Privacy notice
Who is responsible
PandaCareVIP is operated by 上海智牛投资管理有限公司 (English translation: Shanghai Zhiniu Investment Management Co., Ltd.), Shanghai, China. Use the contact form with “Privacy request” in your message to ask about access, correction, deletion, consent withdrawal or complaints.
What we collect and why
We collect your name, email, password hash and optional country for your account; preferred dates, country and programme choice for booking coordination; general enquiry text for responding to you; and payment references and transaction status for reconciliation. We do not collect full card numbers. Passwords are stored as salted, iterated hashes.
Health information is handled separately
Do not put medical records, passport numbers or detailed health information in public forms. If clinical review requires sensitive health information, the receiving institution, purpose, transfer channel, access, retention and any international transfer must be disclosed separately and appropriate specific consent obtained before collection.
Services and international processing
This review build uses Cloudflare Workers/D1 hosting through Sites. If configured, Resend processes transactional email; Stripe or Airwallex processes overseas payments; Alipay or WeChat Pay processes the selected domestic payment. Processing may occur outside your home country. Production service contracts, data locations and any required transfer arrangements must be confirmed before public launch. No optional marketing or analytics is enabled.
Retention and your choices
Session cookies last up to 7 days. Verification links expire after 24 hours and password-reset links after 30 minutes. Unused account, enquiry and order records are retained only as needed for the service and legal obligations; a production retention schedule must be confirmed before public launch. Requests to delete data are reviewed against payment, dispute and statutory record requirements. You may decline to submit an enquiry or close your account.