Privacy Policy

Last updated: 2025-02-23

1. Introduction

CN Care ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We may collect the following types of information:

  • Personal Information: Name, email address, phone number/WhatsApp, and other contact details you provide.
  • Health-Related Information: Medical service interests, treatment preferences, and related health information you voluntarily share.
  • Usage Information: IP address, browser type, pages visited, and other analytics data.
  • Cookies and Tracking: Information collected through cookies and similar technologies.

3. How We Use Your Information

We use your information to:

  • Connect you with medical providers matching your needs
  • Communicate with you about our services
  • Process consultation bookings and payments
  • Improve our website and services
  • Comply with legal obligations

4. Information Sharing

We share your information only with your explicit consent, specifically with medical providers you choose to connect with. We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement comprehensive security measures to protect your personal information:

  • Encryption: All data transmission uses TLS 1.3 encryption; sensitive data is encrypted at rest using AES-256.
  • Access Control: Strict role-based access controls with minimum necessary privileges. Only authorized personnel can access personal data.
  • Infrastructure Security: Regular security audits, vulnerability assessments, and penetration testing.
  • Data Minimization: We collect only the minimum data necessary for service delivery.

6. Data Retention

We retain your personal information only as long as necessary:

  • Active Service Data: Retained for 24 months after your last service interaction for follow-up support.
  • Health Information: Anonymized or deleted within 12 months after service completion, unless longer retention is required by law.
  • Financial Records: Retained for 7 years as required by applicable tax and accounting regulations.
  • Marketing Data: Deleted immediately upon your opt-out request.

7. Cross-Border Data Transfer

Your information may be transferred to and processed in China where our servers are located. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements with our partners. By using our services, you consent to such transfers.

8. Your Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data we hold.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data (subject to legal retention requirements).
  • Portability: Request your data in a machine-readable format.
  • Withdraw Consent: Withdraw consent for data processing at any time.

To exercise these rights, contact us at the email below. We will respond within 30 days.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at yoyyyy@gmail.com.