Privacy Policy

Xiamen Yishu Technology Co., Ltd. (“we”, “us”) operates the MediLink platform (the “Platform”). We recognize the highly sensitive nature of personal and medical information, and process your information in accordance with the Personal Information Protection Law of the People’s Republic of China (PIPL), the Data Security Law, the Cybersecurity Law, and applicable multi-jurisdictional requirements.

1. Scope

This Policy applies to information you submit or upload through the Platform’s official website, its three scenario portals (Medical Travel & Health Check, Academic Exchange & Clinical Training, Medical Industry Trade) and its language-specific sites, or that we collect on your behalf.

2. Information We Collect

• Identity and contact information: name, nationality, ID type and number, contact details, and organization.
• Medical and health information (sensitive personal information): diagnosis reports, imaging data, lab results, medication records, and medical history.
• Travel and service information: visa materials, flight and accommodation arrangements, reception and accompanying-care requirements.
• Trade-matching information: procurement categories, specifications, quantities, delivery destinations, and business qualification documents.
• Device and log information: access time, IP address, browser type, etc., used for security auditing and troubleshooting.

When you use the health record feature, we may also collect and retain the original medical documents you upload (including images and text-based or scanned PDFs), model-generated recognition results, your review decisions, confirmed health records, historical versions, and source metadata.

3. Domestic Storage of Sensitive Personal Information

In accordance with PIPL requirements on sensitive personal information and cross-border provision:

• Except for the two-environment storage and synchronization described below, all sensitive personal information of a medical, health or identity nature is stored exclusively in data centers within the territory of the People’s Republic of China and is not transferred abroad by default.
• For the health record feature, medical document metadata and originals, model recognition results, review decisions, and confirmed health records may be stored and synchronized between the Platform’s 87 and 124 environments. Upload receipts, internal ID-sequence records (biz_no_seq), and model configuration are not included in this synchronization.
• Where provision to an overseas recipient is genuinely necessary, we complete a personal information protection impact assessment as required by law, obtain your separate consent, and fulfill a statutory pathway such as security assessment, standard contract, or certification.
• Cross-border data flows travel through the Platform’s compliant channel, with full traceability and auditability.

4. Use of Information

We use your information only for the following purposes: matching you with domestic medical institutions and expert resources; organizing academic exchanges and clinical training; facilitating trade matchmaking; arranging reception and settlement; completing compliance and credential verification; and improving Platform services and the multilingual experience.

With your consent to the health record notice, we retain medical documents for long-term health management and use models to recognize and structure their contents. A health record is created only after you confirm it; you may edit or ignore candidate fields. This consent covers long-term retention, structuring, model recognition, and storage synchronization between the two environments.

5. Sharing of Information

We share information only to the minimum necessary extent with the following parties, under data protection agreements: receiving hospitals and training institutions, partner reception and translation service providers, and regulatory authorities where disclosure is required by law. We do not sell your personal information.

For health records, authorized platform administrators (platform/admin) and doctors (doctor) may match a patient by name to view confirmed health records and their source original documents. Results pending review, dismissed results, and failed recognition results remain visible only to the patient.

6. Your Rights

You have the right to access, copy, correct, supplement, and delete your personal information, to withdraw consent, and to request explanation. To exercise these rights, please contact us via the details at the bottom of this page; we will respond within 15 business days.

When you request deletion of original medical materials, we deactivate or hide them rather than physically deleting them. Confirmed health records, historical versions, and appeal attachments are retained. Only materials that have not been recognized, are not linked to an appeal or other business record, and have never produced a health record may be considered for permanent deletion in a separate later process.

7. Cookies and Similar Technologies

We use essential cookies to keep the site running (e.g., session and security checks) and optional cookies to remember your language and role preferences. You may choose “Accept all” or “Necessary only” at any time via the consent banner shown on first visit.

8. Data Security

We adopt transmission encryption, access minimization, permission tiering, operation logging, and regular audits, and follow the security and compliance requirements of the Xiamen Cross-Border Data Hub. In the event of a security incident, we will notify you and report to the competent authorities in a timely manner as required by law.

9. Minors

If the data subject is a minor, consent must be given and the relevant procedures completed by a guardian.

10. Policy Updates and Contact

Updates to this Policy will be published on this page with a version label. For questions, please contact: support@amedilink.com | +86 15711598925.