隐私政策 Privacy Policy
第 1 条 政策说明与效力优先级
1.1 本隐私政策依据《中华人民共和国个人信息保护法》《网络安全法》《电子商务法》制定，规范 OrientScan 平台收集、存储、使用、共享、保护用户个人信息与敏感医疗信息的全部行为。
1.2 中文文本为最终法定效力版本，英文译本仅作外文用户参考；版本冲突以中文为准。
1.3 您注册账号、下单服务即视为同意本隐私政策全部信息处理规则。
第 2 条 我们会收集的信息类型
2.1 基础身份联络信息（必要收集）
姓名、国籍、证件护照号、电子邮箱、WhatsApp / 手机号、居住地址、紧急联系人信息，用于账号核验、订单履约、签证材料协助、行程通知。
2.2 订单与支付信息
订单服务项目、付款凭证、账单记录、发票抬头信息，用于财务对账、售后溯源、合规税务留存。
2.3 敏感个人医疗信息（自愿授权收集）
您主动提交的既往病史、体检报告、诊断病历、身体症状、生殖 / 眼科 / 影像检查相关健康资料；该类信息仅在您主动勾选授权后方可采集，用于对接匹配国内医疗机构，无授权绝不主动获取。
2.4 网站自动化日志信息
IP 地址、设备型号、浏览器标识、页面浏览记录、操作点击日志，用于网站安全风控、访问统计、防恶意爬虫攻击。
第 3 条 信息使用目的
3.1 完成您提交订单对应的医疗行程、医院预约、签证代办、翻译陪同、住宿交通等履约服务；
3.2 核验账号安全，防范盗号、诈骗、恶意刷单订单；
3.3 依法配合公安、卫健、海关等监管部门法定调查调取；
3.4 仅在您单独勾选同意后，推送平台新品服务、优惠资讯营销内容，您可随时关闭营销推送授权。
第 4 条 信息存储与跨境传输规则
4.1 所有在中国境内收集的用户个人信息、医疗数据默认存储于中国大陆境内合规服务器，不擅自境外跨境传出。
4.2 因您本人身处海外、需要向海外您本人或境外委托方回传病历报告时，必须获得您单独书面确认授权方可跨境传输，并留存传输审批记录。
4.3 数据留存期限：
账号基础信息：账号注销后 15 日内彻底删除；
已完成订单全套数据：依法留存10 年（匹配国内医疗档案、财税记账法定保管年限）；
网站访问日志：留存 24 个月后自动匿名化清除。
第 5 条 信息共享范围（严格限缩）
5.1 仅可向签约合作公立医院 / 正规私立医疗机构共享您必要就诊信息，用于接诊诊疗，机构必须签署保密协议；
5.2 可向支付服务商、签证代办合作方有限披露必要字段，不可超范围泄露；
5.3 绝不向第三方广告公司、征信机构、无关商业主体出售、倒卖任何用户个人信息。
第 6 条 用户依法享有的个人信息权利
您可通过客服邮箱发起申请，我方在 15 个工作日内办结：
1）查阅权：调取我方留存您的全部个人信息副本；
2）更正权：修改错误、过时的身份与健康资料；
3）删除权：注销账号后申请清空非法定强制留存外所有信息；
4）撤回授权：随时关闭医疗信息收集、营销推送的授权许可；
5）解释说明权：要求我方就信息使用行为进行书面解释。
第 7 条 信息安全保护措施
我方采用传输加密、数据库权限分级、员工保密协议、定期安全渗透测试防护数据泄露；如发生数据泄露事件，将第一时间告知受影响用户并上报监管部门。
第 8 条 修订与争议管辖
8.1 本政策更新后公示于网站底部法律板块即生效；持续使用代表接受新版条款。
8.2 因本隐私政策产生全部争议，合同订立地为青岛市黄岛区，管辖法院为青岛市黄岛区人民法院，适用中国内地法律，中文文本优先解释。
第 9 条 投诉渠道
数据合规投诉邮箱：info@orientscan.com
受理时限：收到邮件后 7 个工作日内回复处理结果。
English Version | Privacy Policy
Article 1 Policy Statement & Priority
1.1 This Privacy Policy is formulated in accordance with the Personal Information Protection Law, Cybersecurity Law and E-Commerce Law of the People’s Republic of China, governing all collection, storage, usage, disclosure and protection of user personal data and sensitive medical information by OrientScan.
1.2 The Chinese version shall prevail in case of any discrepancy between Chinese and English translation. The English text is for reference only.
1.3 Registering an account or placing an order confirms your full consent to this Policy.
Article 2 Categories of Information Collected
2.1 Mandatory Basic Contact Information
Full name, nationality, passport/ID number, email, WhatsApp/phone number, residential address, emergency contact, used for account verification, order execution, visa assistance and itinerary notification.
2.2 Order & Payment Data
Service items in orders, payment receipts, billing records and invoicing information, retained for accounting, after-sales traceability and tax compliance.
2.3 Voluntary Sensitive Medical Data
Medical history, examination reports, diagnosis documents and health conditions provided by you only with your explicit opt-in consent. Such data will never be collected without your authorization, solely for matching qualified medical providers in China.
2.4 Automatic Website Log Data
IP address, device model, browser fingerprint, browsing and click logs, applied for website security, access analysis and anti-crawling protection.
Article 3 Purpose of Data Processing
3.1 Fulfill contracted services including hospital appointment, visa support, interpreter, accommodation and travel arrangement as per your order;
3.2 Secure account system and prevent fraud, account hijacking and malicious orders;
3.3 Comply with legal investigation requests from Chinese administrative authorities including public security, health commission and customs;
3.4 Promotional service emails will only be sent if you explicitly opt in; you may withdraw marketing consent at any time.
Article 4 Data Storage & Cross-Border Transfer
4.1 All personal and medical information collected within mainland China shall be stored on compliant servers located in Chinese mainland by default, no unauthorized cross-border data export.
4.2 Cross-border transmission of your medical documents to your overseas location or designated third party is permitted only with your separate written authorization, with formal records kept for review.
4.3 Data Retention Period:
Basic account information: permanently deleted within 15 working days upon account cancellation;
Completed order archives: retained for 10 years to meet medical file and fiscal legal requirements;
Website access logs: anonymized and erased automatically after 24 months.
Article 5 Restricted Information Sharing
5.1 Necessary medical information may only be shared with contracted qualified hospitals and clinics bound by non-disclosure agreements for clinical treatment purpose;
5.2 Limited necessary data may be disclosed to payment processors and official visa agencies strictly within service scope;
5.3 We will never sell or trade any user personal information to advertising agencies, credit bureaus or irrelevant commercial third parties.
Article 6 Your Statutory Rights
You may submit a formal request via official support email, and we will respond within 15 working days:
Right to access: obtain a copy of all your stored personal data;
Right to rectification: amend incorrect or outdated personal and medical details;
Right to erasure: request deletion of all non-mandatory retained data after account termination;
Right to withdraw consent: revoke permission for medical data collection and marketing messages at any time;
Right to explanation: demand written clarification on how your information is being processed.
Article 7 Data Security Safeguards
We adopt end-to-end encryption, hierarchical database access, staff confidentiality agreements and regular security audits to prevent data leakage. In case of confirmed data breach, affected users and relevant regulatory authorities will be notified immediately.
Article 8 Revision & Dispute Jurisdiction
8.1 Updated versions of this Policy will be published on the website legal footer page and take effect immediately; continued use implies acceptance of revised terms.
8.2 All disputes arising from this Privacy Policy shall be governed by the laws of Mainland China. Contract formation place is Huangdao District, Qingdao City. Exclusive jurisdiction belongs to the People’s Court of Huangdao District, Qingdao City, P.R.China.
Article 9 Compliance Complaint Channel
Official Data Protection Complaint Email: info@orientscan.com
Response period: formal reply within 7 working days upon receipt.