Last Updated: March 2026
OrientMediGuide ("we", "us", or "our") operates orientmediguide.com, a platform connecting international patients with medical services in China. Because we handle sensitive health and medical information, we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, how we protect it, and what rights you have. By using our services, you agree to the practices described here.
We collect information you provide directly and data generated through your use of our platform:
Identity & contact data: full name, email address, phone number, nationality, country of residence, and preferred language
Health & medical data (special category): medical conditions, diagnoses, treatment history, health needs, and any medical documents you upload or share during consultations — this data receives the highest level of protection
Account data: username, password (hashed), account preferences, and communication history with our team
Transaction data: service inquiries, booking records, payment information (processed via third-party payment providers — we do not store full card numbers)
Usage data: IP address, browser type and version, device identifiers, pages visited, time on page, referral source, and clickstream data
Communications: messages sent through our consultation forms, forum posts, and any correspondence with our support team
We use your information only for the purposes for which it was collected or for compatible purposes:
To provide and manage our medical referral, consultation facilitation, and escort coordination services
To match you with appropriate medical professionals, hospitals, or clinics based on your stated health needs
To communicate with you about your requests, bookings, and service updates
To send marketing and informational newsletters — only with your explicit consent, which you may withdraw at any time
To improve our platform, diagnose technical issues, and conduct internal analytics
To comply with legal obligations under PRC law, including data retention requirements
To detect and prevent fraud, abuse, or unauthorized access to our systems
Where applicable (including for users in jurisdictions with data protection laws such as GDPR), we process your personal data on the following legal bases:
Contract performance: processing necessary to provide the services you requested
Consent: for health/medical data and for marketing communications — you may withdraw consent at any time without affecting prior processing
Legitimate interests: for platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights
Legal obligation: where we are required to process data under applicable law
Vital interests: in emergency circumstances where processing is necessary to protect your life or safety
We do not sell your personal data. We share information only in limited, defined circumstances:
Medical service partners: hospitals, clinics, and licensed medical professionals in China who are party to your consultation or treatment — we share only the minimum data necessary and require partners to maintain confidentiality
Service providers: technology vendors, hosting providers, and support services who process data on our behalf under data processing agreements
Professional advisers: lawyers and auditors where strictly necessary and subject to professional confidentiality obligations
Legal compliance: regulators, law enforcement, or courts when required by law or to respond to valid legal processes
Business transfers: in connection with a merger or acquisition, with appropriate notice to you and continuation of this Policy's protections
With your consent: any other sharing we describe to you at the point of collection and for which you give explicit consent
Given the sensitive nature of health data on our platform, we apply robust security measures:
Encryption in transit: all data transmitted between your browser and our servers uses TLS 1.2 or higher
Encryption at rest: sensitive health records and personal data are encrypted in our databases
Access controls: role-based access ensures only authorised staff can view health data; access is logged and audited
Security assessments: we conduct periodic vulnerability assessments and penetration tests
Incident response: in the event of a data breach affecting your rights, we will notify relevant authorities and affected users as required by law, without undue delay
Staff training: all staff who handle personal data receive privacy and security training
We retain your personal data only for as long as necessary for the purposes set out in this Policy or as required by law:
Account data: retained for the duration of your account and for up to 3 years after account closure for legitimate business purposes
Health and medical data: retained for a minimum of 5 years following your last service interaction, in line with medical record-keeping standards and PRC regulatory requirements
Transaction records: retained for 7 years to comply with financial and tax regulations
Marketing consents: retained until you withdraw consent, plus a reasonable period to demonstrate compliance
Server logs and usage data: retained for up to 12 months then deleted or anonymised
When retention periods expire, we securely delete or anonymise your data so it can no longer be linked to you
We use cookies and similar technologies for the following purposes:
Strictly necessary cookies: essential for the website to function (e.g., session management, security) — these cannot be disabled
Performance cookies: collect anonymous data about how visitors use the site to help us improve it (e.g., Google Analytics)
Functionality cookies: remember your preferences such as language and region settings
Marketing cookies: used to show relevant content — only deployed with your consent
You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference centre. Disabling non-essential cookies will not prevent you from using core services.
Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@orientmediguide.com:
Right of access: obtain a copy of the personal data we hold about you and information about how it is processed
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure ('right to be forgotten'): request deletion of your data where it is no longer necessary, you withdraw consent, or we have no legitimate grounds to retain it — subject to legal retention obligations
Right to restriction: ask us to suspend processing of your data in certain circumstances (e.g., while accuracy is disputed)
Right to data portability: receive your data in a structured, machine-readable format and transfer it to another controller
Right to object: object to processing based on legitimate interests, including for direct marketing (which we will always honour immediately)
Rights related to automated decision-making: we do not make solely automated decisions that significantly affect you
Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing
We will respond to all verifiable requests within 30 days. We may ask you to verify your identity before processing a request.
OrientMediGuide is based in China and primarily serves users worldwide who are seeking medical services in China. Your data may therefore cross borders:
Data you provide is processed and stored on servers located in China, operated in accordance with PRC laws on personal information protection (PIPL) and healthcare data regulations
When we share data with partner hospitals or clinics in China, this remains within the Chinese data environment
Our technology service providers may be based in other jurisdictions; we ensure appropriate contractual safeguards (such as standard contractual clauses) are in place for any such transfers
If you are located in the European Economic Area (EEA) or the United Kingdom, you acknowledge that your data is transferred to China, which may not have data protection laws equivalent to those in your home jurisdiction — we implement appropriate safeguards to compensate for this
By using our services, you consent to the transfer, processing, and storage of your data in China and other countries where our service providers operate
Our website may contain links to third-party websites or services not operated by us. We have no control over, and assume no responsibility for, their content or privacy practices. We encourage you to review the privacy policy of every external site you visit. This Policy applies only to information collected by OrientMediGuide.
Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@orientmediguide.com and we will delete that information. If a minor requires medical services, all communications and data processing must be conducted by a parent or legal guardian.
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by prominently posting the revised Policy on this page with an updated date, and, where we have your email address, by sending you a notification. We encourage you to review this page regularly. Your continued use of our services after changes take effect constitutes acceptance of the revised Policy.
For any questions about this Privacy Policy, to exercise your rights, or to raise a concern about our data practices, please contact us: Email: privacy@orientmediguide.com | General enquiries: support@orientmediguide.com | Website: orientmediguide.com/consultation. We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
© 2026 OrientMediGuide. All rights reserved.
© 2026 OrientMediGuide. All rights reserved.
