Legal and compliance
How Hangzhou Health Journey handles personal information, medical records, cross-border data, retention, access requests, and third-party processors.
Last draft update: 2026-07-29
This text separates Hangzhou Health Journey's operational coordination services from services delivered by licensed medical institutions and physicians.
Draft text
The following sections are written for clear user understanding and future legal review.
This draft is for product planning and website structure only. It must be reviewed by qualified legal counsel before launch or real patient data collection.
Hangzhou Health Journey provides coordination, intake, translation planning, logistics planning, and service administration for international visitors considering medical review or health check journeys in Hangzhou.
We are not a hospital, clinic, insurer, emergency service, or medical provider. Medical institutions and licensed physicians make medical decisions independently.
Contact details, country or city, preferred language, travel dates, companion needs, dietary or religious needs, mobility needs, budget range, and communication preferences.
For Medical Care requests, users may provide diagnosis names, symptoms, prior treatment history, medication information, records, images, and related medical documents only through a secure production workflow once available.
The current static preview uses mock forms and must not be used to collect or email real medical records.
Coordination may require information to be processed across countries for translation, case preparation, logistics, and clinical pre-review by qualified providers.
Cross-border processing should use minimum necessary data, access controls, encrypted transfer, audit logs, and a clear record of user consent. Specific countries, processors, safeguards, and transfer mechanisms remain [TO BE VERIFIED].
Inquiry records should be retained only as long as needed for coordination, compliance, dispute handling, and legally required records.
Proposed retention periods, deletion workflow, backup deletion timing, and exceptions must be confirmed before launch. Until confirmed, retention settings remain [TO BE VERIFIED].
Users should be able to request access, correction, or deletion through the contact channel listed on this website, subject to identity verification and legal exceptions.
Possible processors may include secure hosting providers, consent tools, secure file storage, translation support, CRM systems, email delivery, form protection, and analytics tools after consent.
No third-party processor should receive disease, diagnosis, file names, free-text symptoms, or medical documents unless it is necessary, contracted, access-controlled, and reviewed. Processor names and data locations remain [TO BE VERIFIED].
Information about minors should be submitted only by a parent, guardian, or authorised representative.
Additional consent, identity verification, and provider requirements may apply before a minor's information is processed or shared for clinical pre-review.