Consumer Health Data Privacy Policy

Navelia Health Technology Limited organizes medical records and coordinates care in China at the patient's request. Our contact location is Alibaba Xuhui, Shanghai, China. Contact Johannis at johannis@naveliahealth.com for privacy requests; William at william@naveliahealth.com is the backup contact.

• Information you or an authorized representative provide: symptoms, diagnoses, medical history, medicines, allergies, disability or accommodation needs, care goals, and records such as reports, imaging and laboratory results. A record may contain information about mental, reproductive, sexual or genetic health; provide only what is needed for the service.
• Identity and contact details linked to a case; your consent choices and case communications; and summaries, translations, extracted information and questions derived from your records. Doctors or hospitals may supply additional records only through an authorized service arrangement.
• Security and access records protect your account and record access. We do not collect precise location to identify visits to healthcare facilities, or obtain health profiles from advertising or data brokers.

• We use the information you authorize to organize your case, clarify missing or conflicting information, prepare material for human review, and coordinate the services you request. Automated assistance can extract, translate and organize information; final clinical content requires human review.
• The service uses private Alibaba Cloud storage in Singapore. Authorized staff, including staff in China, access information only for their assigned work. Contracted hosting, security and approved document-processing providers receive only the information needed for their task. If you choose AI-assisted CaseCapture, DeepSeek through Alibaba Cloud processes the consented intake context in China to organize your information and choose follow-up questions. Required identifiers are removed where possible before sending; this filtering is not a guarantee of anonymity. Clinical interpretation and reports require human review. Provider processing must match the purpose and location disclosed for your service.
• Optional de-identified model-improvement permission is separate and may be refused or withdrawn without affecting ordinary coordination. It does not authorize a provider to use identifiable records for its own training or advertising.

• For a doctor, hospital or other care recipient, a separate authorization identifies the recipient, location, purpose and specific records or summaries to be shared. Collection consent alone does not authorize this disclosure. The recipients vary with your case and are named before the transfer.
• We do not sell consumer health data, share it with advertisers or data brokers, or share it with affiliates for their own purposes. Disclosures required by law are limited to the information legally required. A new data category or purpose requires an updated notice and any required affirmative consent before use.

• Email Johannis to request confirmation of processing, access, correction, withdrawal, deletion, or information about recipients. Send the request and account or case reference, without attaching medical records or identity documents. We verify your identity through your account or another appropriate secure method; an authorized representative must also establish authority.
• Withdrawal stops the affected future consent-based processing and may prevent us from continuing that part of the service. We handle verified requests within applicable legal deadlines, explain any lawful exception or extension, and notify relevant processors or recipients when required. Necessary legal preservation is assessed for the specific information; ordinary retention periods do not postpone a valid deletion request.
• If you disagree with a decision, reply with 'Privacy appeal' and your request reference, or contact William for escalation. We explain the appeal outcome and any further complaint route available under the law, including the relevant state Attorney General. You may exercise privacy rights without retaliation.

Unsubmitted cases are reviewed for deletion 90 days after the last substantive activity; completed coordination cases are reviewed 12 calendar months after closure. Active services and documented legal holds are assessed separately. Necessary consent and audit evidence follows its applicable preservation requirements. Routine encrypted database backups enter expiry processing after 30 days; storage-provider processing may take additional time. A deletion response identifies any necessary remaining information and backup treatment. Restored data must be checked against completed deletion requests before being returned to use.