Privacy notice

Who is responsible for your data

The party responsible for processing and protecting your personal data is Longevia Medical, a clinic located at Blvd. Puerto Cancún, Mz 27 Lt 1-02, Edificio Diomeda, offices 310 and 311, Puerto Cancún, 77500 Cancún, Quintana Roo, Mexico. This is also the address for notices.

For anything related to your data, write to [email protected] or call or message us on WhatsApp at +52 998 179 4138. Requests about your data are handled by Longevia Medical's patient care team.

This notice is governed by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette on March 20, 2025.

What data we collect and how

We collect your data when you message us on WhatsApp, social media or email; when you use the booking form or subscribe to the journal on this site; when you register for an event; and when you come in for a consultation.

• Identification and contact: name, phone or WhatsApp, email, country and city, language, and your preferred date and time.
• Your interest: the area you are interested in and what you write in your message.
• How you found us: whether you reached us through a channel, a form, an event or an ad, and who referred you, if you tell us.
• Health data (sensitive data): collected during your consultation to assess and treat you, such as your reason for visiting, history, medications, allergies and the results of your measurements and tests.
• Data from your visit to this site: IP address, browser and device type, pages you visit, date and time, and the site you came from. Details are in the cookies section.

Please do not send medical records or health information through the forms on this site or by message: we ask for that information during your consultation. If you send it anyway, we use it only to prepare your care and protect it with the same care as your medical record.

What we use your data for

Necessary purposes. We cannot care for you without these, so they do not require additional permission:

• Replying to your message and scheduling your assessment or appointment.
• Assessing you, proposing a plan and treating you.
• Following up during and after your program or treatment.
• Creating and keeping your medical record, as required by health regulations.
• Coordinating your appointments if you travel from another city or country.
• Meeting legal, health and tax obligations, and responding to authorities.

Optional purposes. Only if you do not object, and if you object we will still care for you: sending you the journal and clinic news; inviting you to events; asking for your feedback in satisfaction surveys; and measuring where the people who contact us come from to improve our communication.

To refuse the optional purposes or unsubscribe from the journal, email [email protected] with the subject "No optional purposes", or tell the team on WhatsApp or at your consultation. Every journal email also includes a way to unsubscribe.

How you give us permission for your health data

Before opening your medical record we will ask for your express written consent, with your signature, to process your health data.

To use images or testimonials of your case we will ask for a separate, signed authorization. You can withdraw it at any time: we stop using those images and remove them from this site and our social media.

If the patient is a minor, consent is given by their parent or guardian.

Who we share your data with

We do not sell your data. We share it without asking for additional permission, as the law allows, in these cases:

• With laboratories and other health professionals involved in your diagnosis or treatment, or to whom you ask us to send your information.
• With health, tax or judicial authorities, when the law requires it.

The providers that support our booking, forms, messaging, contact management, email and website hosting process your data only on our behalf and under a duty of confidentiality. Some store information on servers outside Mexico, for example in the United States or Canada.

Google receives the browsing data described in the cookies section to measure the site, and also uses it under its own privacy policy. If we ever needed to share your data with anyone else for something that requires your permission, we would ask you first.

See, correct, delete or object

You have the right to access your data and know how we use it; to correct it if it is wrong or incomplete; to cancel it, that is, ask us to delete it; and to object to its use for a given purpose. Mexican law calls these ARCO rights.

To exercise them, email [email protected] or deliver your request at the clinic, including:

• Your name and how you want us to reply.
• An official ID. If someone represents you, their ID and the document proving it.
• Which data and which right you want to exercise.
• If you want to correct something, the change and a supporting document.
• Anything that helps us find your information.

We reply within 20 business days of receiving your request and, if it applies, carry it out within the following 15 business days. If justified, either period may be extended once by the same length and we will let you know. It is free; only copies or shipping, if any, are charged.

One important limit: we must keep your medical record for at least 5 years after your last consultation, as required by the Mexican official standard on medical records (NOM-004-SSA3-2012). During that time we cannot delete it even if you ask; we can correct it and limit its use to what is essential.

If you disagree with our reply, or we do not reply, you can go to Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the authority that now protects personal data in Mexico.

How to withdraw your permission or limit the use of your data

You can withdraw the permission you gave us at any time. To unsubscribe from the journal or refuse the optional purposes, an email to [email protected] or a message on WhatsApp is enough. To withdraw permission for your health data we ask for the same details as in the previous section and reply within the same periods. Withdrawal does not apply retroactively; if it concerns data we need to care for you, it may prevent us from continuing your treatment, and we will explain this first.

If you ask us not to send you clinic information, we record your refusal so we do not send it again.

Automated messages

Some WhatsApp messages are automated: the welcome message, the after-hours notice and, when active, an assistant that helps with general questions and booking. It never diagnoses or prescribes, and you can ask to talk to a person on the team at any time. You can also object to having your conversation handled by the assistant, through the same channels as in the rights section.

Cookies and other tools on this site

This site uses cookies and similar tools: small files or pieces of code that store information in your browser. They collect your IP address, browser, device and operating system, the pages you visit, the date and time, and the site you came from. They are used as follows:

• Google Analytics (Google): counts visits, page views and actions such as opening the booking form or subscribing, to understand what works on the site. It does not receive your name or phone number.
• Visit log of our contact platform: anonymously records the pages you visit; if you later submit a form, it links those visits to your request so we know how you found us.
• Google Fonts: when the site loads, Google receives your IP address and browser data.
• Your own browser: if a form could not be sent because of a lost connection, it is stored in your browser to be sent later.

You can block or delete cookies in your browser settings; the site still works. For Google Analytics there is also Google's opt-out add-on: tools.google.com/dlpage/gaoptout. This site does not currently respond to browser "Do Not Track" signals. If we ever use advertising tools on this site, we will say so here first.

How long we keep your data

• Medical record: at least 5 years after your last consultation. It is then blocked and securely destroyed.
• If you contacted us but did not start treatment: as long as needed to handle and follow up on your request. If you ask us to delete it, we do.
• Journal and news: until you unsubscribe.
• Authorized images and testimonials: while your authorization remains in effect.

How we protect your data

We apply administrative, technical and physical measures to protect your data. Your record is accessed only by the staff caring for you and, when needed, by our service providers under confidentiality. The whole team is bound by confidentiality and professional secrecy. If a security breach significantly affected your rights, we would notify you without delay.

Changes to this notice

Any change is published on this page with its new update date. If the change is significant, for example a new party responsible for your data, new purposes that require your permission, or sharing your data with someone else, we will also notify you through the contact details you gave us and, when the law requires it, ask for your consent again.

This notice is available in Spanish and English. If there is any difference between them, the Spanish version prevails.