Privacy notice

Identification and contact data: name, phone number, email address, date of birth and city of residence.

Sensitive personal data: present and past health status, medical and surgical history, medications, allergies, and photographs of your face and of the areas related to the procedure you are asking about. Mexican law classifies health data as sensitive. We collect it only with your express consent: in the online consultation request, through a separate checkbox that is never pre-checked; at the clinic, in writing.

Browsing data: the pages you visit on this site, where you arrived from, the approximate location of your connection (country, region and city), and an anonymous identifier that recognizes your session. This data does not identify you on its own; if you submit a consultation request, it becomes linked to that request. When you submit a consultation request or sign a consent form, we also keep the IP address you used, as a record. If you leave a review, we keep with it your visit and session identifiers, the approximate location, where you arrived from, and an irreversible fingerprint of your IP address and browser, only to prevent abuse: we do not keep the IP address.

Primary purposes, necessary for the relationship: handling your consultation request; clinically assessing your case; scheduling and following up on your appointments; building and keeping your medical record as required by Mexican standard NOM-004-SSA3-2012; and communicating with you about your care.

If you create your card in “My Patient Card”, the patient portal, we use your email address to send you the sign-in code, and what you enter there becomes part of your medical record for the same purposes.

If you use the artificial intelligence assistant in the consultation request, which is optional, what you type or dictate to it (including your contact details or your legal representative’s, if you give them) and what you have already filled in of your medical history are used only to suggest answers and help you fill in your request. Because this is health data, we ask for your express consent before you use it. You decide which answers to use; anything you do not submit in your request is not kept.

If you leave a review through “Leave a review”, we use your stars, your text, your social network and username (with “Other”, also the name of the network you type) and, if you give it, your name, to publish it on this site, with your authorization and only if the team approves it. Your email, if you give it to us, is only used to write to you about your review: it is never published.

Secondary purposes, which you may decline without affecting your care: sending you information about procedures or offers, and inviting you to share your experience. You can decline now by replying to any of our messages, or by writing to drmarcopolo@yahoo.com.mx.

Your photographs are used only for clinical purposes — to compare how treatment progresses — unless you separately sign a specific image-use authorization. That authorization is distinct from this notice, is signed separately, and can be revoked.

We do not sell or trade your personal data.

Only the clinical and administrative staff involved in your care have access to it.

Some providers process data on the Controller’s behalf, as processors: under contract, bound by confidentiality and with no authority to use it for their own purposes. They provide system hosting and database services, email delivery, sign-in, and Google Analytics, which measures site usage without health data.

The consultation request assistant runs on Anthropic, PBC, an artificial intelligence provider with servers in the United States, which processes what you type or dictate to it (including your contact details or your legal representative’s, if you give them) and what you have already filled in of your medical history as a processor and only to help you fill in your request: it does not use it to train its models and keeps it only for the limited time its terms set for security purposes. We do not keep the conversation. Voice dictation is done by your browser or phone with its own speech recognition service; we only receive the text. Reading answers aloud, if you turn it on, is done by your own device. Using the assistant is optional, and we ask for your express consent before it processes any data: you can fill in your request without it.

Personal data is not transferred to third parties, except for transfers required by law.

You have the right to access your data, rectify it if inaccurate, cancel it when you believe it is not needed, and object to its use for specific purposes.

To exercise these rights, write to drmarcopolo@yahoo.com.mx stating your full name, a way to reach you, a clear description of what you are requesting, and a document proving your identity. We will respond within twenty business days.

One important note: the medical record must be kept for at least five years under NOM-004-SSA3-2012. During that period we may be legally prevented from canceling certain data, although you can still access and rectify it.

You may withdraw your consent at any time by writing to drmarcopolo@yahoo.com.mx with the same details as an ARCO request. Withdrawal is not retroactive for processing already carried out, and in some cases cannot take effect immediately because of medical-record retention obligations.

If you withdraw your image-use authorization, we will remove your photographs from the site. Please note that content already shared or copied by third parties may remain outside our control.

This site stores an anonymous identifier in your browser that lets us know how many people visit and which channel they came from. Google Analytics stores its own cookies for the same purpose. We do not use this information to identify you, and we do not share it with advertising networks.

You can clear these identifiers at any time from your browser settings. The site will keep working the same.

Any change will be published on this page, with the update date shown at the top. We recommend checking it from time to time.

If you are not satisfied with how your data is handled, you may contact Mexico’s personal data protection authority.