Privacy Policy

Because we are a medical spa operating in Mexico, clinical information is classified as datos personales sensibles under the LFPDPPP and must receive the highest level of protection.

We clarify the following:

• We do not collect, store, or transmit any medical history, clinical notes, or sensitive health data through our website.

• Any medical data related to treatments, procedures, diagnoses, or clinical evaluations is recorded exclusively in our secure medical records system, in compliance with NOM-004-SSA3-2012.

• Our website contact forms are intended for general inquiries only and must not be used to submit detailed medical information.

• Website analytics tools do not collect sensitive health information.

• Any handling of sensitive clinical data occurs only inside our clinic, through authorized personnel, with written patient consent as required by the LFPDPPP.

If you have privacy questions, you may contact us at info@mavemedspa.com.

A. Information You Provide Directly

We may collect personal information that you voluntarily submit through:

• Contact forms

• Lead forms on treatment pages

• Newsletter sign-ups

• Appointment requests

• Non-medical online purchases

This data may include: Name, Email, Phone number, Country or location information, Preferred communication method, Treatment of interest, General questions or comments.

We do not request or require medical history through the Site.

B. Information Collected Automatically

When you visit the Site, we automatically collect non-identifiable usage data, including: IP address, Browser and device type, Pages visited, Time spent on the Site, Referring URL, Cookie data.

This information helps us improve website performance and user experience.

We use marketing and performance tools, including:

• Google Analytics

• Meta Pixel (Facebook and Instagram)

• TikTok Pixel

These tools allow us to understand user behavior and evaluate advertising effectiveness. They do not access or collect clinical information or sensitive personal data.

All tracking is limited to website usage and marketing optimization.

We may use your information to:

• Respond to messages or appointment requests

• Provide information about services

• Improve website functionality and user experience

• Send marketing communications, if you have opted in

• Analyze traffic and interaction patterns

• Optimize advertising campaigns

Your data will never be used for purposes incompatible with those listed above without obtaining your consent.

We do not sell your personal information.

We may share non-sensitive personal data with:

• Website service providers

• Marketing platforms

• Hosting providers

• CRM or booking systems

These third parties are required to follow privacy safeguards.

We do not share clinical or sensitive data through the Site.

Cookies help us:

• Understand how visitors use the Site

• Improve navigation and performance

• Personalize content

• Deliver relevant ads

You may disable cookies through your browser settings, although certain features may be affected.

Under the LFPDPPP, you have ARCO Rights:

A. Access your data

R. Rectify inaccurate data

C. Cancel data when appropriate

O. Object to the processing of your data for specific purposes

You also have rights to: Withdraw consent, Limit the use or disclosure of your personal data, Opt out of marketing communications.

To exercise your ARCO rights, please email: info@mavemedspa.com. We will respond within the legal timeframe established by the LFPDPPP.

We implement administrative, physical, and technical safeguards to protect personal data. These include:

• Secure encrypted servers

• Access controls for personnel

• Regular security reviews

Please avoid submitting sensitive medical or diagnostic information through public website forms.

• Website inquiry data: retained only as long as necessary to fulfill your request or for legal compliance.

• Marketing opt-in data: retained until you unsubscribe or request deletion.

• Clinical records: stored securely and separately as required by NOM-004-SSA3-2012 and applicable Mexican health regulations.

Because many of our digital tools are U.S. based, some non-sensitive personal data may be transferred to servers located outside Mexico. Any such transfer complies with Articles 36 and 37 of the LFPDPPP, and we ensure appropriate safeguards are in place.

No sensitive health information is transferred internationally through this Site.

Our Site may link to external websites. We are not responsible for their privacy practices. Please review their policies before providing personal information.

This Site is not intended for minors under 16. We do not knowingly collect data from minors. Parents or guardians may request deletion of minor data by contacting us.

We may update this Privacy Policy periodically to reflect legal, operational, or technological changes. Revisions will be posted with an updated “Last Updated” date.