Patient Privacy & Medical Record Authorization
This policy explains how MedTravel China handles the personal information and medical records you submit (including sensitive health information such as DICOM imaging, pathology reports and laboratory results), covering the scope of data collected, the purposes of use, the rules on authorization and cross-border transfer, and the rights you may exercise. The platform processes such data only after receiving your explicit authorization, and every step of the process is encrypted and logged.
1. What We Collect
- check_circleContact information: name, telephone, email, country of residence and identification details of the patient and the emergency contact (used to create the patient file and issue invitation letters);
- check_circleMedical records: diagnostic certificates, discharge summaries, blood and biochemical laboratory tests, pathology/immunohistochemistry reports, DICOM imaging such as CT, MRI and PET-CT scans, medication history and records of prior treatment;
- check_circleService records: the specialty and department requested for treatment, coordination work orders, completed translation deliverables and follow-up communication records.
2. Purposes of Use (Limited Scope)
Your information is used only for the following purposes and for no other commercial purpose: (1) manual verification of the completeness of your medical records and communication about any additional examinations needed; (2) multilingual medical translation and structured organization of your records; (3) submission to partner Class-A tertiary hospitals for assessment and acceptance communications; (4) assistance with official documents such as medical visa invitation letters; and (5) treatment coordination, follow-up and compliance audits.
3. Authorization & Cross-Border Transfer
Medical records constitute sensitive personal information. Only after you have signed the Personal Data Cross-Border Transfer Authorization and confirmed the purposes item by item will the platform disclose the necessary medical records to the department(s) of the partner hospital handling your assessment and treatment. Before such authorization is obtained, the platform will not submit your medical records to any hospital or third party. The authorization sets out the categories of recipients, the content to be transferred, the purposes and the period of validity, and it may be withdrawn at any time in accordance with Section 5 of this policy.
4. Storage & Security
- lockEncrypted transmission and access logging across the entire process, with least-privilege access for staff: only the coordination and translation personnel assigned to your case can read the data;
- lockImaging and laboratory data are stored encrypted to standards customary in the healthcare industry; follow-up data after departure is shared with the treating team only within the scope of your authorization;
- lockYour personal information is never sold, rented or disclosed to advertisers, insurers or any unrelated third party.
5. Your Rights
You have the right to access, correct or copy your personal information, to withdraw your authorization, or to request deletion of the copies held by the platform. Withdrawal or deletion does not affect processing lawfully completed under your authorization before such withdrawal; medical records already formally submitted to a hospital are managed and retained in accordance with that hospital's rules and applicable local law. To exercise these rights, please submit a written request through the contact channels below, and the platform will respond within 15 working days.
6. Contact & Effectiveness
Privacy matters: vip@chinamedtourist.com; reports and complaints: vip@chinamedtourist.com; hotline: +86 13702335733. This policy takes effect with the latest published version of the platform; the specific rights and obligations of the parties are governed by the agreement you sign with the platform and its latest published version.