Privacy Policy

How China Med Choice collects, uses, stores and deletes your personal information, including medical records.

Draft — pending legal review. This policy is published so that users can see how we intend to handle their data. It has not yet been reviewed by a qualified lawyer. If you have a concern about anything below, contact us before engaging our services.

1. Who we are

China Med Choice (“we”, “us”) provides information and planning services to people considering medical treatment or health screening in China. We are not a medical provider. We do not diagnose, treat, or prescribe.

Our operating entity — the data controller for anything described in this policy — is 海南赛迪讯电子科技有限公司 (Hainan Saidixun Electronic Technology Co., Ltd.), Unified Social Credit Code 91460100MA5RC0WQ2R, registered in Hainan Province, People’s Republic of China.

2. What we collect

We collect only what we need to provide the service you asked for:

Contact details — name, email address, phone or messaging handle.
Nationality and location — needed to work out your visa pathway.
Health information you choose to send us — for example, records, reports, or imaging you share when you ask us to translate documents or assess options. This is sensitive personal information and we treat it accordingly.
Payment records — what you paid and when. We do not store full card numbers.
Correspondence — emails and messages between us.
Basic site analytics — aggregate page views. We use a privacy-respecting analytics tool that does not use cookies to track you across other sites.

3. Why we collect it

To answer your enquiry and provide the service you requested.
To match you with hospitals and departments that fit your situation.
To explain visa requirements for your nationality.
To invoice you and keep accounting records, as required by law.
To send you updates you asked for. You can stop these at any time.

We do not sell your information. We do not share it with hospitals or clinics without your explicit instruction. We do not share it with advertisers.

4. Health information — how we handle it

Medical records are sensitive. When you send us records, we apply the following rules:

Minimum necessary. We ask only for the documents relevant to your question. If you send more than we need, tell us and we will delete the surplus.
Storage. Records are stored encrypted, with access limited to the people working on your case.
Deletion. We delete original medical records 30 days after your service is delivered, unless you ask us to keep them longer or we are legally required to retain them. We keep the deliverable we produced for you for 90 days, so you have time to retrieve it.
Translators. Where we use an external medical translator, they work under a confidentiality agreement and receive only the documents needed for the translation.
Cross-border transfer. We aim to store records in the jurisdiction where you are located, to avoid unnecessary cross-border transfers. Where a transfer is necessary, we use encrypted channels and obtain your consent first.

5. Who else sees your information

Service providers — medical translators, and where applicable, interpreters working under confidentiality agreements.
Payment processors — to take payment. They receive transaction data, not your medical records.
Email and hosting providers — who process data on our instructions.
Where required by law — if we are legally compelled to disclose information.

We will tell you if we are ever legally compelled to disclose your information, unless prohibited from doing so.

6. Your rights

You can ask us to:

Tell you what information we hold about you.
Correct anything inaccurate.
Delete your information (subject to our legal record-keeping obligations).
Stop sending you marketing emails.
Withdraw consent for processing you previously agreed to.

7. How long we keep things

Medical records you send us: deleted 30 days after delivery.
Deliverables we produce: 90 days.
Contact details and correspondence: up to 3 years, unless you ask us to delete sooner.
Invoices and accounting records: as required by applicable tax law.

8. Cookies

This site does not use advertising or cross-site tracking cookies. Our analytics are aggregate and do not identify you. If we add a tool that changes this, we will update this policy and ask for consent where required.

9. Security

We use encryption in transit and at rest, and restrict access to people working on your case. No system is perfectly secure. If we become aware of a breach affecting your information, we will tell you promptly.

10. Children

Our services are intended for adults. If you are enquiring on behalf of a child, we require a parent or legal guardian to make the request.

11. Changes

We will update this policy when our practices change and revise the date at the top. Material changes will be communicated to anyone with an active service.

12. Contact

For any privacy question or request, contact us using the details on our contact page.

13. What this policy is not

This is not medical advice and creates no doctor–patient relationship. It also does not replace the privacy practices of any hospital or clinic you deal with directly — those are governed by their own policies, and you should read them.