Last updated 13 October 2026
Privacy policy
This policy explains what personal information Surgery in Shanghai collects, why, who we share it with, and the rights you have. If anything is unclear, email us at [email protected].
Who we are
Surgery in Shanghai is a medical travel coordination service based in Shanghai, China, operated by Shanghai Shen Yi Xing Health Consulting Service (上海申医行健康咨询服务部), a sole proprietorship registered in Shanghai. We are the controller of the personal information described here. We are not a hospital and do not provide medical care.
What we collect
- When you enquire: your name, email address, and optionally your phone or WhatsApp number and anything you choose to tell us in your message.
- If you go ahead with an assessment: health information such as X-rays, scans, test results and medical history, which the surgeon needs to review your case.
- If you book treatment: passport details, travel dates, emergency contact, and payment records.
Health information is a special category of personal data. We only collect it with your explicit consent, and only what the surgeon needs.
Why we use it
- To answer your enquiry and give you a quote (your request, before a contract).
- To arrange your treatment, travel and aftercare (to perform our contract with you).
- To share your medical records with the hospital and surgeons (your explicit consent).
- To keep records we are legally required to keep, and to handle any complaint or claim (legal obligation and legitimate interests).
We do not use your information for advertising, we do not sell it, and we do not send marketing emails unless you ask us to.
Who we share it with
- Shanghai Sixth People's Hospital and the surgeons and staff treating you.
- Our complication insurance provider, if you choose the Complete package.
- Accommodation, transport and interpreting providers, only the details they need to look after you.
- Service providers that run this website and our email, including Netlify (website and form hosting) and our email provider. They process data on our instructions only.
Sending your information to China
Your treatment takes place in China, so your information will be transferred to and stored in China, and some service providers may store it in other countries such as the United States. China does not have the same data protection laws as the UK. Before we send any medical records to the hospital, we will ask for your explicit consent to the transfer, and we only share what is needed for your care.
How long we keep it
- Enquiries that do not lead to treatment: deleted after 12 months.
- Records for patients we have helped: kept for 6 years after your treatment, so we can deal with aftercare questions or claims, then deleted.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we will reply within one month.
If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.
Cookies
This website does not use advertising or tracking cookies. The page loads fonts from Google Fonts, which means your browser shares your IP address with Google when you visit.
Security
We send and store your information using encrypted services, limit access to the people who need it, and never ask you to send medical records through public social media.
Changes
If we change this policy, we will update the date at the top of this page.