Data Controller and Contact

China Pathology Pharma Hub (chinapathology.org) is owned and operated by Jesse Galang and is established in the United States of America. For the purposes described in this notice, the data controller is: China Pathology Pharma Hub, 6910 Fayetteville Rd, Durham, NC 27713, USA. You may contact the controller at [email protected].

We have not appointed a Data Protection Officer or EU/UK representative. For all privacy inquiries, please use the contact information above.

Scope and Applicability

This notice explains how we handle personal data collected through our website and related communications. It is intended to address requirements under the EU/UK General Data Protection Regulation (GDPR) where applicable to individuals in the EEA/UK/Switzerland, and to align with relevant United States privacy laws (including state consumer privacy statutes) for United States residents.

Our website provides general, informational resources about diseases, medications, and drug alternatives. It is not a healthcare service and is not intended to collect protected health information.

Categories of Personal Data We Process

  • Identifiers and contact information: name, email address, and any other information you provide in inquiries.
  • Device and technical data: IP address (which may indicate approximate location), browser type, operating system, device identifiers, language settings, referring/exit pages, timestamps, and similar telemetry.
  • Usage data and preferences: pages viewed, click paths, interaction with comparison tools, saved or indicated preferences, and engagement metrics.
  • Communications content: the content of emails or messages you send to us and our replies.
  • Consent and request records: records of consents, opt-outs, and privacy requests, including timestamps and verification notes.
  • Cookies and similar technologies: first-party cookies and, where used, analytics or affiliate attribution tags that may track visits and conversions.
  • Sensitive or health-related information: we do not seek this information. If you voluntarily disclose health-related details in free-text fields, we will process them only as necessary to respond and will avoid retaining such content longer than necessary.

Sources of Personal Data

  • Directly from you when you contact us or provide information voluntarily.
  • Automatically through your use of the site via cookies, logs, and similar technologies.
  • From service providers acting on our behalf (e.g., hosting, analytics, email services) that generate or maintain data necessary to operate the site.

Purposes of Processing

  • Operating and improving the website, including presenting content, managing load, and ensuring availability.
  • Responding to inquiries, providing support, and maintaining records of communications.
  • Measuring performance and analytics to understand site usage and enhance user experience.
  • Ensuring security, detecting, preventing, and investigating fraud, abuse, or technical issues.
  • Complying with legal obligations and asserting or defending legal claims.
  • Attribution for referrals or affiliate relationships, and limited, non-intrusive marketing (e.g., updates) with your consent where required.
  • Managing cookie preferences and honoring applicable opt-outs.

Legal Bases for Processing (EEA/UK/Switzerland)

  • Consent: for non-essential cookies, analytics, and communications where consent is required.
  • Legitimate interests: to secure and operate the site, understand usage, prevent fraud, and improve services, provided such interests are not overridden by your rights and freedoms.
  • Contractual necessity: to provide information or communications you request.
  • Legal obligation: to comply with applicable laws and lawful requests.

Cookies and Tracking Technologies

We may use the following categories of cookies and similar technologies:

  • Strictly necessary cookies: required for core site functions and security.
  • Preference cookies: to remember choices (e.g., display settings).
  • Analytics/performance cookies: to measure site traffic and usage patterns.
  • Affiliate/attribution cookies: to recognize referrals or conversions related to our informational content.

Where required by law, non-essential cookies are used only with your consent. You can manage cookies through your browser settings and, if presented, via our on-site cookie controls. You may also contact us at [email protected] for assistance with cookie preferences.

Do Not Track signals are not consistently recognized across the industry. Where technically feasible, we endeavor to honor recognized universal opt-out signals (such as Global Privacy Control) as an opt-out of sale/share for U.S. state law purposes.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described, including to meet legal, accounting, or reporting requirements. Typical retention periods are:

  • Server logs and basic analytics: up to 12 months.
  • Consent and privacy request records: up to 5 years from the last interaction or as required by law.
  • Correspondence: up to 3 years after closure of the inquiry, unless a longer period is needed for legal reasons.

We may retain data longer if necessary to establish, exercise, or defend legal claims or to comply with legal obligations.

Disclosures to Third Parties

We disclose personal data to trusted service providers under contract who process data on our behalf for the purposes described above, including:

  • Website hosting and content delivery networks.
  • Security, anti-fraud, and performance monitoring providers.
  • Analytics and measurement services.
  • Email and communications service providers.
  • Professional advisors (legal, accounting) and competent authorities where required by law.

We do not sell personal information for money. Certain uses of analytics or affiliate tags may be considered a “sale” or “sharing” under some U.S. state privacy laws; you may opt out as described in the United States rights section and by managing cookies.

International Data Transfers

We are based in the United States. If you access our site from the EEA/UK/Switzerland, your personal data may be transferred to and processed in countries (including the United States) that may not provide the same level of data protection as your jurisdiction. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses and supplementary measures, or your explicit consent, or transfers necessary for the performance of a contract or implementation of pre-contractual measures at your request.

Security

We implement technical and organizational measures designed to protect personal data, including encrypted transport (HTTPS), access controls, and data minimization. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your Rights under GDPR (EEA/UK/Switzerland)

Subject to conditions and exceptions under applicable law, you may have the following rights:

  • Access: obtain confirmation and a copy of your personal data.
  • Rectification: correct inaccurate or incomplete personal data.
  • Erasure: request deletion of personal data.
  • Restriction: request limited processing.
  • Portability: receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Objection: object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: withdraw consent at any time where processing relies on consent.
  • Complaint: lodge a complaint with a supervisory authority.

To exercise your rights, contact us at [email protected] or by mail to the address listed above.

Your Rights under United States Law

Depending on your state of residence (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have some or all of the following rights, subject to legal exceptions:

  • Right to know/access: request the categories and specific pieces of personal information we have collected, the purposes, and categories of recipients.
  • Right to delete: request deletion of personal information we collected from you.
  • Right to correct: request correction of inaccurate personal information.
  • Right to portability: receive certain information in a portable format.
  • Right to opt out of sale or sharing: opt out of the sale or sharing of personal information for cross-context behavioral advertising.
  • Right to limit use/disclosure of sensitive personal information: we do not seek to collect or use sensitive personal information for additional purposes.
  • Non-discrimination: we will not discriminate against you for exercising your rights.
  • Right to appeal: where applicable, appeal our decision regarding your privacy request.

How to exercise these rights: Email us at [email protected] or write to China Pathology Pharma Hub, 6910 Fayetteville Rd, Durham, NC 27713, USA. Please describe your request, your state of residence, and provide sufficient information to verify your identity. Authorized agents may submit requests with proof of authorization and, where required, your verified permission. We will respond within the timeframes required by law.

Children’s Privacy

Our services are intended for individuals aged 13 and older and are not directed to children. We do not knowingly collect personal data from children under 13 (or under 16 where GDPR requires consent from a holder of parental responsibility). If you believe a child has provided personal data, please contact us to request deletion.

No Medical or Legal Advice

Content on our website is for informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a licensed healthcare professional regarding medical decisions.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects concerning individuals.

Changes to This Notice

We may update this notice to reflect changes in our practices or legal requirements. Material changes will be indicated by updating the effective date. Your continued use of the site after changes take effect signifies your acknowledgment of the updated notice.

How to Contact Us

Controller: China Pathology Pharma Hub
Owner: Jesse Galang
Address: 6910 Fayetteville Rd, Durham, NC 27713, USA
Email: [email protected]

Effective date: October 1, 2025