Privacy Policy

Vidaluma is a clinical rehabilitation and wellness tourism operator based in Sanya, Hainan, China. We are committed to protecting your personal information and process it in accordance with the Personal Information Protection Law of the People’s Republic of China (PIPL) and other applicable laws and regulations.

We collect the following categories of personal information, depending on how you use the Site:

• Account information: when you register, we collect your email address, a password (stored in encrypted form), your timezone, and your preferred language. When you log in, we also record the IP address and time of your last login.
• Inquiry information: when you submit an inquiry (including a custom requirements request for a stay package), we collect your contact details (as provided by you, such as email, phone number, or other contact information) and the content of your requirements.
• Service usage data: we may record information about how you use the Site, such as the pages you visit and the preferences you select (for example, your chosen display currency).

Because the Site does not currently offer real-time online payment, we do not collect payment card information or other financial details through the Site. Any payment terms are agreed separately in your Service Agreement and handled through offline channels.

Inquiries may contain information about your health, medical condition, or rehabilitation needs. Under the PIPL, health-related information constitutes sensitive personal information. We will only process such information where you have voluntarily provided it as part of an inquiry and have given your separate, explicit consent for us to use it to provide the requested Services. We do not use such information for any purpose other than responding to your inquiry and arranging the Services you request.

We use the personal information we collect for the following purposes:

• to respond to your inquiries and contact you about the Services you have requested;
• to provide, maintain, and improve the Site and our Services;
• to manage your account and verify your identity;
• to comply with applicable laws, regulations, and legal process; and
• to protect the security and integrity of the Site and to prevent fraud or abuse.

Under the PIPL, we process personal information on one or more of the following bases: your consent; the performance of a contract to which you are a party; compliance with legal obligations; or legitimate interests that do not override your rights and freedoms.

The Site uses the following cookies to provide core functionality, remember your preferences, and measure aggregate traffic. We do not use cookies for advertising purposes:

• auth_token — a session token that keeps you logged in; stored for 7 days with SameSite=Lax.
• selected_currency — remembers the currency you choose for displaying prices; stored for 365 days.
• property_booking_dates — remembers the check-in and check-out dates you last used in property search; stored for 7 days.
• i18n_redirected — set by our internationalization module to remember your language preference; managed automatically.
• _ga, _ga_* — Google Analytics cookies that distinguish visitors and sessions for aggregate traffic statistics; stored for up to 2 years.

You can control or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Site.

We use Google Tag Manager and Google Analytics to understand how visitors use the Site. These tools collect information such as the pages you visit, the time and duration of your visit, your approximate location derived from your IP address, your browser and device type, and how you arrived at the Site. We use this information only in aggregate to measure and improve the Site, and we do not use it to identify you personally. Google Analytics sets the cookies described in Section 6, and the data is processed by Google on servers that may be located outside China (see Section 9). You can limit this collection by blocking these cookies in your browser or by installing the Google Analytics Opt-out Browser Add-on. We do not use Google Analytics for advertising, remarketing, or interest-based advertising, and we do not use localStorage for tracking purposes.

We do not sell your personal information. We may share your personal information only in the following circumstances:

• With our partner hospitals, rehabilitation facilities, and accommodation providers, where necessary to arrange and deliver the Services you have requested;
• With service providers who process information on our behalf (such as hosting and IT providers), under appropriate confidentiality and data protection arrangements;
• With Google LLC, which provides the analytics services described in Section 7;
• Where required by law, regulation, or a competent authority, or to protect our rights, safety, or property.

Our Site and services operate from within the People’s Republic of China, and the personal information we collect is stored and processed in mainland China. If you are located outside China, your personal information will be transferred into China. We will take measures in accordance with Chapter III of the PIPL and applicable law to protect your personal information, including implementing appropriate safeguards for such transfers. Analytics data collected through Google Analytics is processed by Google LLC on servers that may be located outside China; we will also take the measures required by applicable law for such transfers.

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer needed, we will delete or anonymise it in a secure manner, unless retention is required by applicable law.

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption of passwords in transit and at rest, and the secure configuration of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Under the PIPL and other applicable law, you have the right to:

• access and obtain a copy of your personal information we hold about you;
• correct or update inaccurate or incomplete information;
• request deletion of your personal information under the conditions provided by law;
• withdraw your consent to processing, where processing is based on consent; and
• lodge a complaint with the competent cyberspace administration authorities if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details in Section 15. We will respond within the time period required by applicable law.

The Site is not directed to children. In accordance with the PIPL, we do not knowingly collect personal information from individuals under the age of 14. If you believe that a child under 14 has provided us with personal information, please contact us, and we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. If we make material changes, we will take appropriate steps to notify you, such as posting a notice on the Site. Your continued use of the Site after such changes constitutes your acceptance of the updated Policy.

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us at info@vidaluma.com, by phone at +86 166 8970 3813, or by mail at 1939, T2 Building, COFCO Sanya Joy Center, Jiyang District, Sanya, Hainan, China. Our ICP filing number is 琼ICP备2023002841号-3.