Privacy notice
This page covers the one place ExecDia collects personal information: the request form for our two paid services, Book it for me and Family concierge. Browsing the rest of the site doesn't send us anything about you — see "What we don't do" below. Cloudflare, which serves the site, is the only third party that sees anything about your visit; see "Third parties" below. No payment data is collected on this site.
What a request contains
When you send a booking request, we keep what you typed into the form. Required: your name, email and phone number or WhatsApp; who the checkup is for, and your relationship if it's a family member (and their confirmation that they've agreed to it); the patient's age and sex; travel dates (or "flexible"); whether you live in the US, in Taiwan or elsewhere; the service level you chose (Book it for me or Family concierge); the package you asked about (required for Book it for me); and what you want checked when you haven't chosen a package. Optional: your LINE ID, and notes for anything the hospital should know — optionally including health information (medications, mobility, prior surgery, allergies and similar), if you choose to tell us something the hospital should know ahead of time. Health notes are kept by us and passed to the hospital only when you confirm. We also keep the time the request was sent, an automated fingerprint of your connection used only to slow down spam (a one-way hash, not your raw IP address, and deleted within 24 hours), and your browser's user-agent string (deleted on the same schedule).
Why we keep it
Only to arrange the booking with the provider you chose: to contact them on your behalf, to write back to you with availability and price, and to keep a short internal log of how that request went (how long the provider took to answer, whether the price matched what's published, and similar operational notes) so we can keep this directory accurate.
What's shared with the provider, and when
Nothing is shared automatically. After you send a request, a person on our side contacts the provider you asked about. To arrange the booking we tell the hospital the package, your dates and the patient's age and sex. Your name and contact details go to the hospital only when you confirm. We don't share anything with any other provider, and never with anyone outside arranging that one booking.
Where it's stored
Requests are stored in a database hosted on Cloudflare, the same provider that serves this website. Cloudflare's own "Time Travel" backups mean a row we've deleted can still be recovered from Cloudflare's infrastructure for up to 30 days afterwards. The person handling your request may also keep working copies on their own computer and in email while they arrange your booking — see "How long we keep it": those are deleted on the same schedule as the database, not kept indefinitely as a matter of course.
How long we keep it
Once a request is closed (booked and completed, cancelled, or you let us know you're no longer interested), we clear the personal fields — your name, contact details, notes and similar — twelve months later, keeping only the operational shell (which package, which provider, when, and how it went) that the metrics in "Why we keep it" are built from. A request that's neither closed nor answered doesn't wait forever either: it's cleared on the same schedule measured from when it was sent, regardless of status. This runs automatically every day. If you ask sooner, we delete your request outright, rather than waiting for that schedule — see "Asking for deletion" below.
Third parties
Cloudflare is the only third party involved. It serves this site (and logs visitor IPs as any host does), hosts the request database, and runs the site's analytics. The site uses Cloudflare Web Analytics, which is cookieless and sets no identifier: it records the page URL, the referring site, your country, your device type and page load timing, aggregated by Cloudflare, so we see totals and never a person. Fonts are served from this site itself, and the site uses no Zaraz and no advertising service. The booking-request form goes only to the database described in "Where it's stored" and, as "What's shared with the provider" describes, to the hospital you asked about. Analytics never see what you type in the form.
What we don't do
We don't sell personal information, we don't use it for advertising, and we set no tracking cookies of our own; the only analytics are the aggregate, cookieless ones described in "Third parties". The booking-request data above is the only personal information we collect ourselves, and only when you choose to send a request. When you send one we also store how you reached the site (the referrer and campaign fields: the referring site and any campaign tag in the link you arrived by, kept in your browser for the current session only until you submit), so we know which of our outreach channels work; it is deleted with the rest of the request.
Asking for deletion
Email concierge@execdia.com and ask us to delete your request. We'll confirm once it's done. This deletes the request itself; as noted above, Cloudflare's own backups can still hold a deleted row for up to 30 days.
Not medical advice
ExecDia is a directory and booking go-between, not a medical provider. Nothing here, including anything in a reply to your request, is medical advice.