This Privacy Policy explains how Panda Touring Care (“we”, “us”) collects, uses, shares, and safeguards your information when you use our website, book a consultation, apply to join the medical companion team, or otherwise interact with our services.
1. Information we collect
Account information: name, email, password (hashed), and phone number when you create an account or sign in via OAuth.
Booking information: first and last name, age, country of residence, contact details, contact preference, visit reason, priority preference, and (for paid deposits) Stripe payment intent identifiers.
Companion application information: name, contact details, city, years of clinical experience, languages, specialties, certifications, availability, and motivation statement.
Health-related information: any condition or treatment information you choose to share to help us match you with a hospital or physician. We treat this as sensitive personal information.
Usage information: device type, IP address, pages visited, referring URL, and approximate location, collected via cookies and analytics tools.
2. How we use your information
- To provide the coordination services you request, including matching you with hospitals, physicians, and companions.
- To process bookings and deposit payments via Stripe.
- To verify credentials and run background checks for companion applicants.
- To send transactional emails (confirmations, follow-ups, password resets) and, with your consent, newsletter updates.
- To improve the website, troubleshoot bugs, and analyze aggregated usage patterns.
- To comply with legal obligations and enforce our Terms.
3. Legal bases (EEA / UK users)
Where the General Data Protection Regulation applies, we rely on the following legal bases: (a) performance of a contract, when processing is necessary to deliver the service you requested; (b) your consent, for marketing communications and certain analytics cookies; (c) our legitimate interests, in operating, securing, and improving the service; and (d) compliance with legal obligations.
4. How we share your information
We share information only as needed to deliver the service:
- Partner hospitals and physicians — to schedule and prepare for your consultation or treatment.
- Medical companions — to coordinate logistics and translation for your visit.
- Service providers — payment processors (Stripe), email delivery (SMTP provider), hosting (Vercel), and customer chat (Crisp). These vendors process information on our behalf under contractual safeguards.
- Authorities — when required by law, court order, or to protect rights and safety.
We do not sell your personal information.
5. International transfers
We operate internationally. Your information may be transferred to and processed in jurisdictions outside your country of residence, including mainland China, Hong Kong, the United States, and the European Union. Where required, we put in place appropriate safeguards such as standard contractual clauses.
6. Data retention
We keep account, booking, and application records for as long as your account is active and for up to seven years afterwards to comply with tax, regulatory, and legal obligations. Newsletter records are retained until you unsubscribe. You can request earlier deletion subject to applicable law.
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information.
- Object to or restrict certain processing.
- Port your information to another service.
- Withdraw consent for marketing at any time.
To exercise these rights, email privacy@pandatouring.com. We will respond within 30 days.
8. Cookies
We use a small number of cookies to keep you logged in, remember language preferences, secure form submissions, and measure aggregate site usage. You can disable non-essential cookies in your browser; the site will still work but some features may be limited.
9. Security
We use industry-standard encryption in transit (TLS) and at rest for sensitive fields, role-based access controls, and routine security reviews. No system is perfectly secure — if we learn of a breach affecting you, we will notify you and the relevant authorities as required by law.
10. Children
The Services are not directed to children under 16. If a parent or guardian wishes to book care for a minor, they must do so through their own account and remain responsible for the minor’s information.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated by email or through a prominent notice on the site. The “Last updated” date above will reflect the most recent revision.
12. Contact
Questions or complaints? Reach our privacy team at privacy@pandatouring.com or write to Panda Touring Care, Hong Kong.