How we handle your information.
This policy explains what information we collect when you contact us or become a patient, how we use it, who we share it with, and the choices and rights you have. We treat your health information and photos as sensitive and handle them with care.
This is a working template. The bracketed items in [square brackets] need to be completed by the clinic, and the full text should be reviewed by a qualified attorney before publishing to confirm it reflects your actual practices and complies with applicable data protection law in México and any other countries where your patients reside.
Summit Hair Clinic (referred to here as the clinic, we, us, or our) is a multi-specialty medical clinic operating in México, with locations in Guadalajara, Monterrey, and Tijuana. The legal entity responsible for your personal information is [full legal entity name], with its principal address at [registered legal address].
For the purposes of applicable data protection law, we act as the party responsible for the personal data you provide to us. If you have any questions about this policy, you can reach us using the details in the contact section below.
We collect information you give us directly, information generated through your care, and limited information collected automatically when you use our website. This may include:
You can choose not to provide certain information, but some of it is necessary for us to assess your case, provide a quote, or deliver care.
We use your information to respond to your inquiry, assess whether you are a candidate, and prepare a quote; to schedule, perform, and follow up on procedures; to communicate with you about your care and appointments; to process payments; to maintain our records and meet our legal and regulatory obligations; and to operate, secure, and improve our website. We do not sell your personal information.
Health information and the photographs you share are sensitive personal data, and we treat them accordingly. We collect and use this information to assess and provide your care, and we do so on the basis of your consent and the provision of medical services.
We will not use your photographs for marketing, testimonials, or case galleries unless you give us your separate, explicit permission to do so. You can withdraw that permission at any time, which will apply going forward.
We share personal information only as needed to provide our services and run our clinic, including with:
We do not sell your personal information, and we do not share it with advertisers for their own marketing.
Our clinics are located in México, and many of our patients contact us from other countries, including the United States and Canada. When you send us information, it is processed in México and may be processed by our service providers in other countries. Data protection laws in those countries may differ from those where you live. Where required, we take steps to protect your information in connection with such transfers.
We keep your personal information for as long as needed to provide your care, maintain medical records as required, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Medical records are retained for the minimum periods required by applicable law in México. When information is no longer needed, we take steps to delete it or render it anonymous.
We use reasonable administrative, technical, and physical safeguards designed to protect your information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us right away.
Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used so we can improve it. You can control cookies through your browser settings, though disabling some of them may affect how the site functions. For details on the specific cookies and analytics tools in use, see [link to cookie settings or list, if applicable].
Subject to applicable law, you have the right to access your personal data, to ask us to correct it if it is inaccurate, to ask us to delete it, and to object to or limit certain uses. You may also withdraw a consent you previously gave, which will apply going forward. These are sometimes referred to as your access, rectification, cancellation, and opposition rights.
To exercise any of these, contact us using the details below. We may need to verify your identity before acting on your request, and we will respond within the time frames required by applicable law. Depending on where you live, you may also have the right to lodge a complaint with the relevant data protection authority.
Our website and services are intended for adults. We do not knowingly collect personal information from children without appropriate consent from a parent or guardian. If you believe a child has provided us with personal information without that consent, please contact us so we can take appropriate steps.
We may update this policy from time to time to reflect changes in our practices or for legal and regulatory reasons. When we do, we will post the updated policy on this page, and where changes are significant we will take reasonable steps to let you know. We encourage you to review this page periodically.
If you have questions about this policy or would like to exercise your rights, please contact us.