Privacy Policy

1 · Who we are

VitalBridge China is a non-medical case coordination service for international patients, and is the controller of the information described below. This policy is governed by the laws of the Hong Kong Special Administrative Region, including the Personal Data (Privacy) Ordinance (PDPO). Where you are a resident of the EU/EEA, the UK or another jurisdiction with mandatory data-protection rights, nothing in this policy limits the rights you have under those laws.

2 · What we collect

Through the case review form on our Contact page and any follow-up communication, we collect only what is needed to assess and coordinate your case:

• Contact details — name, country/region, email, and optionally your phone/WhatsApp number and the patient's age and gender.
• Medical information you choose to share — diagnosis or suspected condition, reports and imaging links (for example a Google Drive link), and files you upload (PDF reports, images, short videos), up to the limits shown on the form.
• Message content — your questions and anything else you tell us about your situation.
• Basic technical data — standard server logs (IP address, browser type, pages visited) kept for security and abuse prevention.

Please do not send more medical detail than you are comfortable sharing at the first step — the free review needs surprisingly little, and we will tell you exactly what a hospital will require before you send anything further.

3 · How we use it

We use your information only to: respond to your inquiry and carry out the free initial review; prepare your case for hospital review if you choose to proceed; organize translation, written cost estimates, appointments, visas and travel; and meet legal or accounting obligations. We do not use your medical information for advertising, and we do not sell it — ever.

4 · Sharing: the two stages

Stage 1 — free initial review: hospitals see nothing. At the inquiry stage your information stays inside our team. We do not share it with hospitals, clinics or any other medical provider.

Stage 2 — paid second opinion or coordination: sharing with your authorization. Your information is submitted to medical professionals at a hospital only when you take a paid step — for example the $500 Medical Second Opinion or a coordination service. Paying for that service is your authorization for us to submit the relevant records to the appropriate medical professionals for review. If your case proceeds further, we confirm with you exactly which hospital receives what, before anything is sent.

We never share your medical details with unrelated third parties, marketers, or hospitals outside your own case. Service providers we rely on to operate (for example our email provider, cloud storage, and payment processor) handle data only on our instructions.

5 · Uploaded files & storage

Files you upload through the case review form (reports, images, videos) are stored in access-controlled cloud storage and are visible only to our coordination team. Upload files that are not followed by a paid service are deleted after 3 months. Files belonging to an active or completed case are kept only as long as the case requires — see Section 6. You may also ask us to delete any file earlier, at any time.

6 · Retention

Inquiries that do not proceed: contact information and message content are deleted after 12 months, and uploaded files after 3 months (Section 5). Active cases: records are kept for as long as needed for your coordination and any follow-up, then deleted or anonymized. Where accounting rules require us to keep payment records, we keep only those records, not your medical file.

7 · Your rights

You may ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it — at any time, free of charge. Write to [email protected] or use the case review form; we will respond within 30 days. If you are unhappy with how we handled your request, you may complain to your local data-protection authority or, for Hong Kong, the Office of the Privacy Commissioner for Personal Data.

8 · Cookies & analytics

This website uses strictly necessary cookies to make the site work (for example remembering your language and form progress), plus privacy-respecting, anonymized analytics to understand which pages are useful — we do not use advertising or cross-site tracking cookies, and we do not sell browsing data. Analytics data is aggregated and contains no medical information. You can block or delete cookies in your browser settings at any time; the site will continue to work. By continuing to use this site you consent to the cookies described here. Where local law requires an opt-in banner (for example in the EU/UK), we show one before non-essential cookies are set.

9 · Security

Information is transmitted over encrypted connections (HTTPS) and stored in access-controlled systems. Medical information is accessible only to the coordination team members working your case. No system is perfectly secure, but we review access regularly and act immediately if anything looks wrong.

10 · Changes & contact

If we change this policy in a way that matters, we update the date above and, for active cases, we notify you directly. The data controller is VitalBridge China (governing law: Hong Kong SAR; mailing address: 3D, No.15 Wong Chuk St, Kowloon, Hong Kong). Privacy questions or requests: [email protected], the case review form, or WhatsApp — we reply within 24 hours.