Privacy
Privacy notice
This notice describes, in plain terms, what personal information China Care Gateway collects, why, and how it is handled. It reflects the practices in place today; if a practice is not in place, it is not promised here.
The frameworks we work under
Our handling of personal information is framed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union's General Data Protection Regulation (GDPR) for patients based in Europe, and China's Personal Information Protection Law (PIPL) where information is handled on the China side of a pathway. Which framework applies to you depends on where you are based and where your information is processed; your rights under the applicable framework are respected in each case.
What we collect — the minimum necessary
- At inquiry: your name, email address, country of residence, the service you are interested in, your timing and language preferences, and the brief description you choose to write. We ask you not to send medical records at this stage.
- During an engagement: the documentation needed to coordinate your pathway, exchanged through a separate channel arranged by our team — not through this website.
- Website usage: aggregate usage statistics collected with Umami, self-hosted on our Canadian server. We do not run advertising trackers.
- Health information: any health information you choose to share is sensitive information, and it is collected only with your express consent.
Where your information is stored
Information we hold is stored in Canada, under access controls that limit it to the team members coordinating your case.
Service providers
We use a small number of service providers, by type: email — Google Workspace; website hosting — servers in Canada; analytics — Umami, self-hosted on our Canadian server. Providers process information only to provide their service to us.
How your information is used
- To respond to your inquiry and outline pathways.
- To prepare written quotes and coordinate your arrangements.
- To organize and translate your reports for your follow-up handover.
- Your information is never used to train AI models. Where we offer document organization and translation tools, your data is processed for your case only.
- We do not sell personal information, and we do not share it with hospitals or partners except as needed to coordinate the pathway you have asked us to arrange, and only with your knowledge.
International transfers
Coordinating care in China necessarily involves information crossing borders — for example, the documentation an institution in China needs to review your pathway. Depending on the stage of your care, transfers run in both directions: from Canada to China, and from China back to Canada. They are handled under PIPEDA, the GDPR where it applies, and China's Personal Information Protection Law (PIPL). Health information is sensitive information under these frameworks and is transferred only with your express consent. Before any such transfer takes place as part of an engagement, we will tell you what will be shared, with whom, and why, and proceed only with your consent.
Retention
Enquiries are deleted after 12 months if no engagement follows. Engagement records are retained in line with the requirements of the frameworks above and our service agreement, after which they are deleted or anonymized.
Privacy contact
Questions and requests about your personal information go to our Privacy Officer at hello@chinacaregateway.com.
Your rights
You may ask us at any time what information we hold about you, ask for it to be corrected, and ask for it to be deleted, subject to any retention obligations that apply. Write to hello@chinacaregateway.com and we will respond within the timeframe the applicable framework requires.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada. If you are based in the European Union, you may also contact your local data protection authority.
A plain-language note
Ordinary email is not an encrypted channel, which is one reason we ask you not to send medical records with a first inquiry. Sensitive documents are exchanged through a separate channel arranged personally by our team when a pathway proceeds.
This notice is a plain-language summary of current practice and will be updated as the platform's services and legal review progress. Last updated: November 2026 (preview version).