Privacy and Data Processing Instructions

Only collect the information required for consultation

The form receives your name, contact information, and the intended hospital, insurance brand, product name and brief requirements that you voluntarily fill in for processing the consultation. Please do not fill in your ID number, complete insurance policy or detailed medical records in the form; the website does not have a portal for uploading patient medical records.

在线留言暂未启用，请通过咨询邮箱联系；网站不会自动发送咨询资料至Hospital。

Manual verification and follow-up information communication

The staff will communicate and consult according to the contact purpose you agreed to. If medical records are needed later, we will first explain to you the necessary information, purpose, specific recipient and delivery method, and determine the basis for corresponding processing. Contact consent does not mean that you have consented to all processing or cross-border transfers of your health information.

咨询通过 contact@zoyinghealth.com 人工处理。网站尚未接通自动邮件通知或自动回复；提供联系方式不代表同意将健康资料发送到Hospital。

Website security and remaining configuration

The live website uses HTTPS encryption in transit. Before patient inquiries are enabled, email two-factor authentication, staff access controls, sensitive attachment protection and provider data-processing terms must be configured and reviewed. Ordinary email should not be assumed to provide end-to-end encryption.

Storage, deletion and patient rights

Before patient consultation data is accepted, retention periods, deletion procedures, a privacy contact and procedures for applicable access, correction, deletion and withdrawal rights will be published. Online inquiries are not yet enabled.

Cross-border data and applicable regulations

When providing data to European patients and Chinese hospitals, you need to check the applicable scope of GDPR, health data processing conditions and cross-border transmission mechanisms based on actual business, as well as other applicable data protection requirements. The location of the server or mailbox cannot alone determine a compliance conclusion.