Privacy notice
Last updated: September 22, 2026
In compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (published March 20, 2025, in force since March 21, 2025) and applicable regulations, Dr. [Nombre Apellido] provides this Privacy Notice.
1. Data controller
Dr. [Nombre Apellido], physician, professional license 0000000 and specialty license 0000000, located at Office at Las Torres, Tijuana, Mexico (exact address pending), is responsible for processing your personal data. For any matter related to this Notice write to contacto@dominio.com or WhatsApp +52 664 000 0000.
2. Personal data we process
Identification and contact data: name, phone or WhatsApp number, email, city of residence, age or age range and, where applicable, your partner's name and age.
Sensitive (health) data: reason for consultation, time trying to conceive, gynecological, obstetric and reproductive history, prior diagnoses, lab and imaging results, prior treatments and everything that forms part of your medical record.
Financial data: only what is strictly necessary to issue receipts and, if you request it, to arrange financing through third-party platforms. We do not store card numbers.
Data you share via WhatsApp, the website questionnaire or in consultation. The website questionnaire does not store your answers on any server: they become a message that you choose to send via WhatsApp.
3. Purposes
Primary purposes (necessary for the medical relationship): scheduling and following up on your consultations; evaluation, diagnosis and treatment; creating and keeping your medical record under Mexican standard NOM-004-SSA3-2012; coordinating tests with laboratories and procedures with hospitals; issuing receipts; and complying with legal and health obligations.
Secondary purposes (not necessary; you may object without affecting your care): sending reminders, information about the office and educational content. To opt out, write to contacto@dominio.com.
4. Express consent for sensitive data
Health data is sensitive and requires your express consent. By messaging us on WhatsApp or submitting the website questionnaire you accept this Notice; express consent for processing your health data is obtained in writing at the office before your first consultation.
5. Processors and transfers
We do not sell your data. To provide the service we rely on processors bound by confidentiality: the website's hosting and email providers (Cloudflare, [email provider]); WhatsApp (Meta Platforms) as a messaging channel; the assisted reproduction and embryology laboratory [laboratory name]; the hospital or surgical facility where procedures take place; and, only if you request it, the financing platforms Mend (Mexico) and heva (international), to which you provide your data directly under their own privacy notices.
We only transfer data without your consent where the law allows: to other healthcare professionals for your care, to health authorities when required, or in emergencies.
6. Your rights (ARCO) and withdrawal of consent
You may access, rectify, cancel or object to the processing of your data, withdraw your consent, and limit its use or disclosure. Send your request to contacto@dominio.com with your name, a way to reply to you, a clear description of your request and a copy of an official ID. We will respond within 20 days of receipt and, if applicable, act on it within the following 15 days.
Cancellation of medical-record data is subject to the retention periods required by health regulations.
7. Cookies, analytics and storage
The site uses no tracking or advertising cookies. When audience measurement (Google Analytics 4) is enabled, it will require prior consent through an on-screen notice, with anonymized IP addresses and without linking browsing to your identity. You may decline without affecting your use of the site.
8. Security
We apply administrative, technical and physical measures to protect your data: restricted access to records, encrypted communications (HTTPS, end-to-end encrypted WhatsApp) and providers with security certifications.
9. Changes to this Notice
Any change will be published on this page with its update date. We recommend reviewing it periodically.
10. Authority
If you believe your data protection rights have been violated, you may file a complaint with Mexico's Secretaría Anticorrupción y Buen Gobierno, the competent authority.
Short-form notice
Dr. [Nombre Apellido] is responsible for your personal data, including health data, which is used to schedule, evaluate and follow up on your medical care. The full notice is on this page; you may exercise your rights at contacto@dominio.com.