Privacy Policy

NomaCare (“we”, “us”) operates the website at nomacarehealth.com and helps patients in the United States coordinate medical care at partner hospitals in China. This policy explains what personal information we collect, why we collect it, and the choices you have.

Questions about this policy: contact@nomacarehealth.com

• Contact information — name, email address, and phone number when you book a consultation, reserve a package, contact us, or create an account.
• Service preferences — the treatment categories you are interested in (for example dental care, full-body checkup, or cosmetic procedures) and your preferred timeline or city, when you provide them.
• Service selections — the packages you add to your list and submit through our inquiry form, along with your preferred timeline and notes. If you make a payment with us in the future, it is processed by a third-party payment provider such as Stripe; we do not store your full card number on our servers.
• Account information — the email address and password you use to sign in. Passwords are stored as hashes by our authentication provider (Supabase).
• Usage data — pages visited, device and browser type, and general location data collected by our hosting and analytics providers (Vercel Analytics and Speed Insights).
• Cookies and similar technologies — used for session management and analytics. We do not use cookies for advertising.

• To schedule and provide consultations and coordinate care with partner hospitals.
• To review your package selections and follow up on your inquiries.
• To send you information you requested, such as confirmation messages and responses to your inquiries.
• To operate, secure, and improve the website.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it for advertising or profiling purposes.

• Stripe — payment processing (their privacy policy applies to payment data they handle).
• Supabase — authentication and database hosting.
• Vercel — hosting and analytics.
• Calendly and WhatsApp — when you choose to schedule a call or chat with us, the information you provide on those platforms is subject to their policies.
• Partner hospitals — with your consent, the contact and treatment-preference information needed to arrange your care.
• Authorities or parties — when required by law or to protect our legal rights.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you the right to:

• Know what personal information we collect, use, and share.
• Delete personal information we hold about you (subject to exceptions).
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information. We do not sell your information. If our practices change, we will update this policy and provide an opt-out link.
• Not be discriminated against for exercising these rights.

You can exercise these rights by emailing contact@nomacarehealth.com. We will verify your request and respond within the timeframe required by law. We support the Global Privacy Control (GPC) signal where available.

Residents of other US states with privacy laws (for example Virginia, Colorado, Connecticut, Utah, or Texas) may have similar rights; we honor requests from all users.

Some browsers send a “Do Not Track” (DNT) signal. We currently use privacy-respecting analytics (Vercel) to understand aggregate site usage. We do not track you across other websites or build advertising profiles. If you block cookies or send a DNT signal, the website remains fully usable.

If you subscribe to our updates, every marketing email we send includes a clear way to unsubscribe, and we honor unsubscribe requests promptly. Transactional messages about your booking or account are not marketing and will still be sent.

We use encryption in transit (TLS), access controls, and industry-standard practices to protect the information we hold. Information about your treatment preferences is sensitive; we treat it as confidential and only share it with partner hospitals as needed to arrange your care.

Important: NomaCare is a care-coordination service, not a healthcare provider. We are not a “covered entity” under HIPAA, and we do not claim to be. Our partner hospitals in China operate under their own confidentiality and data-protection obligations; you should review their policies before treatment.

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, or to resolve disputes. When you ask us to delete your data, we will remove it from our systems within the timeframe required by law, except where we must retain it by law.

The website and services are intended for adults aged 18 and older. We do not knowingly collect information from children under 13, and our Terms of Service prohibit use by anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

Your information is stored on servers in the United States (Vercel and Supabase). When you arrange care in China, the information needed to coordinate that care may be shared with partner hospitals in China. By using the service you understand and agree to these transfers.

We may update this policy from time to time. We will post the updated version on this page with a new effective date. Material changes will be highlighted on the site.

Privacy questions or requests: contact@nomacarehealth.com