Privacy Policy
Last updated: January 2024
1. Introduction
Navelia Health ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical case management platform.
We understand that medical information is highly sensitive. We treat all personal and medical data with the utmost care and implement industry-leading security measures to protect your privacy.
2. Information We Collect
Personal Information
- Name, date of birth, gender, nationality
- Contact information (email address, phone number)
- Country of residence
- Preferred language
- Account credentials
Medical Information
- Medical records and clinical summaries
- Diagnostic imaging (X-rays, CT scans, MRI scans)
- Laboratory test results
- Pathology reports
- Medication history and allergies
- Treatment history
- Family medical history
Automatically Collected Information
- Device information and IP address
- Browser type and version
- Usage patterns and interaction data
- Access timestamps
3. How We Use Your Information
We use the information we collect to:
- Process and manage your medical cases
- Coordinate with healthcare providers on your behalf
- Facilitate communication between you and your care team
- Improve our AI-assisted case management tools
- Ensure compliance with applicable laws and regulations
- Respond to your inquiries and provide customer support
- Send important notifications about your case status
4. Information Sharing and Disclosure
We do not sell your personal or medical information. We may share your information only in the following circumstances:
- With Healthcare Providers: With your explicit consent, we share your case materials with selected doctors, hospitals, and care partners for pre-review and treatment coordination.
- Service Providers: We work with trusted third-party service providers who assist us in operating our platform (e.g., cloud hosting, translation services). These providers are bound by confidentiality obligations.
- Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
- Business Transfers: In connection with any merger, sale, or transfer of assets, we will ensure the confidentiality of your information.
5. Data Security
We implement comprehensive security measures to protect your information:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication requirements
- Regular security audits and vulnerability assessments
- Employee training on data protection practices
- Audit logs tracking all access to medical records
- Secure data centers with physical security measures
6. Your Rights
You have the right to:
- Access your personal and medical information
- Request correction of inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Withdraw consent for data processing
- Request a copy of your data in a portable format
- Object to certain uses of your information
To exercise these rights, please contact us at privacy@naveliahealth.com.
7. International Data Transfers
As an international platform, your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adherence to international data protection standards.
8. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Medical records are typically retained for a minimum of 7 years after your last interaction with us, in accordance with healthcare regulations. You may request deletion at any time, subject to these retention requirements.
9. Children's Privacy
Our platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: privacy@naveliahealth.com
Address: Shanghai, China