Last updated: 19 October 2026. This policy explains what we do with the information you send us, and specifically how we handle medical information, which we treat as sensitive personal data.
South China Medical ("we", "us") is the controller of the personal data described in this policy. We are a private patient-facilitation company operating from Guangzhou, Guangdong Province, China. You can reach us at zhangjianwei800619@outlook.com for any question about this policy or your data.
Our web server records standard technical data: IP address, browser type, referring page, and pages visited. We use this only for security and aggregate traffic analysis. We do not use advertising trackers, cross-site profiling, or sell data to anyone.
We process your data to assess your enquiry, prepare your records for a hospital, coordinate your appointments and travel, assist with insurance documentation, and maintain our business records. Under the EU/UK General Data Protection Regulation our legal bases are: performance of a contract with you, your explicit consent for medical information, compliance with legal obligations, and our legitimate interest in operating a secure service. Under China’s Personal Information Protection Law we rely on your separate and explicit consent for sensitive personal information, which we obtain through the consent statement on our enquiry form.
We never sell your data, and we do not share it with hospitals you have not been referred to, or with any commercial partner for marketing.
We are based in China, so information you send us is transferred to and stored in China. Where you are located in the European Economic Area, the United Kingdom or another jurisdiction with transfer restrictions, this transfer is necessary for the performance of our contract with you and is made under appropriate safeguards. Medical records are transmitted through encrypted channels rather than ordinary email wherever the file size and format allow.
Enquiry records that do not proceed to treatment are deleted 12 months after the last contact. Records relating to a completed episode of care are retained for six years, in line with the limitation period for contractual claims in China, then deleted. Financial and invoicing records are retained for the period required by Chinese tax and accounting law. You may request earlier deletion at any time, subject to those legal retention obligations.
Access to medical files is restricted to the coordinator, translator and insurance liaison assigned to your case. Files are stored in access-controlled systems, transmitted over encrypted connections, and are not stored on personal devices. We do not claim perfect security; we do commit to notifying you without undue delay if a breach affects your data, and to notifying the relevant authority where the law requires it.
You may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability of the data you provided, and withdrawal of consent at any time. Withdrawing consent does not affect processing already carried out, but it may mean we can no longer coordinate your care.
To exercise any of these rights, write to zhangjianwei800619@outlook.com. We respond within 30 days. If you are in the EU or UK and are dissatisfied with our response, you may complain to your national data protection authority. If you are in China, you may complain to the relevant cyberspace or market regulation authority.
Where the patient is a child, we process the child’s information on the basis of consent given by a parent or legal guardian, and we require documentation of the guardianship relationship for travel and hospital admission purposes.
This website sets no advertising or tracking cookies. If we later add analytics, we will ask for consent first and update this section. Embedded third-party content, if introduced, may set its own cookies under that provider’s policy.
If we change this policy materially, we will update the date at the top and, where the change affects how we handle medical information, seek fresh consent from active clients.
This policy is provided in English. Where a translation is supplied for convenience, the English version prevails. Nothing in this policy limits rights you have under mandatory data protection law in your country of residence.