1. Identity and address of the data controller

The party responsible for the processing of your personal data is Dra. Denise Yuliana Vázquez Bautista, an interventional pain physician dedicated to providing private medical services in pain management, pain medicine, medical assessment, medical guidance, interventional procedures and administrative follow-up of patients.

Place of care and address for the purposes of this privacy notice: Centro Médico ABC Observatorio, Torre Mackenzie, Consultorio 514, Sur 136 No. 116, Col. Las Américas, Alcaldía Álvaro Obregón, C.P. 01120, Ciudad de México, México.

Website: dradenise.com. Privacy contact email: alejandro@dradenise.com. Contact phone or WhatsApp: +52 55 4499 1139.

2. Personal data we collect

We may collect personal data directly from you when you provide it through web forms, WhatsApp, phone calls, email, social media messages, appointment scheduling, documents you send voluntarily, interaction with advertising campaigns or during medical care.

The personal data we may collect includes, by way of example:

• Full name, phone number, email, age or date of birth, city or place of residence.
• Reason for consultation, reported symptoms, prior diagnosis if you share it, previous treatments and data necessary to prepare or follow up on your care.
• Medical studies, prescriptions, images, reports, medical notes, clinical or administrative documents that you send voluntarily.
• Contact information of family members, companions or persons authorized by you.
• Billing data: RFC (taxpayer ID), tax address, tax regime, CFDI use and other information necessary to issue tax receipts.
• Insurer data, policy, claim, authorization letter or information necessary for administrative procedures with insurers or third-party payers, where applicable.
• Technical browsing data: IP address, device identifiers, browser, operating system, cookies, pages visited, traffic source, campaigns, conversion events, button clicks, clicks to WhatsApp, forms submitted and interactions within the site.

3. Sensitive personal data

Due to the nature of medical services, we may process sensitive personal data related to your present, past or future state of health. This data may include symptoms, diagnoses, medical history, clinical studies, treatments, medications, information related to pain, disability, ailments, medical conditions, clinical reports, diagnostic images and any medical information that you provide or that is generated during care.

The data controller does not seek to collect genetic or biometric information through the website. Should such information be collected in the future for a specific medical purpose, the data subject will be informed and the corresponding consent will be requested where legally applicable.

4. Primary purposes

Your personal data and, where applicable, sensitive personal data will be processed for the following necessary purposes:

• Identify and contact the patient, prospective patient, authorized family member or companion.
• Respond to requests for information received through forms, WhatsApp, calls, email, social media or other digital means.
• Schedule, confirm, modify or cancel medical appointments.
• Compile an administrative or clinical record or preliminary record where applicable.
• Carry out a preliminary assessment of the reason for consultation to guide preparation for the appointment, without this replacing a formal medical consultation.
• Provide medical services for assessment, diagnosis, guidance, treatment, follow-up and interventional procedures where appropriate.
• Manage communication with the patient, authorized family members or companions.
• Issue prescriptions, notes, instructions, reports, certificates or medical documents where applicable.
• Coordinate services with hospitals, clinics, operating rooms, insurers, laboratories, imaging facilities, consulting physicians, anesthesiologists, nursing staff or providers related to care.
• Carry out billing, collections, administration, recordkeeping, internal control and compliance with tax, health, professional and legal obligations.
• Address requests, complaints, clarifications, administrative follow-up and subsequent communication related to medical care.
• Comply with obligations arising from the physician-patient relationship and applicable regulations.
• Maintain security measures, auditing, fraud prevention, prevention of misuse of the site and protection of the rights of the data controller, patients and third parties.

5. Secondary purposes

Additionally, we may process your personal data for purposes that are not essential to medical care, but that help improve communication, the website and the dissemination of health information:

• Send educational information about pain, treatments, procedures, prevention, health or topics related to Dra. Denise's medical practice.
• Send general reminders, informational campaigns, newsletters or valuable content.
• Measure the performance of advertising campaigns and the website.
• Create audiences, carry out remarketing, advertising measurement or conversion analysis, always in accordance with applicable consent and the configuration of cookies or similar technologies.
• Improve the experience of the website, forms, digital communication and content.
• Perform statistical, advertising and browsing analytics.

The use of testimonials, reviews, photographs, videos, clinical cases or any material that may identify a patient will require additional, express, specific and written consent. Refusal of these secondary purposes will not affect your ability to receive medical care.

6. Consent for sensitive personal data

By voluntarily providing data related to your health through forms, WhatsApp, calls, email, social media, documents you send or during medical care, you acknowledge that such data may be necessary for the medical, administrative, contact, care coordination and legal compliance purposes described in this notice.

In accordance with applicable legislation, your express consent is requested for the processing of your health-related sensitive personal data, exclusively for the primary purposes described herein and, where applicable, for those secondary purposes that you authorize separately.

If you do not wish to provide health data through digital means, you may simply request an appointment and provide the clinical information during the formal medical consultation.

7. Transfers of personal data

Your personal data may be disclosed or transferred to third parties when necessary for medical care, the legal relationship with you, compliance with legal obligations or the protection of rights. Such third parties may include:

• Hospitals, clinics, operating rooms, laboratories, imaging facilities, pharmacies or medical providers necessary for care.
• Consulting physicians, anesthesiologists, nursing staff or other health professionals related to your case.
• Insurers, claims administrators, brokers, hospitals or third-party payers, when you request it, authorize it or it is necessary to manage administrative procedures, authorizations, payments, reimbursements or claims.
• Health, tax, judicial, administrative authorities or any competent authority when there is a legal obligation, a well-founded request or a need to defend rights.
• Technology providers, hosting, CRM, email, scheduling, storage, analytics, advertising, messaging, billing and administration, under reasonable obligations of confidentiality and security.
• Accountants, legal, administrative advisors or auditors, when necessary for tax, accounting, administrative compliance or legal defense.
• Family members, companions or persons authorized by you to receive information, coordinate appointments or support your care.

Transfers necessary for the provision of the medical service, the legal relationship with the data subject, medical prevention or diagnosis, the administrative management related to care or compliance with legal obligations will not require additional consent when an exception provided by law applies. Transfers that do not fall under such exceptions will be carried out only with the corresponding consent.

8. Use of cookies, pixels and similar technologies

The website may use first-party and third-party cookies, pixels, tags, device identifiers, analytics technologies and advertising tools such as Google Analytics, Google Tag Manager, Meta Pixel, Google Ads and conversion events.

These technologies may be used for site operation, security, analytics, advertising measurement, campaign attribution, content improvement, measurement of button clicks, forms submitted, clicks to WhatsApp, remarketing and campaign improvement. The information collected may include IP address, browser or device identifiers, pages visited, browsing time, traffic source, campaign, related ads, conversion events and interactions with the site.

You may block, delete or disable cookies from your browser settings. In addition, the site provides a consent banner that allows you to accept, reject or customize non-essential cookies.

9. Communication via WhatsApp, social media and digital channels

If you contact Dra. Denise or her team via WhatsApp, Instagram, Facebook, email or another digital platform, your data may also be subject to the terms, conditions and privacy policies of those platforms, over which the data controller does not have full control.

It is recommended not to send urgent medical information, excessive information or sensitive documents through social media or instant messaging unless necessary. These channels may be used for contact, administrative guidance, appointment follow-up and consultation preparation, but they do not replace a formal medical consultation or emergency services.

10. Limitations of digital communication and medical emergencies

Information sent or received through the website, WhatsApp, social media, email or forms is intended for contact, administrative guidance, consultation preparation or administrative follow-up. Unless there is a formal medical consultation and an appropriate clinical assessment, such communication does not constitute a definitive diagnosis, medical prescription, individualized therapeutic recommendation or emergency care.

In the event of severe pain, sudden neurological symptoms, loss of strength, loss of sensation, fever, difficulty breathing, chest pain, altered state of consciousness, accident, bleeding, warning signs or any situation that may represent a medical emergency, go immediately to an emergency service or call the relevant emergency services.

11. ARCO rights and revocation of consent

You have the right to access your personal data, rectify it when it is inaccurate or incomplete, cancel it where legally applicable and object to its processing for specific purposes. You may also revoke the consent you have granted, without such revocation having retroactive effect or affecting processing necessary to comply with legal, health, tax, contractual, professional or rights-defense obligations.

To exercise ARCO rights or revoke consent, you must send a request to the email alejandro@dradenise.com or via WhatsApp at +52 55 4499 1139 with the following information:

• Full name of the data subject and the means by which to communicate the response.
• Document proving identity or, where applicable, the legal standing of the legal representative.
• A clear description of the right you wish to exercise and of the related personal data.
• Any document or information that facilitates locating your data.
• For rectification requests, indicate the requested modification and provide supporting documentation.

The data controller will communicate the decision made within a maximum period of 20 days from receipt of the complete request. If the request is granted, it will take effect within 15 days following the communication of the response. These periods may be extended in the cases permitted by law.

If you do not provide the data necessary for identification, contact, assessment, medical care, billing, administrative management or legal compliance, Dra. Denise may be unable to respond to your request, schedule an appointment, provide the service, issue documents or continue certain procedures.

12. Means to limit the use or disclosure of data

You may request the limitation of the use or disclosure of your personal data for secondary purposes by sending an email to alejandro@dradenise.com with the subject “Limitation of use of personal data”. You may also request to stop receiving informational, educational or promotional communications through the means available in each communication or through the email indicated.

The limitation for secondary purposes will not prevent the processing necessary for medical care, appointment-related contact, compliance with legal obligations, billing, clinical records, defense of rights or essential administrative follow-up.

13. Retention of personal data

Personal data will be retained for the time necessary to fulfill the medical, administrative, tax, health, legal and professional liability purposes described in this notice. Health data and clinical record information will be retained in accordance with the applicable obligations regarding health matters, clinical records, professional liability and other applicable legal provisions.

Once the applicable purposes and periods have been fulfilled, the data may be blocked, deleted or retained only when there is a legal obligation, a need to defend rights, tax, health or professional compliance, or when the law permits or requires its retention.

14. Security measures

The data controller adopts reasonable administrative, technical and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access or processing. Such measures may include restricted access, confidentiality duties, administrative controls, safekeeping of files, protection of records, use of technology providers, digital security practices and confidentiality training or instructions for staff or collaborators involved in care or administration.

No physical or digital system can guarantee absolute security. In the event of a security incident that significantly affects the financial or moral rights of data subjects, the appropriate measures will be taken in accordance with applicable legislation.

15. Data of minors

In the case of minor patients, the data must be provided by the corresponding mother, father, guardian or legal representative. The processing of minors' data will be carried out with regard to the best interests of the minor, medical confidentiality and applicable legal obligations.

16. Changes to the privacy notice

This privacy notice may be modified due to legal, regulatory, operational, technological, service, digital tool or internal practice changes. The modifications will be available on the website dradenise.com. When the changes are significant, they may be communicated through the available contact channels, when reasonable and appropriate.

17. Contact

For questions about this notice, the exercise of ARCO rights, revocation of consent or limitation of the use of personal data, you may contact the data controller via:

• Privacy email: alejandro@dradenise.com
• Phone or WhatsApp: +52 55 4499 1139
• Address: Centro Médico ABC Observatorio, Torre Mackenzie, Consultorio 514, Sur 136 No. 116, Col. Las Américas, Alcaldía Álvaro Obregón, C.P. 01120, Ciudad de México, México

18. Date of last update

Last updated: August 12, 2026.