Privacy Notice

Clinic: MEDIZAMA

Address: Av. Tulum 120, Offices 203 and 206, C.P. 77760, Quintana Roo, Mexico

RFC: PETJ830427FQ4

Phone: 5523134628

1. Introduction

This Privacy Notice informs you of how we process personal and sensitive personal data collected from our patients and/or clients. It describes the purposes of processing, the rights you may exercise, and the mechanisms available to do so, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

2. Identity and Contact Details of the Data Controller

The controller of the personal data collected is Jonatan Elihu Pedraza Tinoco, at the address and with the contact details provided above. For any matter related to personal data, or to exercise your rights, you may contact us via the email or telephone indicated.

3. Data We Collect

3.1 Personal data (mandatory and/or optional):

Full name, age, gender.
Date of birth, CURP.
Address, phone number, email.
Emergency contact details.
Billing information (RFC, tax data).

3.2 Sensitive personal data (when applicable):

Medical history, background, diagnoses, treatments, allergies, medical record, laboratory results, medical images, and other health-related data.

3.3 Third-party data:

Information on family members or legal guardians in the case of minors or legally incapacitated individuals.

4. Purposes of Processing

4.1 Primary purposes (necessary for service delivery):

Provide medical services, consultations, diagnoses, treatments, and procedures
Create and maintain medical records
Issue invoices and tax receipts
Contact for appointments, follow-up, and clinical notifications

4.2 Secondary purposes (not necessary, subject to consent):

Send promotional information, satisfaction surveys, and prevention campaigns
Conduct service improvement studies and statistics (with anonymized data)
Transfer data to third parties for electronic billing or related services, subject to prior notice and consent where legally required

5. Legal Basis and Consent

The processing of your personal data is based on your consent, either:

Tacit: by voluntarily providing your data, or
Express: when requested in writing or electronically.

For sensitive personal data, express written consent (or another verifiable method) will be required. Processing without consent may occur only where permitted by law (e.g., in medical emergencies).

6. Data Transfers

Personal data may be transferred within or outside Mexico to individuals or entities that provide services to the clinic (such as laboratories, insurers, accounting firms, electronic health record or appointment platforms, and technology providers), when necessary to fulfill the purposes outlined. In such cases, you will be notified, and where legally required, your consent will be obtained. Appropriate measures will be taken to ensure confidentiality and security by data recipients.

7. Rights of Access, Rectification, Cancellation, and Opposition (ARCO) and Withdrawal of Consent

You have the right to:

Access your personal data,
Rectify inaccurate or incomplete data,
Cancel your data when inappropriate or excessive, and
Object to its processing.

You may also limit the use or disclosure of your data and revoke consent previously granted.

To exercise these rights, send a written request to info@medizama.com

8. Procedure and Requirements

Valid government-issued photo ID (INE, passport)
Document proving legal representation, if applicable
Clear and precise description of the data concerned
Supporting documentation, if relevant

Requests may be submitted in person, by certified mail, or electronically (with appropriate verification mechanisms).

9. Data Retention

Personal data and medical records will be retained for the periods established by applicable health and tax regulations, and for as long as the purposes for which they were collected remain in effect. Afterward, they will be blocked for the time required by law and subsequently deleted or anonymized.

10. Security Measures

We have implemented reasonable administrative, technical, and physical safeguards to protect personal data against damage, loss, alteration, destruction, or unauthorized access or processing. However, due to the nature of electronic communications, absolute security cannot be guaranteed. Reasonable measures will be taken to mitigate risks.

11. Use of Technology and Electronic Processing

When using electronic health records, management systems, appointment platforms, or electronic communications, data will be processed under strict confidentiality and security standards. If cookies or similar technologies are used on our website, this will be disclosed in a simplified privacy notice or on the site itself.

12. International Data Transfers

Some data transfers may occur to providers located outside Mexico. These transfers will comply with the LFPDPPP, ensuring an adequate level of protection and obtaining your consent when required.

13. Minors and Legally Incapacitated Persons

For the processing of data belonging to minors or individuals with limited legal capacity, parental or guardian consent will be required. Special measures will be taken to protect their information, particularly sensitive health-related data.

14. Amendments to this Privacy Notice

We reserve the right to modify or update this Privacy Notice at any time. Any changes will be communicated through legally established means, published on our website [clinic website], or posted at our facilities. Modifications will take effect as indicated in the notice.

15. Consent

By providing your personal data, you acknowledge and accept the terms of this Privacy Notice and authorize the processing of your data for the purposes described. For sensitive data, additional express consents or signatures may be requested.

16. Oversight Authority

If you believe your data protection rights have been violated, you may contact the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) or the competent authorities.