Privacy Policy

This policy explains how Yunshan Medical, the international patient service of Yunshan Medical Group (“we”, “us”), handles personal information collected through this website and through WhatsApp, WeChat, email and phone conversations that start from it.

Draft for review. The registered name and address of the operating entity, the data protection contact, and the final retention periods will be completed after legal review.

1. What we collect

• Information you give us: your name, contact details (WhatsApp, WeChat ID, email or phone), where you are, the services you are interested in, preferred dates, language, number of people, insurer, and anything you write in the notes field.
• Health information: your interest in a specific service, and anything you choose to tell us about your health, can be sensitive personal information. We ask for separate consent before processing it.
• How you found us: campaign codes, referral codes and UTM parameters in the link you used, the referring website, and your answer to “How did you hear about us?”.
• Technical information: approximate country or region, device type, browser language and the pages you viewed on this site. We use Cloudflare Web Analytics, which does not use cookies. We do not load advertising pixels on our service pages.

We do not ask you to upload medical records through this website. If documents are needed for your visit, we will explain how to share them securely.

2. Why we use it

• To reply to your request, prepare a plan and quote, and arrange and follow up on your care (necessary to respond to your request and with your consent).
• To understand which channels bring enquiries, so we can improve our service (our legitimate interest, using the minimum information needed).
• To send occasional updates, only if you ticked the separate marketing box. You can withdraw at any time.

3. Who we share it with

• The Yunshan Medical Group facility or Guangyuyuan TCM Clinic that will provide your care, to the extent needed to arrange it.
• Service providers that process data on our behalf: Cloudflare (website hosting and form database), Feishu / Lark (internal case management), and an email delivery provider. Further providers will be listed here before they are used.
• Authorities, where the law requires it.

We do not sell your personal information.

4. Where it is stored

Our website and form database are hosted by Cloudflare, whose network operates in many countries. Our internal case management runs on Feishu in mainland China. Your information may therefore be transferred between Hong Kong, mainland China and other countries. We will carry out the assessments and agreements required by the laws that apply to us before such transfers.

5. How long we keep it

Proposed: enquiry records are kept for up to 12 months; contact details of enquiries that do not lead to a booking are anonymised after 90 days, unless you ask us to keep them or the law requires longer. Medical records held by the treating facility follow that facility’s legal retention rules.

6. How we protect it

Contact details are encrypted in our database; access is limited to staff who need it; and we do not record personal information in system logs.

7. Your rights

Depending on where you live (for example under China’s Personal Information Protection Law, Hong Kong’s Personal Data (Privacy) Ordinance, or the EU/UK GDPR), you may ask to access, correct, copy or delete your information, withdraw consent, or object to certain uses. Contact us using the details below. Withdrawing consent does not affect processing already carried out.

8. Children

Requests for a person under 18 should be made by a parent or guardian.

9. Contact

Questions or requests: use the contact methods on our contact page. A dedicated data protection contact will be listed here.

10. Changes

We will update this page when our practices change and show the date at the top.