Privacy Policy

Identity and contact data: name, gender, date of birth, mobile number, email address and correspondence address. Where identity verification is required, we may also collect your Hong Kong Identity Card number.

Health-related data: presenting complaint, symptoms, medical history, allergies, findings from the four examinations (inspection, listening and smelling, enquiry and palpation), pattern diagnosis, prescriptions, treatment progress, and any health journal entries you choose to record.

Account and technical data: a keyed index of your login email, a password hash, sign-in times, and a hashed form of your source IP address used to detect unusual sign-in activity.

We do not collect data beyond what these purposes require. If you choose not to provide data that is necessary, we may be unable to arrange your consultation.

To schedule, confirm and remind you of appointments;

To provide Chinese medicine care and to create and maintain your medical record;

To dispense and prepare herbal prescriptions and follow up on treatment;

Where you have expressly consented, to send health information and promotional messages;

To comply with the laws of Hong Kong, court orders, or requirements of a regulator including the Chinese Medicine Council of Hong Kong.

Your personal data will be used only for the purposes stated at collection or for directly related purposes.

The Clinic does not sell, rent or trade your personal data to any third party.

We may disclose your data where: you have expressly consented; it is necessary to share it with your treating practitioner or clinic staff in order to deliver care; it is required by law or by a regulator; or disclosure is necessary to protect the life or safety of any person.

Under Part VI of the Ordinance, the Clinic must obtain your express consent before using your personal data in direct marketing. You may withdraw that consent at any time, free of charge.

To withdraw: use the Privacy page of the patient portal, or email our Privacy Officer. We will stop such messages within seven working days of receiving your notice.

Declining marketing messages does not affect your right to receive care.

All traffic to and from this site is encrypted in transit using HTTPS/TLS.

All directly identifying data and clinical records are encrypted at rest in the database using AES-256-GCM. Fields that must remain searchable (such as email and phone number) additionally carry a keyed blind index, so equality lookups work while the underlying value cannot be recovered from a database dump alone.

Passwords are stored as salted scrypt hashes. The Clinic cannot recover your password.

Access is role-based: patients can read only their own records; practitioners can access the clinical data required to treat their patients; administrators can manage accounts and review the audit trail but are not authorised to browse clinical content.

Every read and write touching patient personal data is written to an audit log recording the actor, the time, the data subject and the type of action.

Medical records are kept for at least seven years from the last consultation, in line with Hong Kong medical record-keeping practice. Records of patients who were minors are kept until seven years after they turn eighteen.

Appointment and account data are kept for up to two years after an account is closed, so that queries and disputes can be dealt with.

Data past its retention period is securely and permanently destroyed or irreversibly anonymised.

The Clinic's primary data storage is located in Hong Kong.

If a third-party service (for example an SMS or email gateway) would require data to be transferred outside Hong Kong, we will tell you clearly in advance and obtain your consent.

Under sections 18 and 22 of the Ordinance you have the right to request access to the personal data we hold about you, and to request correction of data that is inaccurate.

You can export a copy of your data directly from the Privacy page of the patient portal, or make a written request to our Privacy Officer.

We will respond to a data access request within forty days. As permitted by the Ordinance, we may charge a reasonable fee for supplying a copy.

If you are dissatisfied with how the Clinic handles your personal data, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.

This site sets exactly two strictly necessary cookies: NEXT_LOCALE, which remembers your language, and bauhinia_session, which keeps you signed in and is httpOnly so it cannot be read by JavaScript.

No tracking, analytics or advertising cookies are used, and no third-party tracking code is embedded in this site.

The Contact page offers a Google map. It does not load automatically: your browser contacts Google only after you press “Show the Google map”, at which point your IP address and browser details are sent to Google and handled under Google’s privacy policy. If you do not press it, this site makes no request to Google for the map at all. You can also use the links on that page to open the clinic’s location directly in a maps app instead.

For any question about this policy, or to exercise the rights above, please contact the Clinic's Privacy Officer.

If this policy is revised, the change will be published on this page and the effective date updated.