Categories
Last updated: 26 July 2026
This Privacy Policy explains how the operator of China Health Journey ("we", "us") handles personal information through this Site. It applies to visitors, subscribers, people who contact us and people who submit patient stories. The Site operator identified on our About page is the controller for this processing.
1. Information we collect
- Information you provide: name, email address, country, preferred contact method, age range, treatment category, preferred city, expected travel date, support requested and messages.
- Health-related information: a diagnosis or treatment context included in an enquiry, patient story, attachment or communication. This may be sensitive personal data.
- Subscription information: chosen language, consent status, subscription and unsubscribe dates, source page and message history.
- Technical information: IP address, browser and device information, user agent, referring page, language, request logs and security events.
- Submission material: story text, images, recordings, supporting documents, publication choices and consent records.
To protect patient privacy, all photographs on this website use virtual images and do not depict real patients.
Please provide only what is necessary. Do not send original identity documents, full medical records or information about another person through ordinary email unless we request it through an appropriate channel and you are authorised to do so.
2. How and why we use information
| Purpose | Typical legal basis |
|---|---|
| Operate, secure, diagnose faults and prevent abuse of the Site | Our legitimate interests in providing a secure service; legal obligations where applicable |
| Answer enquiries and provide requested non-clinical guidance | Steps taken at your request; legitimate interests; consent where required |
| Send newsletters and measure delivery | Your consent; you may withdraw it at any time |
| Review, edit, translate and publish a patient story | Your specific consent and publication permission |
| Keep records, establish legal claims and respond to authorities | Legal obligations and legitimate interests |
Where we process health information or another special category of data, we rely on your explicit consent or another condition permitted by applicable law, such as the establishment or defence of legal claims. Merely browsing the Site is not consent to process health data. We do not use health information for behavioural advertising.
3. Medical information and emergencies
We use health-related information only for the purpose explained when it is collected, such as understanding an enquiry or reviewing a patient story. We do not use it to diagnose or provide emergency care. Do not send urgent requests through the Site; contact local emergency services.
4. Cookies and similar technologies
The Site uses a cookie to remember cookie choices and may use local browser storage for interface preferences. These are intended to support essential operation and user choices. Non-essential analytics, advertising or social-media tracking should be activated only after any consent required by law. If we introduce such tools, we will update this Policy and the consent controls before using them. We do not currently sell personal information or share it for cross-context behavioural advertising.
5. When we share information
We may share the minimum necessary information with hosting, security, technical support, email delivery and professional-adviser providers that process it for us under appropriate obligations. We may also share information:
- with a hospital, clinician, interpreter or other provider when you ask us to do so and the purpose is clear;
- with authorities or other parties when required by law or reasonably necessary to protect rights, safety and security; or
- in a reorganisation or transfer of the Site, subject to appropriate confidentiality and notice.
Independent services such as email, WhatsApp and linked hospital websites apply their own privacy policies. We do not sell personal information.
6. International transfers
We operate in Hong Kong, Shenzhen and Shanghai and serve an international audience. Information may therefore be processed outside your country, including in Hong Kong or mainland China, and by service providers in other locations. Where required, we use an adequacy decision, contractual safeguards or another lawful transfer mechanism and apply supplementary protections appropriate to the risk. You may contact us for information about the safeguards relevant to your data.
7. Retention
We keep information only as long as reasonably necessary for the stated purpose, security, legal and recordkeeping needs. Our normal criteria are:
- subscription records remain active until you unsubscribe; a minimal suppression record may then be retained to honour the opt-out;
- enquiries are generally retained while active and for no longer than 24 months after the last meaningful contact, unless a longer period is required;
- unpublished story material is generally deleted within 12 months after a final decision; publication permissions and published material may be kept for the publication period and applicable claims period; and
- routine technical logs are generally retained for no longer than 12 months, unless needed to investigate security or comply with law.
We may anonymise information so it no longer identifies a person and retain the anonymised information for research or service improvement.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent and complain to a data protection authority. Withdrawing consent does not affect earlier lawful processing.
Residents of California and certain other US states may also have rights to know the categories, sources, purposes and recipients of personal information; obtain a copy; correct or delete it; opt out of sale or sharing and certain profiling; limit certain uses of sensitive information; use an authorised agent; and receive equal service. We do not sell personal information or share it for cross-context behavioural advertising. We will not discriminate against you for exercising a legal right.
To make a request, email us with enough information to identify the relevant record and the right you wish to exercise. We may verify your identity and authority, and may refuse or limit a request only where law permits. You may unsubscribe from marketing at any time using the link in the message.
9. Automated decisions
We do not make decisions producing legal or similarly significant effects solely by automated processing of Site data.
10. Security
We use reasonable technical and organisational measures designed to protect information, including access controls, minimisation and service-provider controls. No internet transmission or storage system is completely secure. Use the least sensitive suitable communication channel and keep your own copies of important medical records.
11. Children
The Site is intended for adults and we do not knowingly collect personal information directly from children under 16. Patient-story submitters must be at least 18. A parent or guardian who believes a child has provided information should contact us for review and deletion.
12. Third-party links
Linked websites, hospitals and messaging platforms are independent and their privacy practices are not controlled by us. Review their notices before providing information.
13. Changes and contact
We may update this Policy to reflect changes in our services or law. Material changes will be highlighted where appropriate, and the latest date appears above.
For questions, rights requests or complaints, email info@chinamedicaljourney.com. Our operating locations are Hong Kong, Shenzhen and Shanghai. You may also complain to the data protection authority where you live or work. Translations are provided for accessibility; the English version is the reference version where legally permitted.
