Privacy Notice
Personal Data Controller
MEDICAL ORGANIC SPA, S.A. DE C.V. (hereinafter, “MOS” or the “Controller”), with its registered tax address at Calle 23 No. 173 D, Colonia Buenavista, C.P. 97127, Mérida, Yucatán, is the legal entity responsible for processing your personal data, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”).
Location where services are provided
We provide services at our clinics in Polanco, Mexico City (Av. Pdte. Masaryk 178, 4th Floor, Polanco V Secc., Miguel Hidalgo, C.P. 11560, Mexico City) and Buenavista, Mérida (Calle 23 No. 173 D, Col. Buenavista, C.P. 97127, Mérida, Yucatán).
Personal data we collect
To provide our services, the Controller collects the following categories of data:
- Identification and contact information: name, date of birth, sex, address, telephone number, email address, and emergency contact.
- Sensitive personal data (health-related): medical conditions or physical conditions relevant to treatment safety; medications currently being used (for example, anticoagulants, retinoids, isotretinoin, or glycolic acid); allergies and skin sensitivity; surgeries, grafts, tattoos, or permanent makeup in the area to be treated; use of contraceptives; and confirmation that you are not pregnant.
- Clinical photographs: images of your face or the area to be treated, for medical record and treatment follow-up purposes.
Your sensitive personal data and clinical photographs are processed with your express consent, provided through the informed consent form you sign at the beginning of your treatment.
Purpose of processing
Necessary purposes
These purposes are necessary for us to provide our services:
- To identify you, locate you, and communicate with you.
- To provide the requested aesthetic and medical services.
- To create, update, and safeguard your clinical record.
- To assess the safety and suitability of treatments for you.
- To document the progress of your treatment through clinical photographs (before-and-after records).
- To schedule and remind you of appointments and follow up on contracted services.
- To comply with applicable legal obligations.
Optional purposes
These purposes are not necessary for the provision of services:
- To send you communications about MOS products, services, and promotions.
If you do not want your data to be used for these optional purposes, you may let us know now or at any time by emailing hello@clinicamos.com.mx. Your refusal will not be grounds for denying you our services.
The use or disclosure of your image for publicity or promotional purposes (including social media and advertising) is not covered by this notice. It requires separate consent, which is obtained independently.
Transfers of personal data
The Controller does not transfer your personal data to third parties for their own purposes, or for campaigns, partnerships, or commercial purposes.
To provide our services, your data may be processed by service providers acting as data processors on behalf of and under the instructions of MOS, and who are bound by the same confidentiality obligations (for example, technology, scheduling, or communications providers). These processors do not use your data for their own purposes.
How to limit the use or disclosure of your data and exercise your ARCO rights
You have the right to access your personal data; correct it if it is inaccurate or incomplete; request its cancellation if you believe it is no longer necessary for the purposes described in this notice; or object to its processing for specific purposes. These are known as ARCO rights: Access, Rectification, Cancellation, and Objection.
To exercise these rights, or to limit the use or disclosure of your data, you may send your request to hello@clinicamos.com.mx. We will respond within the time limits established by the Law.
Security measures
The Controller maintains administrative, technical, and physical security measures to protect your personal data against loss, alteration, destruction, or unauthorized use. These measures include the use of secure protocols (SSL) and data encryption on its website.
Use of cookies
The Controller’s website may use cookies to improve your browsing experience. Cookies are small files placed on your device that allow us to remember your preferences. You can disable them in your browser settings, although some website features may not function properly as a result.
Changes to the privacy notice
This notice may be amended or updated in response to new legal requirements, changes to our services or practices, or other reasons. Any changes will be made available on our website and displayed at our clinics.