Privacy Policy

We may collect the following types of information when you use our services: (a) Personal Identification Information: Name, email address, phone number, country of residence, passport details (for visa applications), date of birth, and emergency contact information. (b) Medical Information: Medical history, diagnosis, treatment records, test results, prescriptions, imaging reports, and other health-related data necessary for hospital matching and treatment coordination. (c) Technical Information: IP address, browser type, operating system, device information, referring URLs, and browsing behavior on our website through cookies and similar technologies. (d) Communication Data: Records of your correspondence with us, including emails, chat messages, phone call recordings (with your consent where required), and inquiry forms. (e) Payment Information: Billing details and payment transaction data. We do not store full credit card numbers on our servers; payment processing is handled by PCI-DSS compliant third-party payment processors.

We use the collected information for the following purposes: (a) To provide and coordinate medical travel services, including hospital matching, appointment scheduling, visa support, and on-the-ground assistance. (b) To communicate with you about your inquiries, treatment plans, service updates, and administrative matters. (c) To improve our website, services, and user experience through analytics and feedback. (d) To comply with legal obligations, including but not limited to Chinese healthcare regulations, international data protection laws, and anti-money laundering requirements. (e) To detect, prevent, and address technical issues, fraud, or security incidents. (f) With your explicit consent, to send promotional materials or newsletters about our services. You may opt out at any time.

For users in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following legal bases: (a) Consent: You have given clear consent for us to process your personal data for specific purposes, such as medical data sharing with partner hospitals. (b) Contractual Necessity: Processing is necessary for the performance of a contract with you, such as coordinating medical travel arrangements. (c) Legal Obligation: Processing is necessary to comply with a legal obligation to which we are subject. (d) Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services and ensuring website security, provided your rights and interests do not override these interests.

We may share your information with the following third parties under strict confidentiality agreements: (a) Partner Hospitals and Healthcare Providers: To facilitate treatment coordination, appointment scheduling, and medical consultations. Only the minimum necessary information is shared. (b) Visa and Immigration Authorities: To support visa application processes as required by Chinese immigration law. (c) Service Providers: Third-party vendors who assist us with payment processing, data storage, email communication, analytics, and translation services. All vendors are contractually bound to protect your data. (d) Legal and Regulatory Authorities: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety, or those of others. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your information may be transferred to and processed in countries other than your country of residence, including China, where our partner hospitals and service providers are located. When we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed adequate by the European Commission, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure your data receives an adequate level of protection. By using our services, you acknowledge that your data may be transferred to and processed in China and other jurisdictions where we operate.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Medical records and related coordination data are retained for a minimum of 5 years following the completion of services, as required by Chinese healthcare regulations. After the retention period, your data will be securely deleted or anonymized. You may request earlier deletion of your data, subject to applicable legal retention requirements.

Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) Right to Access: Request a copy of the personal data we hold about you. (b) Right to Rectification: Request correction of inaccurate or incomplete data. (c) Right to Erasure ("Right to be Forgotten"): Request deletion of your data where it is no longer necessary for the purposes for which it was collected. (d) Right to Restrict Processing: Request restriction of processing under certain circumstances. (e) Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format. (f) Right to Object: Object to processing based on legitimate interests or direct marketing. (g) Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, subject to applicable legal requirements.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. We use the following types of cookies: (a) Essential Cookies: Necessary for the basic functioning of the website, such as maintaining your language preference and theme settings. (b) Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized data on page visits, navigation patterns, and referral sources. (c) Functional Cookies: Remember your preferences and settings to provide a personalized experience. You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. We do not use third-party advertising cookies on our site.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include: (a) Encryption of data in transit using TLS/SSL protocols. (b) Secure storage with access controls and authentication mechanisms. (c) Regular security assessments and penetration testing. (d) Staff training on data protection and confidentiality. (e) Strict need-to-know access policies for all personnel handling personal data. Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Our website may contain links to third-party websites, including partner hospitals, healthcare providers, and external resources. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Data Protection Officer: [email protected] MediPalGo Office: No. 199, Jiahao Road, Jiading District, Shanghai, China We aim to respond to all inquiries within 48 hours. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.