Privacy Policy

This policy explains what personal data Danang Doctor (“we”) collects through this website, why we collect it, who can see it, and how long we keep it. It covers the EU/UK GDPR and Vietnam’s Decree 13/2023/ND-CP on personal data protection.

1. What we collect

When you submit the “Book a Home Visit” form we collect:

• Your name
• Your contact number and preferred messaging channel
• Your email address, if you choose to provide one
• Whether the visit is for an adult or a child
• The location where the doctor should attend
• The free-text description of your medical concern. This is health data — a special/sensitive category under both GDPR and Decree 13/2023/ND-CP, which is why we ask for your explicit consent before you submit.

We do not use analytics cookies, advertising trackers, or third-party profiling scripts on this website.

2. Why we use it, and the legal basis

• To arrange and deliver your medical consultation. Legal basis: your explicit consent (GDPR Art. 9(2)(a)) and, once care begins, the provision of health care (GDPR Art. 9(2)(h)).
• To contact you back with a quote, confirmation, or follow-up.
• To meet medical record-keeping obligations under Vietnamese law.

We never sell your data and we never use it for advertising.

3. Who processes it

• Cloudflare — hosts this website and the form endpoint, and provides bot protection (Turnstile). Cloudflare processes your request in transit.
• Resend — our transactional email provider. It delivers your booking request to our clinical inbox and retains a delivery log.
• Google (Gmail) — our booking inbox is a Gmail mailbox, so your submission is stored on Google’s servers.

These providers operate servers outside Vietnam and outside the EEA. Transfers rely on the providers’ Standard Contractual Clauses and their own data processing agreements. Access to the booking inbox is restricted to the clinical staff who need it; the mailbox is never shared by public link.

4. How long we keep it

• Booking emails are archived once the case is closed and deleted after 24 months.
• Email delivery logs follow our provider’s retention period.
• Where Vietnamese medical record-keeping rules require a longer period for clinical records, that longer period applies to the clinical record only.

5. Your rights

You can ask us at any time to:

• Give you a copy of the data we hold about you
• Correct anything that is wrong
• Delete your data, where no legal retention duty applies
• Restrict or object to our processing
• Withdraw your consent. Withdrawal is free, takes effect for the future, and does not affect processing that already happened.

Email [email protected] and we will respond within 30 days. If you are in the EU or UK you may also complain to your national data protection authority.

6. Security

The site is served over HTTPS only. The form endpoint is protected by Cloudflare Turnstile, a hidden honeypot field, and rate limiting. Your booking details are transmitted over encrypted connections.

7. Children

We treat a request made for a child as being made by their parent or legal guardian, who gives consent on the child’s behalf.

8. Changes

If we change this policy we will update the date at the top of the page. Material changes will be highlighted on the booking form.