Privacy  Policy 2026
Eurora Vision Shanghai Co., Ltd.

Privacy Policy

Last Updated: June 2026

This Privacy Policy applies to the website mediport.io (the “Website”) operated by Eurora Vision. This policy fully complies with the European Union General Data Protection Regulation (GDPR) 2016/679 and applicable international data protection laws. It explains how we collect, use, process, store, protect, and disclose personal data of visitors and users who access our website, submit inquiries, or use our cross-border medical consultation services.

By accessing this website, submitting personal information, contacting our team, or using our services, you acknowledge that you have read, understood, and agreed to the data processing practices described in this Privacy Policy.

1. Data Controller Information

The data controller responsible for your personal data is:

Eurora Vision Registered entity located in Shanghai, China

Authorized Data Processing Only: Only officially authorized internal personnel of Eurora Vision are permitted to access and process user personal data. No unauthorized staff, third-party agents, or external parties may access your personal information.

2. Unique Company Data Compliance Rules (Distinctive Provisions)

The following clauses are the official, distinct compliance features of Eurora Vision and differentiate our data management from standard local Chinese company policies:

1. Although Eurora Vision is legally registered in Shanghai, China, all personal data collected through our official website, contact forms, email communication, social media channels, and all online interaction platforms will NOT be stored within the territory of China.

2. All user personal information is processed, hosted, and retained on GDPR-compliant overseas secure servers outside of China.

3. The Company fully complies with all GDPR obligations regarding data security, data minimization, purpose limitation, integrity, confidentiality, and user data rights.

3. Types of Personal Data We Collect

We may collect the following categories of personal data for legitimate business and service purposes:

  • Identification Data: Full name, nationality, age, contact information

  • Contact Data: Email address, phone number, social media account information

  • Service Inquiry Data: Questions, consultation content, service requirements, medical intention information submitted by users

  • Technical Website Data: IP address, browser type, device information, access time, page browsing records, cookie data

4. Purposes of Data Processing

We only process your personal data for the following legitimate purposes:

  • To respond to your online inquiries and provide professional pre-service consultation

  • To communicate, follow up, and deliver requested service information

  • To improve website functionality, user experience, and service quality

  • To conduct anonymous data analysis for website optimization and advertising audience refinement

  • To comply with legal and compliance obligations under GDPR and international regulations

We will not use your personal data for unsolicited marketing, spam promotion, or unauthorized commercial resale.

5. Legal Basis for GDPR Data Processing

We process your personal data based on the following legal bases under GDPR Article 6:

  • Your explicit consent — by voluntarily submitting your personal information on our website

  • Legitimate business interest — to provide accurate and efficient consultation and user support

  • Compliance with legal obligations — to maintain transparent, secure, and regulated data management

6. Data Storage & Security Protection

In strict accordance with GDPR security requirements:

  • All user personal data is stored on overseas encrypted secure servers and never stored in China

  • We adopt industry-standard encryption, access control, and data isolation technologies

  • Only authorized personnel have limited access to user data

  • We maintain data integrity, confidentiality, and availability in full compliance with GDPR security obligations

7. Data Sharing & Third-Party Disclosure

We do not sell, rent, or trade your personal data to any third parties for commercial purposes.

We may only disclose your data to trusted third-party service providers necessary for website operation, including:

  • Website hosting and cloud service providers

  • Analytics and advertising tools (Meta Pixel, web traffic statistics)

All third-party processors are required to comply with GDPR data protection standards and maintain strict data confidentiality.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to improve browsing experience, analyze website traffic, and support targeted advertising compliance.

You may manage, disable, or clear cookies through your browser settings. Disabling cookies will not affect basic website browsing functions.

9. Your GDPR User Rights

As a user located in the European Economic Area (EEA) or any GDPR-protected region, you have the following complete legal rights:

  • Right to Access: Request copies of your personal data we store

  • Right to Rectification: Correct inaccurate personal data

  • Right to Erasure (Right to be Forgotten): Request full deletion of your personal data

  • Right to Restrict Processing: Limit how we process your data

  • Right to Data Portability: Receive your data in a readable format

  • Right to Object: Object to data processing based on legitimate interests

  • Right to Withdraw Consent: Withdraw your previous consent at any time

10. Data Retention Period

We retain personal data only for as long as necessary to fulfill the service purposes or comply with legal requirements. When data is no longer needed, we will permanently and securely delete or anonymize your personal information.

11. Cross-Border Data Transfer

User personal data generated from this website will be processed and stored outside of China in GDPR-compliant jurisdictions. All cross-border data processing follows strict international data protection rules and ensures equivalent data security standards.

12. Policy Updates

We may update this Privacy Policy occasionally to comply with legal changes or business adjustments. The updated version will be published on this page with a revised update date. Continued use of the website after updates constitutes acceptance of the revised policy.

13. Contact

If you have any questions, requests, or concerns regarding your personal data and privacy rights, please contact us through the official channels available on mediport.io.