Privacy Policy

Last Updated: August 2026

Privacy Policy

Our privacy policy explains how Qinghua Sunshine Dentistry collects, uses, stores, and protects your personal and health information. GDPR and CCPA compliant.

Last Updated: August 2026 Effective Date: August 2026

Qinghua Sunshine Dentistry (“we,” “us,” “our,” or “the Clinic”) is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our website, use our services, or communicate with us.

This policy applies to all users of our website and patients who receive dental treatment at our clinic in Wuhan, China, including international patients from the United States, Canada, Europe, Australia, and other countries.

We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and China’s Personal Information Protection Law (PIPL).

1. Information We Collect

1.1 Information You Provide to Us

We collect information you voluntarily provide when you:

Request a consultation or quote: Your name, email address, phone number, country of residence, and details about your dental needs.

Submit dental records: X-rays, CT scans, photographs, dental history, and other medical information you upload or send to us.

Book treatment: Your full name, date of birth, passport number, travel details, emergency contact, and medical history.

Create an account: Your email address, password, and profile information.

Make a payment: Billing address, payment method details (processed securely through our payment providers; we do not store full credit card numbers).

Complete patient forms: Medical history, dental history, allergies, medications, and treatment consent forms.

1.2 Information We Collect Automatically

When you visit our website, we automatically collect:

Log data: IP address, browser type, operating system, referring/exit pages, date/time of visit, and pages viewed.

Device information: Device type, unique device identifiers, mobile network information, and language settings.

Usage data: How you interact with our website, links clicked, forms filled, time spent on pages, and navigation patterns.

Location information: Approximate geographic location based on IP address (we do not collect precise GPS location unless you provide it).

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve your experience. Types of cookies we use:

Essential cookies: Required for the website to function (e.g., form submission, security).

Analytics cookies: Help us understand how visitors use our website (Google Analytics).

Functional cookies: Remember your preferences (e.g., language, region).

Marketing cookies: Used to deliver relevant advertisements and track campaign performance.

You can control cookies through your browser settings. Disabling cookies may affect website functionality. For more details, see our Cookie Policy below.

2. How We Use Your Information

We use your information for the following purposes:

2.1 Providing Dental Services

Assessing your dental condition and creating treatment plans

Scheduling appointments and coordinating your treatment

Providing dental care and follow-up support

Maintaining your dental records for continuity of care

Coordinating with your local dentist if you authorize it

2.2 Communication and Customer Support

Responding to your inquiries, consultation requests, and questions

Sending you treatment plans, quotes, and appointment confirmations

Providing pre-treatment and post-treatment instructions

Sending travel logistics, itinerary details, and arrival information

Following up after your treatment to check on your recovery

2.3 Website Improvement and Analytics

Analyzing website traffic and usage patterns

Improving our website content, design, and functionality

Troubleshooting technical issues

Ensuring website security and preventing fraud

2.4 Marketing and Promotions (with your consent)

Sending newsletters, special offers, and promotional emails (you can unsubscribe at any time)

Personalizing your experience on our website

Conducting surveys and feedback requests

Retargeting advertisements on social media and other platforms

2.5 Legal and Administrative

Complying with legal obligations and regulatory requirements

Protecting our rights, property, and safety, and that of our patients and staff

Processing payments and preventing fraudulent transactions

Maintaining accurate business and medical records as required by Chinese law

Defending against legal claims or disputes

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal bases:

Consent: When you request a consultation, submit information, or opt in to marketing communications. You may withdraw your consent at any time.

Contract performance: When processing is necessary to provide the dental services you have booked or to take steps at your request before booking.

Legal obligation: When processing is required to comply with applicable laws, regulations, or legal processes.

Legitimate interests: For website analytics, fraud prevention, and improving our services, where these interests do not override your privacy rights.

Vital interests: In rare cases where processing is necessary to protect your life or health.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 With Your Consent

We may share your information with third parties when you explicitly consent, such as:

Sharing your dental records with your local dentist for follow-up care

Sharing before/after photos for marketing purposes (only with written consent and anonymized where requested)

4.2 Service Providers

We may share information with trusted third-party service providers who perform services on our behalf:

Payment processors: Stripe, PayPal, and bank transfer providers (for processing payments)

Email service providers: For sending transactional and marketing emails

Analytics providers: Google Analytics (for website traffic analysis)

Cloud storage providers: For securely storing patient records and website data

IT and security providers: For website hosting, maintenance, and security

Translation services: For translating your records or communications if needed

These providers are contractually required to protect your information and may only use it for the purposes we specify.

4.3 Medical Professionals

In limited circumstances, we may share your dental or medical information with:

Other dental specialists or medical professionals involved in your care (with your knowledge)

Your local dentist, if you request coordination of care

Medical facilities in case of a medical emergency during your treatment

4.4 Legal Requirements

We may disclose your information if required by law, including:

Complying with court orders, subpoenas, or legal processes

Responding to requests from government authorities or regulators

Enforcing our Terms of Service or other agreements

Protecting the rights, property, or safety of our clinic, patients, staff, or the public

In connection with a merger, acquisition, or sale of assets (we will notify you before your information is transferred)

5. International Data Transfers

As an international dental tourism clinic, your information may be transferred to, stored in, and processed in countries other than your country of residence, including China, the United States, and other countries where our service providers operate.

These countries may have different data protection laws than your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws, including:

Using Standard Contractual Clauses (SCCs) for transfers from the EEA to countries without adequacy decisions

Requiring all service providers to implement appropriate security measures

Limiting data transfers to what is necessary for the stated purpose

Regularly reviewing and auditing our data transfer practices

By using our services and providing your information, you consent to the transfer of your information to countries outside your country of residence, including China, for the purposes described in this policy.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

Patient dental records: Retained for a minimum of 15 years from the date of your last treatment, as required by Chinese medical record regulations, or longer if required by law.

Consultation and inquiry records: Retained for 3 years from your last interaction, unless you request deletion earlier.

Website analytics data: Retained for up to 26 months (Google Analytics default), after which it is anonymized.

Marketing communications: Retained until you unsubscribe or withdraw consent, after which we retain only a suppression list to ensure we do not contact you again.

Payment records: Retained for 7 years as required by tax and accounting regulations.

Legal disputes: Information may be retained for the duration of any legal proceedings plus the applicable statute of limitations.

When we no longer need your information, we securely delete or anonymize it in accordance with our data retention schedule and applicable laws.

7. Your Privacy Rights

Depending on your country of residence, you may have the following rights regarding your personal information:

7.1 Rights for EEA Residents (GDPR)

Right of access: You may request a copy of the personal information we hold about you.

Right to rectification: You may request correction of inaccurate or incomplete information.

Right to erasure (“right to be forgotten”): You may request deletion of your personal information in certain circumstances.

Right to restrict processing: You may request that we limit the processing of your information.

Right to data portability: You may request transfer of your information to another organization in a structured, machine-readable format.

Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.

Right to withdraw consent: You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

Right to lodge a complaint: You may lodge a complaint with your local data protection authority.

7.2 Rights for California Residents (CCPA)

Right to know: You may request disclosure of the categories and specific pieces of personal information we collect, use, and disclose about you.

Right to delete: You may request deletion of your personal information, subject to certain exceptions.

Right to opt out of sale: We do not sell your personal information. If we do so in the future, you will have the right to opt out.

Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

Right to correct: You may request correction of inaccurate personal information.

7.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: contact@qinghuasunshinedental.com

Phone/WhatsApp: +86 [phone number]

Postal address: [Clinic address], Wuhan, Hubei, China

We may need to verify your identity before processing your request to ensure we are disclosing information to the correct person. We will respond to your request within 30 days (or as required by applicable law).

We do not charge a fee for exercising your rights unless your request is excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or refuse to act on the request.

8. Children’s Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information.

For pediatric dental patients under 16, we collect and process information with the consent of a parent or legal guardian, in accordance with applicable laws.

9. Data Security

We implement appropriate technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction, including:

Encryption: SSL/TLS encryption for data in transit; encryption for sensitive data at rest.

Access controls: Role-based access to patient information; only authorized staff who need the information to provide care can access it.

Secure storage: Patient records stored on secure, password-protected servers with regular backups.

Network security: Firewalls, intrusion detection systems, and regular security audits.

Staff training: Regular privacy and security training for all staff members.

Physical security: Access-controlled clinic premises; secure storage of physical records.

Payment security: We use PCI-DSS compliant payment processors; we do not store full credit card numbers on our servers.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites, including social media platforms, payment providers, travel booking sites, and other external resources. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices, content, or policies of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Cookie Policy

We use cookies and similar technologies as described in Section 1.3. Here is more detail:

Cookies We Use

Managing Cookies

You can control and manage cookies through your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data

Firefox: Settings → Privacy & Security → Cookies and Site Data

Safari: Settings → Privacy → Cookies and website data

Edge: Settings → Privacy, search, and services → Cookies

You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Please note that disabling certain cookies may affect the functionality and user experience of our website.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make changes, we will:

Revise the “Last Updated” date at the top of this policy

Post the updated policy on our website

Notify you of material changes via email or a prominent notice on our website, where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Qinghua Sunshine Dentistry Address: [Full clinic address], Wuhan, Hubei Province, China Email: contact@qinghuasunshinedental.com Phone/WhatsApp: +86 [phone number] Website: www.qinghuasundental.com

Data Protection Officer (DPO): If you have unresolved privacy concerns, you may contact our Data Protection Officer at contact@qinghuasunshinedental.com.

For EEA residents: You may also lodge a complaint with your local data protection authority if you believe our processing of your personal information violates applicable law.