Legal
Privacy policy
Last updated: September 2026
Pending legal review
This policy follows the structure required by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Bracketed fields must be completed with the responsible party's details, and the document must be reviewed by a lawyer before publication.
This English version is provided for convenience. If there is any discrepancy, the Spanish version prevails.
1 · Who is responsible
José Andrés Cárdenas Figueroa, located at [street, number, neighborhood, postal code, Puerto Vallarta, Jalisco, Mexico], is responsible for the personal data you provide through this website, messaging services, email and in-person care.
2 · What data we collect
- Identification and contact: name, age, date of birth, phone, email, address, country or city of residence and, where applicable, an emergency contact.
- Financial: billing details and, where applicable, insurance policy information.
- Sensitive personal data: current and past health status, medical and surgical history, weight, height, body mass index, test results, diagnoses, treatments, medications, allergies, family history and, where the case requires it, mental health information and habits.
Express consent. Under Mexican law, health data is sensitive personal data and requires your express consent. By submitting a form on this site, sharing clinical information by messaging or email, or signing the corresponding consent at your consultation, you give that consent for the primary purposes below.
3 · Why we use it
Primary purposes, necessary for your care: responding to your inquiry; creating and keeping your medical record as required by health regulations; evaluation, diagnosis and treatment; coordinating tests, specialist consultations and hospital admission; post-operative follow-up; handling insurance paperwork when you request it; billing; and contacting you in an emergency.
Secondary purposes, which you can refuse without affecting your care: educational information about procedures, satisfaction surveys, and use of testimonials or photographs — which always requires separate, specific written consent.
4 · Who we share it with
The hospitals where you're treated; the specialists involved in your evaluation and follow-up; laboratories and imaging centers; your insurer, when you request it; and authorities, when legally required. We never sell your data.
5 · Your rights
You can request access to, correction of, deletion of, or objection to the use of your personal data (known in Mexico as ARCO rights), and you can withdraw your consent. Mexican health regulations require medical records to be kept for a minimum period, so clinical information can't be deleted while that obligation applies.
To exercise these rights, write to [data protection email] or to [address], including your full name, proof of identity, a description of the data and the right you want to exercise.
6 · Cookies
This site may use cookies and similar technologies to remember preferences and measure how the site is used. You can disable them in your browser settings; some features may not work as expected.
7 · Security
We apply administrative, technical and physical safeguards to protect your data. Everyone involved in handling it is bound by confidentiality, consistent with medical professional secrecy.
8 · Changes
Any change to this policy will be published on this page with its update date.