Privacy notice for patients

1. Controller

Alonso, a doctor with professional license 12345678 and address at Isidro Huarte 265, Ciudad de México (the "Doctor"), is the controller of your personal data.

For anything about your data you can contact the practice: [phone or email of the practice].

2. Personal data we collect

• Identification: name, date of birth, sex, CURP, RFC and occupation.
• Contact: phone number, WhatsApp number, email, address and an emergency contact.
• Tax details, if you ask for an invoice: name or company name, tax regime and postal code.
• Your insurer, if you have one.
• Appointments, payments and receipts.
• Health data (see the next section).

3. Health data: sensitive data and express consent

To treat you we need data about your health, which the law treats as sensitive personal data: family history, personal medical and non-medical history (including habits such as tobacco, alcohol or other substance use), gynecological and obstetric history, allergies, medications, blood type, vital signs and measurements, reason for the visit, clinical notes, diagnoses, prescriptions, laboratory and imaging results, and clinical studies and documents.

We only process this data with your express consent, which you give by signing this notice or accepting it electronically. The Doctor records in your electronic record the date you gave it and the notice version.

Without your consent it will only be processed where the law allows it; for example, when needed to treat you in an emergency while you are unable to give it.

4. What we use your data for

Primary purposes, needed to treat you:

• Providing medical care: diagnosis, treatment, follow-up and prescriptions.
• Building, keeping and safeguarding your clinical record, as NOM-004-SSA3-2012 requires.
• Scheduling your appointments, confirming them and sending you reminders by email or WhatsApp. On WhatsApp you can confirm or cancel your appointment by replying to the message, and stop receiving them by replying BAJA.
• Giving you access to the patient portal, if we invite you.
• Charging for the visit and issuing tax receipts.
• Meeting legal obligations, such as mandatory reports to health authorities, and requests from competent authorities.

Secondary purposes, not needed to treat you:

• Emailing you a satisfaction survey after each visit. Your answers go to the Doctor to improve their care.
• Publishing your review on the Doctor’s public profile, without your name (“Verified patient”), only if you expressly allow it when answering the survey. You can take that permission back with the same link.
• [Optional] Sending you information about health campaigns or services of the practice.

5. How to refuse the secondary purposes

You can ask at any time that we stop using your data for secondary purposes, at the practice or at [phone or email of the practice]. Each survey also carries a link to stop getting them. Refusing does not affect your care.

6. Who processes your data on the Doctor’s behalf

The Doctor keeps your record in Opifer, a technology platform that processes your data only on the Doctor’s behalf, as processor, and does not use it for its own purposes. Opifer and its providers store the information on servers located in the United States of America, with security measures and confidentiality obligations. You can read the Opifer privacy notice.

To send you WhatsApp reminders, Opifer uses Twilio and WhatsApp (Meta), which only receive your first name, your number and the date, time and place of the appointment, never clinical information. If you ask for an invoice, your tax details go to Facturapi, Opifer’s invoicing provider, and to the SAT. The emails you get from the practice (reminders, surveys and, if the Doctor sends it, your prescription as a PDF) go out through Resend, Opifer’s email provider.

[If the Doctor works with assistants or administrative staff who can access your information, state it here.]

7. Transfers

Without your consent, we will only share your data in the cases the law allows:

• With other health professionals and institutions, laboratories and imaging centers, when needed for your diagnosis or treatment.
• With health authorities, when reporting is mandatory.
• With judicial or administrative authorities that require it under the law, and with the National Commission for Medical Arbitration (CONAMED) if it handles a complaint.

With your consent:

• [Optional] With your insurer, to process the payment or reimbursement of your visits. If you do not authorize it, tell the Doctor.

8. Your ARCO rights

You have the right to access your data, to rectify it if it is inaccurate or incomplete, to cancel it and to object to its processing for specific purposes (ARCO rights). To exercise them, send your request to the Doctor at [phone or email of the practice], with:

• Your name and a way to send you the answer.
• An official ID or, if a representative acts for you, the document proving it.
• A clear description of the data and of the right you want to exercise.
• For a rectification, the corrections and the document supporting them.

The Doctor will answer within the periods the LFPDPPP sets. If you ask for access, they can give you a copy of your data in electronic format and a printout of your record. Under NOM-004-SSA3-2012 you can also request a clinical summary.

9. Cancellation and objection: what the law requires keeping

Your clinical record cannot be erased at your request while the retention period runs: NOM-004-SSA3-2012 requires the Doctor to keep it for at least 5 years from the last medical act, and the LFPDPPP does not require cancelling data that must be kept by law or that a health professional bound by professional secrecy processes for medical care.

If you ask for cancellation, the Doctor will stop using your data for anything other than those obligations: it will be blocked (kept without any other processing, only to comply with the law and deal with possible liabilities) and deleted when the period ends. Data that is not part of the record, such as data used for secondary purposes, is cancelled right away.

You can object to the secondary purposes at any time. Objecting to the primary purposes means the Doctor will no longer be able to treat you; even so, what is already in your record is kept for the period the law requires.

10. Withdrawing consent

You can withdraw your consent at any time, the same way as for ARCO rights. Withdrawal does not apply retroactively and does not allow erasing what the law requires keeping: the record is kept and blocked as explained in the previous section.

11. Retention, blocking and deletion

Your clinical record is kept for at least 5 years from the date of the last medical act, as NOM-004-SSA3-2012 requires. What is deleted from the record on the platform is removed from the active record but kept during that period, as are the previous versions of whatever is corrected.

When the period ends the data is blocked and, once the blocking period is over, securely deleted. Payment data is kept for the period tax rules require.

12. Online booking and patient portal

If you request an appointment online, we use your name, phone number, email and the reason for the visit you share to handle the request, contact you and, if we treat you, open your record. Before sending it you accept the short privacy notice; we keep the version and the date.

If we invite you to the patient portal, we use your email to create your access and show you your information there. The first time you sign in we ask you to accept the privacy notice.

13. Changes to this notice

Any change to this notice will be announced at the practice, in the patient portal or on the Doctor’s page on Opifer.

14. Authority

If you believe your right to the protection of your personal data has been violated, you can turn to the authority the LFPDPPP establishes, the Secretaría Anticorrupción y Buen Gobierno.