MEDI ALL GLOBAL CONSUMER HEALTH DATA PRIVACY NOTICE

Last Updated: August 31, 2026

Effective Date: March 31, 2024

Website: Mediall.net

Contact Email: info@mediall.net

Office Address: C13 Tran Phu Apartment, Khuyen Luong Street, Linh Nam Ward, Ha Noi, Viet Nam

1. SCOPE AND REGIONAL APPLICABILITY

This Consumer Health Data Privacy Notice ("Health Privacy Notice") is incorporated into Medi All’s (“Medi All,” “we,” “us,” or “our”) general Privacy Policy.

This Health Privacy Notice applies specifically to personal data defined as “consumer health data,” “sensitive health information,” or “special category data” under applicable global privacy legal frameworks, including:

  • United States: Washington My Health My Data Act (MHMDA), Nevada Senate Bill 370, California CCPA/CPRA, and applicable US state privacy laws.

  • Canada: Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial health data regulations.

  • European Union & United Kingdom: General Data Protection Regulation (GDPR / UK GDPR Article 9 regarding Special Category Data).

  • South Korea: Personal Information Protection Act (PIPA Article 23 regarding Sensitive Information).

  • Japan: Act on the Protection of Personal Information (APPI regarding Special Care-Required Personal Information).

  • Taiwan: Personal Data Protection Act (PDPA Article 6 regarding Medical/Health Data).

2. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

The Consumer Health Data (“CHD”) we collect depends on your interactions with Mediall.net, the digital health services you access, and the permissions you grant. Categories of CHD collected include:

  • Health Conditions & Clinical Interactions: Information regarding health conditions, symptoms, diagnostic inquiries, treatment background, medications, or general health status submitted through open fields, consultations, or survey tools.

  • Service & Search Interactions: Search queries, medical specialty lookups, educational article views, and interaction metadata that reveal intent to seek healthcare information or services.

  • Precise Geolocation Data: Location indicators that could reasonably reveal an attempt to locate, acquire, or receive health services, medical supplies, or clinical facilities.

  • Inferred Health Data: Data derived or inferred from user activity, browsing patterns, or software interactions concerning potential health interests or medical topics.

3. SOURCES OF CONSUMER HEALTH DATA

We collect CHD from the following sources:

  • Directly from You: Information you type into forms, search queries, profile registrations, or support requests on Mediall.net.

  • Automated Collection & Inferences: Technical data generated through device usage, cookies, and system logs when accessing our Services.

  • Third-Party Technical Partners: Authorized infrastructure, security, and analytics service providers.

4. PURPOSES FOR COLLECTING AND USING HEALTH DATA

Medi All processes CHD strictly for legitimate, declared operational purposes, including:

  • Service Delivery: Providing, operating, and maintaining digital health information tools on Mediall.net.

  • Personalization & Improvement: Contextualizing platform features, troubleshooting functionality errors, and optimizing educational resources.

  • Communication & Security: Responding to user inquiries, protecting network infrastructure, detecting fraudulent activity, and ensuring system integrity.

  • Legal Compliance: Satisfying statutory audit, legal reporting, and regulatory requirements across operating jurisdictions.

We will not use or process CHD for secondary purposes or marketing without your explicit opt-in consent where required by law.

5. DISCLOSURE AND SHARING OF HEALTH DATA

Medi All does not sell raw Consumer Health Data. We may disclose CHD to third parties only as necessary for the following purposes:

  • Service Providers & Data Processors: Vendors, hosting infrastructure providers, and customer support partners working on our behalf under strict confidentiality and data protection agreements.

  • Corporate Transactions: Potential counterparties in connection with a merger, acquisition, corporate restructuring, or asset sale.

  • Legal & Safety Obligations: Regulatory authorities, law enforcement, or legal counterparties when required by valid legal process (e.g., court order or subpoena) or to protect personal safety and public health.

  • Rights Protection: Enforcement of our legal rights, Terms of Service, and platform integrity in judicial or administrative proceedings.

6. REGIONAL RIGHTS & EXERCISING DATA CONTROL

Subject to local statutory exceptions, consumers hold specific rights regarding their CHD:

  • United States (Washington, Nevada, California & State Laws): Right to confirm processing, access specific pieces of CHD, request deletion, and withdraw consent for CHD processing or sharing.

  • European Union & United Kingdom (GDPR): Right to explicit consent revocation for Special Category Data, right to erasure ("Right to be Forgotten"), data portability, and restriction of processing.

  • Canada (PIPEDA): Right to access, challenge data accuracy, and withdraw consent for secondary health data processing.

  • South Korea (PIPA): Right to separate explicit consent for sensitive health data, right to inspect, correct, erase, or request suspension of processing.

  • Japan (APPI): Right to request notification of use purposes, disclosure, correction, or cessation of use regarding Special Care-Required Personal Information.

  • Taiwan (PDPA): Right to inquire, request review/copies, supplement, correct, or demand deletion of medical and health-related personal data.

7. HOW TO EXERCISE YOUR RIGHTS AND APPEAL PROCESS

To exercise any of your statutory privacy rights regarding Consumer Health Data:

  • Submit a Request: Send an email to info@mediall.net with the subject line "Consumer Health Data Privacy Request".

  • Verification: We must verify your identity or authorized representative status before fulfilling requests.

  • Appeals Process: If we decline to take action on your request, you may submit an appeal by replying to our decision email or writing to info@mediall.net with "Privacy Request Appeal" in the subject line. If your appeal is denied, you may lodge a complaint with your local data protection authority or Attorney General.

8. UPDATES TO THIS NOTICE

Medi All reserves the right to modify this Health Privacy Notice at any time. Revised versions will be published on Mediall.net with an updated "Last Updated" date.