the documents and data, the time window, the typical failure, where it leaks, a checklist and the question to ask. “Leak” means the stage at which cases most often stall or are lost; the level is either backed by a named source or, where it says so, is the author’s reading.
Who owns it: The agency. The patient sends the first message and supplies the facts; the agency answers and decides whether the case is ready for a quote.
A prospective patient writes, calls or fills in a form. The agency replies, collects what a clinic needs for a quote (treatment wanted, country, travel window, budget range, language, companions) and decides whether this is a qualified lead or a conversation that needs more time. Nothing clinical is decided at this point.
Documents and data:
Time window: Planning range: a first human reply the same working day and qualification within 1–3 working days. This is a service standard, not a measured average.
Typical failure: The reply arrives after the patient has already written to three other agencies, or the lead reaches the clinic with no records, no dates and no budget, so the clinic’s first answer is a list of questions. Either way the patient meets silence or a form letter and moves on.
Where it leaks: High, the author’s reading and not a measured rate: the patient is comparing several offers and has committed to nothing, so speed and completeness decide who gets the next message.
Checklist:
Question to ask the other side: To the clinic: what is the minimum information you need before you issue a quote, and how many working days do you take to reply?
Who owns it: The clinic. The patient supplies the records, the agency moves them securely, and the treating team decides what they show.
The patient shares reports, imaging, test results, a medication list and, for some treatments, photos. A clinician at the clinic reviews them, often on a video call, and says whether the treatment looks feasible and what else is needed. It is a preliminary view: the decision is confirmed at the in-person pre-operative assessment.
Time window: Planning range: 1–7 days for the patient to gather the records, then 1–3 working days for the clinic’s first review; the clinic sets its own turnaround.
Typical failure: Records arrive in pieces over a personal chat app with no consent on file, so the clinic cannot give a firm view and the patient loses patience. Or the remote opinion is heard as a diagnosis, and the in-person assessment then changes it.
Where it leaks: Medium, the author’s reading and not a measured rate: the case is alive but slow, and every extra week gives a competitor time to reply.
Question to ask the other side: To the clinic: which clinician reviews the records, in what format do you want them, and what would make you change the plan after you see the patient in person?
Who owns it: The clinic. The treating clinician writes the plan and the clinic prices it; the agency builds hotel, transfers and its own service line around it.
The clinic turns the review into a written treatment plan and a quote. The agency assembles the package: hotel nights, transfers, interpreter, companion. The quote, the travel dates and the contract must all refer to the same plan version.
Time window: Planning range: 1–5 working days to issue; the validity period is set by the clinic and printed on the quote.
Typical failure: A quote built from photos and a chat, silent on what is excluded, that grows at arrival when the clinician changes the plan. The patient feels misled and the agency carries the blame.
Where it leaks: High, the author’s reading and not a measured rate: the quote is the first time the patient sees a number, so unclear inclusions turn into price comparisons and abandoned cases.
Question to ask the other side: To the clinic: what is not included, and what would change the price after the patient has been examined in person?
Who owns it: The patient. The patient decides, signs and pays; the agency and the clinic prepare the papers and keep them consistent.
The patient accepts the plan and the quote, pays a deposit and signs. Three consents sit here and must not be merged: agreement to the commercial terms, consent to treatment (obtained by the treating clinician) and consent to process health data. The agency–clinic contract should be in place before any patient deposit moves; see the clinic contract checklist.
Time window: Planning range: 3–14 days from quote to signed contract; deposit timing and refundability are set by the contract.
Typical failure: The deposit is the first real commitment. An unclear refund rule, a contract in a language the patient does not read or a consent form bundled with the price makes the patient pause, or dispute later. A deposit paid to a company that is not the contracting party starts disputes.
Where it leaks: High, the author’s reading and not a measured rate: this is where interest turns into a commitment, and any doubt about money or terms stops it.
Question to ask the other side: To the clinic: if the patient cancels, or you cancel, who refunds what and by when, and who is the contracting party?
Who owns it: The patient. The patient applies and travels; the clinic issues the invitation letter, the agency checks the file and the hotel confirms the booking.
Where a visa is required the patient needs proof of the treatment and of the money to pay for it, plus accommodation and insurance. Where it is not, the patient still needs flights, travel insurance and a plan for the companion. Dates are fixed last, after the visa decision, with tickets that can be changed.
Time window: Planning range: 0 to 8 weeks, depending on nationality and destination. For a Schengen short-stay visa the Visa Code requires a decision within 15 calendar days of an admissible application, extendable to 45 (Regulation (EC) No 810/2009, Article 23), and applications may be lodged up to six months and, as a rule, at least 15 days before travel (Article 9). India’s e-Visa portal asks for applications at least 4 days before arrival.
Typical failure: A refused or late visa, an invitation letter that lacks the treatment or the dates, flights bought before the decision, or insurance that excludes planned treatment. Schengen consulates refused 14.8% of the 11.7 million short-stay applications they received in 2024, and the rate differs widely between countries of application (54.9% in Bangladesh, 7.5% in Russia, for example).
Where it leaks: High, with a source: EU and Schengen-associated consulates refused 14.8% of short-stay visa applications worldwide in 2024 (European Commission, 20 May 2025). An agency’s own exposure depends on the nationalities it serves.
Question to ask the other side: To the clinic: can you issue an invitation letter with the patient’s passport details, the treatment and the dates, and how fast?
Who owns it: The hotel and transfer company. The driver, the hotel and the interpreter meet the patient; the agency watches the clock and the clinic expects them.
The patient lands, is met, travels to the hotel or straight to the clinic and checks in. This is the first moment the promised service meets real life: a delayed flight, a missed pick-up, a room that is not ready or not step-free.
Time window: Day 0, the arrival day. Pick-ups are scheduled against the flight and the appointment times, not against the plan’s first day.
Typical failure: Nobody at arrivals, a delayed flight nobody tracks, or a room that does not match the booking. Tired, anxious patients remember the first hour.
Where it leaks: Low, the author’s reading and not a measured rate: the patient is already there, so the damage is to trust and reviews rather than to the case.
Question to ask the other side: To the hotel and the transfer company: who meets the patient, how do you track flights, and who answers the phone at night?
Who owns it: The clinic. The treating team examines the patient and confirms, changes or declines the plan.
In person, the team examines the patient, repeats or adds tests, checks the records against what it sees and obtains informed consent for the procedure. This is where the remote view meets the real patient: the plan is confirmed, adjusted with a revised quote, or declined.
Time window: Usually the day of arrival or the day after; the clinic sets the schedule.
Typical failure: The clinician changes the plan or declines the case and nobody agreed beforehand who tells the patient, who pays for the nights already booked and what the patient may do next. The case ends with a return flight and a dispute.
Where it leaks: Medium, the author’s reading and not a measured rate: a changed or declined plan is the point where a booked case turns into a refund conversation.
Question to ask the other side: To the clinic: if you change the plan or decline the case on arrival, what does the patient pay, and who arranges the way home?
Who owns it: The clinic. The agency’s job is to be reachable by the family and to keep everything else still.
The procedure takes place under the clinic’s clinical protocols. For the process, what matters is that the day is protected: nothing else depends on a precise time, the companion knows where to wait and who will call, and the family at home knows when to expect news. Ask whether the team uses a surgical safety checklist such as the WHO Surgical Safety Checklist (2009).
Time window: The day and the duration are set by the treating team in the treatment plan.
Typical failure: The surgeon or the facility is not the one the patient was shown, or the family hears nothing for hours. A substitution the patient did not agree to damages trust at the moment it matters most.
Where it leaks: Low, the author’s reading and not a measured rate: by now the case is committed, so the risk is to safety and trust rather than abandonment.
Question to ask the other side: To the clinic: who exactly operates, in which facility, and who updates the companion while the patient is in theatre?
Who owns it: The clinic. The hotel keeps the room and the companion’s bed ready; the agency manages the family and the rest of the itinerary.
The patient recovers on the ward or in a day-care unit. The practical questions are the companion (own bed, meals, visiting rules), medication supply, the interpreter and the discharge date, which the clinician sets, not the itinerary.
Time window: Set by the surgeon. NHS pages give no overnight stay after a hair transplant, 1–3 hospital days after weight-loss surgery and 1–4 after a knee replacement; the range 0–4 nights is a planning window, not a promise.
Typical failure: Discharge comes earlier or later than the booked hotel nights and transfers, so the room, the driver and the flights are wrong. Or the companion is left without a bed and without information.
Where it leaks: Low, the author’s reading and not a measured rate: the patient is under the clinic’s care, and the damage is operational rather than a lost case.
Question to ask the other side: To the clinic: how is a change in the discharge date passed to the agency and the hotel, and when do we receive the discharge summary?
Who owns it: The hotel and transfer company. The clinic sets the rules for recovery; the agency makes sure the hotel can meet them.
After discharge many patients spend days in a hotel near the clinic and go back for dressings, checks or stitch removal. Suitable rooms and staff matter more than stars: step-free access, quiet, diet options, a bed for the companion, a lift, somewhere to keep medication that needs cooling, and someone who knows whom to call at night. A recovery-friendly hotel has all of this written down.
Time window: Set by the surgeon and the procedure; the case timeline planner turns published ranges into a day plan.
Typical failure: A hotel that is not prepared (stairs, noise, no diet options), a missed dressing appointment because the transfer was not booked, or a symptom nobody knows where to report.
Where it leaks: Medium, the author’s reading and not a measured rate: a patient with a complaint decides here whether to trust the agency or to go home early.
Question to ask the other side: To the hotel: have you hosted post-operative guests before, and how do you handle a patient who needs the clinic at night?
Who owns it: The clinic. Only the treating clinician can clear the patient to fly; the agency keeps the tickets flexible until then.
Before the flight home the clinician examines the patient, removes stitches or dressings as planned, hands over the records and states in writing that the patient may travel on a given date. That document is the fly-home clearance.
Time window: Set by the clinician. Published guidance gives planning ranges: UK plastic surgeons (BAPRAS) advise waiting five to seven days after breast surgery or liposuction and seven to ten days after facial cosmetic procedures or a tummy tuck; the UK Civil Aviation Authority advises about 24 hours after laparoscopic surgery and 10 days after abdominal surgery. The case timeline planner lays these out per procedure.
Typical failure: A flight booked for a fixed date before the clinician has cleared the patient, so the patient either flies against advice or loses the ticket. Or the records and the aftercare plan are promised and never handed over.
Where it leaks: Medium, the author’s reading and not a measured rate: a rushed or undocumented departure is where the later aftercare problems begin.
Question to ask the other side: To the clinic: who gives the written clearance, what will the patient receive on the last day, and in which language?
Who owns it: The agency coordinates, the clinic delivers the clinical follow-up and the patient reports. The contract should say which is which.
At home the patient is alone with the instructions. Remote check-ins by video or photo, a contact who answers in the patient’s language, medication supply and a local doctor who can step in are what keep a good procedure a good outcome. Insurance and the home health service may not cover follow-up for treatment arranged privately abroad. See aftercare and follow-up consultation.
Time window: Set by the clinic’s aftercare plan: a first check-in within days of the return, then at the intervals the clinician names, often over weeks to months.
Typical failure: The relationship ends at the airport: the agency stops writing, the clinic’s coordinator does not answer in the patient’s language and the patient has a worry with nobody to ask. A small problem becomes a complaint and, at worst, an avoidable complication.
Where it leaks: High, with a source: UKHSA TravelHealthPro warns that follow-up care might not be easily available and may not be covered by the NHS, and that when things go wrong abroad patients may have little or no options (factsheet updated 17 June 2024).
Question to ask the other side: To the clinic: what remote follow-up do you include, for how long, in which language, and who answers when the agency is not available?
Who owns it: The clinic. The patient reports, the agency escalates and rearranges travel, and the hotel rebooks.
Complications can follow surgery wherever it is done (BAPRAS), so the question is not whether it can happen but who treats it, where, who pays and how fast. A revision may need a second trip, so the contract should decide who covers the surgery, the flight, the hotel and the companion, and who confirms that a revision is medically indicated. See complication clause.
Time window: Unplanned. What can be planned is the reporting rule (for example, how fast the patient must tell the clinic) and the revision window the contract states.
Typical failure: Nobody owns the incident: the clinic says the patient is at home, the agency says the clinic is responsible and the insurer says planned treatment is excluded. The patient pays twice and every party loses the case.
Where it leaks: Medium, with a source: UKHSA TravelHealthPro advises inclusive medical insurance that covers all potential complications and notes that the EHIC or GHIC does not cover planned treatment; BAPRAS notes that a holiday policy rarely covers something going wrong.
Question to ask the other side: To the clinic: who decides that a revision is medically indicated, who pays for the surgery and the travel, and within what period?
Who owns it: The agency asks, the patient decides and the clinic supplies the outcome data.
Once the recovery milestone is reached, the agency asks for feedback, closes the case, reconciles invoices and commission (see net settlement) and, if the patient is happy, asks for permission to use a testimonial or to contact family and friends. Reviews, photos and re-referrals need explicit consent, and in Türkiye the health promotion rules also limit what may be published (see promotion and reviews).
Time window: After the recovery milestone the clinic names; agree it in advance. The request is normally made once, at a time the patient chooses.
Typical failure: The request is made too early, bundled with a discount or in a way that breaks local rules; or it is never made, and a satisfied patient is never turned into the next referral.
Where it leaks: Low, the author’s reading and not a measured rate: nothing paid for is lost here, and what is missed is the next referral.
Question to ask the other side: To the clinic: when do you consider the case closed, and what may we publish, in which channels and with whose consent?
The leak overlay on the map marks five stages as high: the first reply and qualification, the quote, the deposit and contract, the visa and travel, and remote aftercare. Two of those levels rest on a named source. In 2024 the consulates of the EU and Schengen-associated countries refused 14.8% of the more than 11.7 million short-stay visa applications they received worldwide, and the rate differs widely between countries of application, from 7.5% in Russia to 54.9% in Bangladesh, for example (European Commission, 20 May 2025). UKHSA TravelHealthPro warns that follow-up care after treatment abroad might not be easily available and may not be covered by the NHS, and that patients may have little or no options when things go wrong abroad (factsheet updated 17 June 2024).
All other levels are the author’s reading of how the process works, not measured rates. We found no public dataset that counts how many medical tourism inquiries are lost at each stage, so the overlay marks where the process is fragile, not how often it breaks. Complications can follow surgery wherever it is done (BAPRAS, “Cosmetic surgery abroad”); what differs abroad is whether follow-up care is available, who pays and who answers the phone.
Agencies join Health onMESSE free of charge, with no stand fee and no subscription, and can register as an agency to meet exhibiting clinics, hospitals and hotels in scheduled video meetings and put these questions to them before the first patient is booked.
The 14 stages are the same everywhere; the rules attached to them are not. Six topics change with the destination and with the patient’s home country. The table says what changes and where to read more, and the sections below report what the primary sources say. This is general information, not legal advice.
The GDPR prohibits processing data concerning health (Article 9(1)) unless a condition applies; explicit consent for specified purposes is one of them (Article 9(2)(a)). Where a patient’s file goes to a country without an EU adequacy decision, Chapter V requires appropriate safeguards such as standard contractual clauses (Article 46) or, as a narrow derogation, the patient’s explicit consent after being informed of the risks (Article 49(1)(a)). The European Commission’s adequacy list, checked on 17 October 2026, does not include Türkiye, India, Mexico or the United Arab Emirates.
Türkiye’s Law No. 6698 (KVKK) also treats health data as special-category data (Article 6), and Article 9, as replaced by Law No. 7499 (Official Gazette 12 March 2024, in force 1 June 2024), allows a transfer abroad on an adequacy decision, on appropriate safeguards such as the Board’s standard contract (notified to the Board within five working days of signing) or, only incidentally, on the data subject’s explicit consent after being informed of the risks. Article 6(3)(e) separately allows processing by people under a duty of confidentiality for medical diagnosis, treatment and care. Which route fits an agency and which fits a clinic is a question for counsel; the two usually have different duties.
Directive 2011/24/EU defines the Member State of treatment as the one where healthcare is actually provided and adds that, “in the case of telemedicine, healthcare is considered to be provided in the Member State where the healthcare provider is established” (Article 3(d)). A remote assessment by a Spanish or German clinic is therefore Spanish or German healthcare under that country’s rules. Türkiye regulates remote health services in the Regulation on the Provision of Remote Health Services (Official Gazette 10 February 2022, No. 31746), and the 2025 international health tourism regulation lets a facility provide remote health services under it and announce this on the HealthTürkiye portal (Article 6(1)(d)). Ask the clinic whether its pre-assessment is a clinical teleconsultation under its national rules or an indicative view that the in-person assessment can change.
UKHSA TravelHealthPro calls appropriate travel medical insurance essential for treatment abroad, advises inclusive cover for all potential complications including medical evacuation, and says the EHIC or GHIC does not cover planned treatment. Inside the EU, the Member State of treatment must ensure transparent complaint procedures and systems of professional liability insurance or an equivalent guarantee (Directive 2011/24/EU, Article 4(2)(c) and (d)), the patient is entitled to a written or electronic record of the treatment (Article 4(2)(f)), and the patient’s home Member State must make available the same medical follow-up as for care received at home where follow-up proves necessary (Article 5(c)). Public insurers add a layer of their own: the Directive lets insured people be reimbursed for care in another Member State up to what their home system would have paid (Article 7(4)), and a Member State may require prior authorisation only in defined cases, such as care involving at least one overnight hospital stay (Article 8(2)). It does not reach treatment in Türkiye, India, Mexico or the United Arab Emirates, and an agency should not promise reimbursement it does not control. Outside the EU none of this applies automatically, so it has to be in the contract. Türkiye’s 2025 regulation lists complication insurance for surgical and interventional procedures in an operating room (Article 6(1)(c)); the Council of State suspended that obligation on 25 December 2025 and lifted the suspension on 21 May 2026, so it applies again while the annulment case continues (see the authorization certificate guide).
In the EU, Council Directive 2006/112/EC exempts hospital and medical care from VAT (Article 132(1)(b)) and the provision of medical care in the exercise of the medical and paramedical professions (Article 132(1)(c)). Hotel nights, transfers, interpreters and an agency fee are separate supplies, and whether any of them follows the treatment’s VAT treatment depends on who supplies it and on national law, which is why an itemised invoice that names the supplier of each line matters. Outside the EU the tax treatment is set by the destination country, so ask the clinic’s accountant. An offer that combines transport, accommodation and other services may fall under the Package Travel Directive (EU) 2015/2302; whether a medical offer counts as a package depends on what it combines and on national law.
Under GDPR Article 7(2), a request for consent inside a written declaration that also covers other matters must be clearly distinguishable from them, so a testimonial or image consent belongs on its own line. In Türkiye the Regulation on Promotion and Information Activities in Health Services (Official Gazette 12 November 2025, No. 33075) applies to health professionals, health facilities and international health tourism intermediaries (Article 2). It prohibits covert or overt advertising in health service delivery (Article 5(1)); it requires the patient’s explicit consent for any patient visual (the regulation provides an annexed form for taking it, in writing or electronically), requires before-and-after images of a procedure to be made under the same conditions and to state the procedure date and the image date, and bars any payment, discount or gift in return for that permission (Article 7).
Health onMESSE is the online trade fair for health tourism. Agencies join free of charge and meet clinics, hospitals and hotels in scheduled video meetings; clinics, hospitals, hotels and transfer companies exhibit to show agencies how they run the stages above. See Health onMESSE for agencies and Health onMESSE for exhibitors, or open the fair page.
Clinics, hospitals, hotels and transfer companies can exhibit at Health onMESSE to answer agencies’ questions on records, quotes, recovery stays and aftercare before the first case.
العربية · Deutsch · Español · Français · Nederlands · Türkçe