The following terms are written in plain English, without unnecessary legal jargon.

1. What data we collect

• Contact information: Name, email, phone number, country of residence
• Health data (special category): Age, gender, medical records, test results, diagnostic reports, medical condition, brief description
• Treatment history: Treatment history and any health-related information you voluntarily provide
• Technical data: IP address, browser type, device information, submission timestamp (automatically recorded by FormSubmit.co for fraud prevention and system security)

2. Legal basis

Article 6 (General data processing): Under Article 6(1)(a) of the EU General Data Protection Regulation (GDPR), based on your explicit consent. We process this data solely to coordinate cross-border medical services between you and our partner hospitals in Guangzhou, China.

Article 9 (Special category sensitive data): Your medical records, test results, and diagnostic reports constitute “special categories of personal data” (health data) under Article 9 of the GDPR. Processing such data requires your explicit consent (Explicit Consent), which demands a higher standard of confirmation than ordinary consent. By checking this consent box, you give explicit consent for the processing of health data.

3. Identity of Data Controller (as required by GDPR Article 13)

• Data Controller Name: Shenzhen East Top Supply Chain Co., Ltd.
• Registered Address: Room 1201-1, Tower A, China Merchants Qianhai Economic and Trade Centre Phase I, No. 151 Zimao West Street, Nanshan Street, Qianhai Shenzhen Cooperation Zone, Shenzhen
• Contact Information: easttophealthcare@163.com
• Data Protection Officer (DPO): The Company has not appointed a dedicated Data Protection Officer

4. Data transfer & cross-border safeguards

Safeguard measures:

• Encrypted transmission (TLS 1.3 protocol)
• Encrypted storage (AES-256 standard)
• Minimal access control — only personnel who need to know
• Written data processing agreements with all third parties

Cross-border transfer legal mechanism: This project uses Standard Contractual Clauses (SCC 2021 version) approved by the European Commission as the legal basis for cross-border data transfers. We have signed SCCs with the following Chinese data recipients:

• Partner Hospital: Our selected Grade 3A hospitals in China (data received: patient medical records, diagnostic reports)
• Translation Service: Professional medical translators (data received: communication records, medical translations)
• Logistics Coordination: Travel coordination team (data received: name, email, phone, travel information)

We will ensure all recipients take reasonable measures to provide a level of data protection equivalent to that in the EU. Full SCC text available upon request.

⚠️ Objective risk disclosure: Despite the technical safeguards mentioned above, you should be aware of the following objective risks: (1) China is not currently recognised by the EU as having an “adequate” level of data protection, meaning some of your GDPR rights may receive different judicial protection in China compared to the EU; (2) Chinese judicial or regulatory authorities have the power to access health data located within China under Chinese law, which may be beyond the control of this organisation; (3) Under China’s “Data Security Assessment Measures for Cross-Border Data Transfer”, cross-border transfer of personal health data may require a security assessment to the Cyberspace Administration of China, which we will fulfill when necessary.

Transfer Impact Assessment (TIA): We have conducted a Transfer Impact Assessment (TIA) before cross-border data transfer. The assessment results can be provided as an attachment upon request.

5. Who receives your data

Doctors and nurses at partner hospitals involved in your case, bilingual medical translators, logistics coordinators for visa and travel arrangements. All are bound by confidentiality obligations.

6. Retention period

• Medical records: Retained for 15 years after treatment completion, in accordance with Chinese regulations on medical record management.
• Personal contact data (name, email, phone): Retained for 3 years from last interaction, or deleted upon withdrawal of consent — whichever comes first.

7. Your rights (GDPR) & how to exercise them

• Right to access: Obtain a copy of the data we hold about you
• Right to rectification: Correct inaccurate information
• Right to erasure (right to be forgotten): Request deletion of your personal data
• Right to restriction: Request suspension of data processing in certain circumstances
• Right to portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests

How to exercise your rights: To exercise any of these rights, please contact us through the following channels:

• Email: easttophealthcare@163.com (fastest)
• Written request: Send to the registered address (see Section 3)

We will respond within one month of receipt. If the case is complex, this may be extended to three months, with prior notice to you.

8. Withdrawal of consent

You may withdraw your consent at any time by emailing easttophealthcare@163.com. The withdrawal process is designed to be as easy as giving consent. Withdrawal does not affect the lawfulness of processing before its withdrawal. However, withdrawing consent may prevent us from continuing service provision.

9. Right to complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national supervisory authority in the EU.

11. Data Controller Change Notice

If our data controller identity changes (e.g., due to corporate merger or重组), we will notify you and update this privacy policy. Major changes will be communicated via email or website announcement.

12. Privacy Policy Updates

This privacy policy may be updated periodically. Major changes will be communicated via email or website announcement. We recommend reviewing this page regularly for the latest terms.

Withdrawal of consent: You may withdraw your consent at any time by emailing easttophealthcare@163.com. The withdrawal process is as easy as giving consent. Withdrawal does not affect the lawfulness of processing before its withdrawal.

The following terms are written in plain English, without unnecessary legal jargon.

1. Nature of Service

Estop Healthcare Limited (“we”, “the Company”) operates as a medical coordination and patient facilitation service. We do NOT provide direct medical diagnosis, treatment, surgery, or clinical care. All clinical decisions and treatments are delivered exclusively by licensed physicians at our partner hospitals in Guangzhou, China.

⚠️ Statement on Independence of Agreements

The consent you give in this document and the data processing authorisation in the “Personal Data Protection & Processing Consent” are two independent agreements. Checking one box does not constitute agreement to the other — you must confirm each agreement separately. For details on the collection, processing, and cross-border transfer of your health data, please refer to the “Personal Data Protection & Processing Consent”.

2. Our Role

• Helping you understand available treatment options at partner hospitals
• Facilitating communication between you and hospital doctors
• Arranging non-medical logistics including appointments, translation, travel, and accommodation
• Providing non-clinical support during your stay in Guangzhou

3. Partner Hospitals

Our partner hospitals hold JCI accreditation and/or Grade III (三甲) certification in China’s healthcare system. While we select partners based on quality standards, we cannot guarantee specific outcomes, waiting times, or individual physician availability. Final acceptance into treatment depends entirely on each hospital’s independent assessment.

4. General Treatment Risks

I acknowledge and confirm:

• No medical procedure can guarantee a successful outcome
• All treatments carry inherent risks, potential complications, and possible adverse reactions
• I am encouraged to seek a second medical opinion before committing to any treatment

Disclaimer: Our company only provides medical process coordination and referral arrangement services. We do not conduct any medical diagnosis or treatment. All diagnostic and treatment decisions, as well as medical accident liability, are solely borne by the partner hospitals and attending physicians. Our company bears no legal or compensation responsibility for any medical accidents, misdiagnosis, missed diagnosis, or treatment complications.

5. Cross-Border Medical Treatment Specific Risk Warnings

In addition to the general treatment risks above, you should be specifically aware of the following cross-border-specific risks:

• Follow-up continuity risk: Complications occurring after returning to your home country will require follow-up through local healthcare providers. You may face language barriers, medical record translation discrepancies, differences in treatment standards between countries. We recommend communicating with your local doctor about post-treatment care plans in advance.
• Medication access risk: Prescription medications used in China may differ from common brands or specifications in your home country. If you need to continue medication after returning, you may require a new local prescription.
• Legal remedy limitations: Any disputes arising from treatment involve cross-border legal issues. Mandatory consumer protection laws in your EU country of residence may not directly apply to medical services rendered in China, and维权 costs and time may increase significantly.
• Emergency response difficulties: In the event of an emergency medical situation in China, the timeliness and feasibility of contacting your home country’s insurance provider or emergency services remotely may be limited.

6. Financial Responsibility

I understand that cost estimates are for reference only. Actual charges depend on the final treatment plan determined by the treating physician, which may differ from initial estimates due to individual clinical factors. I accept full financial responsibility for confirmed and rendered services.

7. Complaints & Dispute Resolution

If you have a complaint about the quality of medical services or treatment outcomes, the following channels are available:

• Partner Hospital Complaint Procedures: Our partner hospitals all maintain transparent complaint mechanisms. You may request that the hospital initiate its formal complaint process.
• Chinese Health Authorities: Complaints may be lodged with the local Health Commission (卫健委) where the hospital is located.
• Negotiation/Arbitration: Any disputes arising from this agreement shall first be addressed through good-faith negotiation. If unresolved, they shall be submitted to an arbitration body agreed by both parties.

Note that nothing herein limits mandatory consumer protection rights conferred by the laws of your country of residence under EU regulations. You may continue to assert your rights under the consumer protection laws applicable in your jurisdiction.

8. Withdrawal & Post-Withdrawal Data Handling

I understand that I may withdraw from services at any time before commencing treatment without penalty. However, I also acknowledge that withdrawal does not affect the lawfulness of personal information and data processing already legally obtained. After withdrawal, your personal health data will be handled in accordance with Section 6 “Retention Period” of the Personal Data Protection & Processing Consent — i.e., medical records retained for 15 years after treatment completion per Chinese law, personal contact data deleted 3 years from withdrawal. If you wish to request earlier deletion, please contact us via the privacy email.

9. Declaration & Applicable Law

By checking the box below, I confirm:

• I have read and understood this informed consent document
• I voluntarily choose to engage Eastop Healthcare’s services for cross-border medical coordination
• I have had the opportunity to ask questions and received satisfactory answers (or chose not to)
• I understand that the Personal Data Protection & Processing Consent is an independent agreement that requires separate confirmation
• I understand I may withdraw at any time before commencing treatment, but post-withdrawal data handling follows the Privacy Consent terms
• This agreement does not limit my mandatory consumer protection rights under the laws of my country of residence (EU/EEA relevant regulations)

Withdrawal of consent: You may withdraw your consent at any time by emailing easttophealthcare@163.com. The withdrawal process is as easy as giving consent.