Privacy Policy
v3.0 · Last Updated: May 5, 2026 · Effective: May 5, 2026
Preamble
Beijing Contour Orizen Health Consulting Co., Ltd. (Unified Social Credit Code: 91110112MAKB97XCX8, Registered Address: Room 209-115, 2nd Floor, Commercial Building 2, Tongrui Jiayuan, Luyi Subdistrict, Tongzhou District, Beijing, PRC, hereinafter referred to as "we" or "us") is the operator of this website www.contour-orizen.com (hereinafter referred to as "this Website"). We are a medical assistance intermediary providing consultation, intermediary, translation, and accompaniment services for foreign nationals seeking medical care in China. We are not a medical institution and do not provide any diagnostic or treatment services.
We deeply value the importance of your personal information. We will protect the security of your personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Data Security Law of the People's Republic of China, and other applicable laws and regulations.
Article 1 — How We Collect and Use Personal Information
1.1 Inquiry Submission
When you submit an inquiry through the consultation form on this Website or contact us by email, we collect the following information:
| Information Type | Specific Content | Purpose of Collection | Necessary? |
|---|---|---|---|
| Identity Information | Real name | Identity identification, subsequent service communication | Yes |
| Contact Information | Email address | Responding to your inquiry, follow-up communication | Yes |
| Contact Information | Country/region of residence | Understand your location to provide services | Yes |
| Contact Information | Phone number | Service communication, emergency contact | Recommended |
- When you only browse public pages of this Website (such as service introductions), no personal information is required
- Our services are only intended for adults aged 18 and above
1.2 Healthcare Assistance Services
When you use healthcare coordination, translation, accompaniment, and other assistance services, we also need to collect the following information:
| Information Type | Specific Content | Purpose of Collection | Necessary? |
|---|---|---|---|
| Identity Verification | Passport number, nationality, date of birth | Hospital appointment identity verification, cross-border compliance | Yes |
| Contact Information | Phone number, mailing address | Service communication, emergency contact | Yes |
| Emergency Contact | Emergency contact name, relationship, phone | Medical emergency contact | Recommended |
| Health Information | Medical records, examination reports, diagnosis certificates, medication records, allergies | Assist hospitals in understanding your condition, healthcare coordination, medical translation services | Yes |
| Payment Information | Payment records, invoicing information | Fee settlement, insurance claims | Yes |
1.3 Website Access and Security
When you visit this Website, we automatically collect the following information:
| Information Type | Specific Content | Purpose of Collection | Necessary? |
|---|---|---|---|
| Device Information | Browser type and version, operating system type | Optimize Website compatibility | No |
| Network Information | IP address | Security risk control, anti-scraping | Yes |
| Access Logs | Access time, pages viewed, click behavior | Website operation analysis, security audit | Yes |
1.4 Other Information We May Collect
- When you contact customer service: We may collect your customer service communication records to resolve your issues and improve service quality
- When you participate in satisfaction surveys: We may collect your evaluations and feedback to improve services
- When you provide emergency contact information: We will only contact this person in emergencies and not for other purposes
Article 2 — How We Use Personal Information
We use your personal information for the following purposes:
| Purpose of Use | Types of Information Used | Legal Basis |
|---|---|---|
| Provide Healthcare Assistance Services | Identity, health, contact information | Contract performance |
| Identity Verification | Identity information, passport information | Legal compliance |
| Service Communication | Contact information | Contract performance |
| Fee Settlement | Payment information | Contract performance |
| Security and Risk Control | Network information, access logs | Necessary for service security |
| Fulfill Legal Obligations | Relevant information | Legal obligation |
We will not use your information for the following purposes:
- Selling, renting, or otherwise providing to unrelated third parties
- Marketing promotions without your consent
- Other purposes unrelated to service objectives
Article 3 — How We Share, Transfer, and Publicly Disclose Personal Information
3.1 Sharing Recipients
We may share your personal information with third parties in the following circumstances:
| Sharing Recipient | Information Shared | Purpose of Sharing | Information Type |
|---|---|---|---|
| Cooperating Hospital | Health information, identity information | For the hospital to understand your condition and provide treatment (we are only responsible for information transmission and do not participate in treatment decisions) | Sensitive personal information |
| Translators | Medical records, conversation content | Medical translation services | Sensitive personal information |
| Travel Agencies | Itinerary information, contact information | Flight and hotel bookings (outsourced service) | General personal information |
| Payment Institutions | Payment information | Fee settlement | General personal information |
| Insurance Companies | Treatment information, identity information | Claims processing (with your consent) | Sensitive personal information |
| Legal Service Institutions | Relevant information | Dispute resolution | General personal information |
| Cloud Server Providers | Stored personal information | Data storage and backup | General personal information |
3.2 Sharing Conditions
When we share your personal information, we require third parties to:
- Only use the information for the agreed purposes
- Implement appropriate protection measures
- Not share the information with other parties
3.3 Transfer and Public Disclosure
Unless in the following circumstances, we will not transfer or publicly disclose your personal information:
- With your explicit consent
- As required by laws and regulations
- Necessary to protect our or others' legitimate interests (e.g., preventing fraud, personal danger)
Article 4 — Cross-Border Data Transfer
4.1 Transfer Description
As we are a company located in the People's Republic of China, your personal information will be transferred from your country/region to the People's Republic of China for processing and storage.
4.2 Transferred Information
Depending on the service level you consent to, the types of information transferred are as follows:
| Service Level | Types of Information Transferred |
|---|---|
| Inquiry Stage | Name, email address, country/region of residence |
| Healthcare Assistance | Inquiry stage information + passport information, health information, contact information, payment information |
4.3 Legal Basis
Cross-border data transfer is governed by the laws of the People's Republic of China, including:
- Personal Information Protection Law of the People's Republic of China
- Data Security Law of the People's Republic of China
4.4 Separate Consent
4.5 Special Notice for EU, UK, and California Residents
If you are a resident of the EU, UK, or California:
- We are a Chinese company subject to Chinese law
- You may exercise your rights to access, correct, and delete through the contact information provided in Article 10
- If you are dissatisfied with our privacy practices, you may contact our customer service to file a complaint
Article 5 — Cookies and Similar Technologies
5.1 Cookie Types
We use the following cookies and similar technologies:
| Cookie Type | Purpose | Retention Period | Necessary? |
|---|---|---|---|
| Necessary Cookies | Basic Website functions (security verification) | Session | Yes |
| Functional Cookies | User preference settings (language, etc.) | 1 year | No |
5.2 Cookie Management
You can manage or disable cookies through your browser settings, but disabling cookies may affect some Website functions.
Article 6 — How We Store and Protect Personal Information
6.1 Storage Location
Your personal information is stored on servers located within the People's Republic of China.
6.2 Retention Period
We retain your personal information only for the shortest period necessary to fulfill the purposes described in this policy:
| Information Type | Retention Period | Post-Expiry Handling |
|---|---|---|
| Inquiry Information | 2 years after service completion | Deletion |
| Health Information | 5 years after service completion | Deletion or anonymization |
| Payment Records | 5 years after service completion | Deletion |
| Website Access Logs | 12 months after collection | Deletion |
Where laws or administrative regulations provide otherwise for retention periods, such provisions shall prevail.
6.3 Technical Measures
We implement the following technical measures to protect your personal information:
- Data transmission encryption
- Data storage encryption
- Access control
6.4 Management Measures
- Employee confidentiality agreements
- Tiered access control management
- Emergency response plans
6.5 Security Incidents
In the event of a personal information leak, tampering, or loss, we will:
- Take remedial measures immediately
- Notify you in a timely manner as required by law
- Report to regulatory authorities as required by law
Article 7 — Managing Your Personal Information
Under the Personal Information Protection Law of the People's Republic of China, you have the following rights:
7.1 Right to Access and Copy
You have the right to access and copy your personal information held by us. You may apply through our customer service email to obtain it.
7.2 Right to Correct and Supplement
You have the right to request correction of inaccurate or incomplete personal information.
7.3 Right to Deletion
In the following circumstances, you have the right to request us to delete your personal information:
- The purpose for which we process personal information has been achieved or is no longer necessary
- You have withdrawn your consent
- We have processed your personal information in violation of laws, administrative regulations, or our agreement
- Deletion is required by laws or administrative regulations
Exceptions:
- Retention is required by laws and regulations (e.g., tax, medical record retention requirements)
- Necessary for performance of this contract (e.g., ongoing services)
- Necessary for potential litigation or arbitration
7.4 Right to Withdraw Consent
You have the right to withdraw your consent to the processing of personal information at any time. After withdrawal, we will cease processing your personal information within the scope of the withdrawn consent, but the withdrawal does not affect the validity of processing activities already conducted based on consent prior to withdrawal.
7.5 How to Exercise Your Rights
You may exercise the above rights through:
- Customer Service Email: [email protected]
We will respond to your request within 15 business days. If we need to verify your identity before processing your request, we will do so first.
Article 8 — Protection of Minors
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.
If your child has provided us with personal information, please contact us through the following method and we will promptly delete it:
- Customer Service Email: [email protected]
Article 9 — Updates to This Privacy Policy
9.1 Updates and Notification
We may update this privacy policy from time to time. Material changes will be notified to you via website announcement or email. Your continued use of the services after the updated policy takes effect constitutes your acceptance of the updated policy.
Article 10 — Contact Us
10.1 Contact Information
- Customer Service Email: [email protected]
- Address: Room 209-115, 2nd Floor, Commercial Building 2, Tongrui Jiayuan, Luyi Subdistrict, Tongzhou District, Beijing
If you are dissatisfied with our privacy practices, you may contact us through the above methods.
Article 11 — Governing Law
This privacy policy is governed by the laws of the People's Republic of China. Any dispute arising from this privacy policy shall be submitted to the China International Economic and Trade Arbitration Commission (CIETAC, with the place of arbitration in Beijing) for arbitration.
Article 12 — Language
This privacy policy may be available in multiple languages. In the event of any ambiguity or inconsistency between different language versions, the Simplified Chinese version shall prevail.
Article 13 — Definitions
| Term | Definition |
|---|---|
| Personal Information | Various kinds of information related to identified or identifiable natural persons recorded electronically or by other means, excluding anonymized information |
| Sensitive Personal Information | Personal information that, if leaked or illegally used, may easily result in infringement of personal dignity or harm to personal or property safety, including biometrics, religious beliefs, specific identity, medical health, financial accounts, location tracking, etc., as well as personal information of minors under 14 years of age |
| Anonymization | The process by which personal information is processed so that specific natural persons cannot be identified and the information cannot be restored |
| Separate Consent | Voluntary and explicit consent given to the processing of personal information on the basis of full knowledge |