Privacy Policy

1. Information We Collect

When you use our website and services, we may collect the following information:

• Appointment booking: Full name, email address, phone number, appointment reason, preferred date and time, and optional medical notes.
• AI Symptom Triage: Symptom descriptions you provide (processed in real-time, not stored permanently).
• Contact form: Name, email, phone, and message content (sent via WhatsApp, not stored on our servers).
• Analytics: Anonymous usage data via Google Analytics 4, Microsoft Clarity (heatmaps), and Cloudflare Web Analytics.
• Cookies: Essential cookies for site functionality and optional analytics cookies (with your consent).

2. How We Use Your Information

• To schedule and manage your medical appointments
• To provide AI-powered preliminary symptom orientation (not a diagnosis)
• To communicate with you about your appointments via email or WhatsApp
• To improve our website and services through anonymized analytics
• To comply with legal and regulatory obligations

3. Data Protection

We implement the following security measures to protect your data:

• HTTPS encryption on all pages (TLS 1.2+ with HSTS preload)
• Cloudflare WAF and DDoS protection
• Turnstile CAPTCHA verification to prevent automated abuse
• Rate limiting on all API endpoints
• CSRF protection with origin validation
• Content Security Policy (CSP) headers
• Session tokens hashed with SHA-256 before storage
• No storage of credit card or payment information

4. Cookies and Tracking

Our website uses cookies categorized as follows:

• Essential: Required for site functionality (locale preference, cookie consent status). Always active.
• Analytics (optional): Google Analytics 4, Microsoft Clarity, and Cloudflare Web Analytics. Only activated after you accept cookies.
• Chat (optional): Crisp.chat for live chat support. Loaded after cookie consent.

We implement Google Consent Mode v2. Analytics and advertising cookies are denied by default until you explicitly accept them.

5. Third-Party Services

We use the following third-party services that may process your data:

• Cloudflare: CDN, DNS, security, and Workers hosting
• Google Analytics 4: Website usage analytics
• Microsoft Clarity: Session recordings and heatmaps
• Cloudflare Workers AI: AI symptom triage processing
• Cloudflare Turnstile: Bot protection verification
• Crisp.chat: Live chat support (France/EU)
• WhatsApp (Meta): Patient communication

6. Data Retention

• Appointment data: Retained for 5 years per Mexican medical record regulations
• AI symptom queries: Not stored permanently; processed in real-time only
• Analytics data: Governed by Google and Microsoft retention policies (typically 14-26 months)
• Admin sessions: Automatically expire after 24 hours

7. Your Rights

Under Mexican law (LFPDPPP) and applicable international regulations, you have the right to:

• Access: Request a copy of your personal data we hold
• Rectification: Correct inaccurate or incomplete data
• Cancellation: Request deletion of your personal data
• Opposition: Object to the processing of your data for specific purposes

To exercise any of these rights (ARCO rights), please contact us using the information below.

8. Medical Disclaimer

The information provided on this website, including the AI symptom triage tool, blog articles, and service descriptions, is for educational and informational purposes only. It does not constitute medical advice, diagnosis, or treatment. Always seek the advice of a qualified cardiologist or other healthcare provider with questions about a medical condition.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.

Last updated: March 4, 2026