Privacy Policy
What ChinaMedMap collects, why, who sees it, how long we keep it and how to have it deleted.
Consent and disclosure version: 2026-09-21.
Summary
- We collect personal information only when you send us an inquiry or contact us.
- Your inquiry may include health information. We treat it as sensitive, restrict who can see it, and share it with a provider only after you agree.
- We do not accept medical-record uploads.
- What you type into search, and what you write in forms, is never sent to analytics or advertising tools.
What we collect
Inquiry form. Name, email, country, a broad category for your medical need and a short description. Optionally: phone or WhatsApp number, treatment interest, preferred city and timing. We also record the page you came from, the provider profile you were viewing if any, the date and time, the version of this policy you consented to, and a one-way hash of your IP address used only to limit abuse.
Analytics. If analytics is enabled, we record page views and a small, fixed set of events (for example “inquiry form submitted”) with non-sensitive parameters such as page type and an internal provider ID. We do not record search text, form contents, or health information, and we do not use advertising pixels or session-replay tools.
Cookies. The site works without cookies. Analytics, if enabled, may set cookies.
Why we use it, and our basis for doing so
We use inquiry information to understand your request, reply to you, and — with your explicit consent — introduce you to providers that may be able to help. You give consent on the form and can withdraw it at any time by contacting us.
Who sees it
- ChinaMedMap staff who handle inquiries, on a need-to-know basis.
- Providers you have agreed we may contact on your behalf. Providers are usually in mainland China, so your information will be transferred there. We tell you which provider before we share anything.
- Service providers that host our website and database, under contract.
We do not sell personal information.
How long we keep it
We keep inquiry records for as long as needed to handle your request, and then delete or anonymise them within 24 months of our last contact with you, unless the law requires otherwise. Abuse-prevention hashes are deleted within 30 days.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, or to stop using it. Depending on where you live, you may have further rights under laws such as the GDPR, UK GDPR or China’s Personal Information Protection Law, including the right to complain to a regulator. Use the contact page and we will respond within 30 days.
Security
Inquiries are sent over HTTPS and stored in an access-controlled database. Health details are never placed in URLs or email subject lines. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.
Children
The site is not directed at children. A parent or guardian should submit inquiries on behalf of a child.
Changes
We will update this page and its version date when our practices change.