Personal data processing policy

Luisa Fernanda Lizcano Narváez, an individual, holder of Colombian citizenship ID and tax ID (NIT) 1.019.051.099-7, with offices at Av. Calle 127 #7A-53, INO Building, office 4004, Usaquén, Bogotá D.C., Colombia. Email [email protected], phone +57 320 339 3588.

Identification and contact data: name, ID number, phone, WhatsApp, email address and city.

Scheduling and communication data: appointments requested, confirmed, rescheduled or cancelled, and the content of WhatsApp and email conversations.

Payment data: amount, status and transaction reference. Card or account details are received directly by the payment gateway; we neither see nor store them.

Health-related data: whatever you choose to include in your message or provide during the consultation. Law 1581 of 2012 classifies these as sensitive data.

Browsing data: as described in the cookies section.

To handle and respond to your information requests.

To book, confirm, reschedule and remind you of appointments by WhatsApp and email.

To manage quotes, charges and payments for services.

To send you educational material you expressly requested.

To comply with legal, accounting and medical-record obligations once a doctor-patient relationship exists.

Data is not used for third-party advertising and is not sold.

Health data is sensitive. You are NOT required to authorize its processing or to provide it: you may request general information without describing your medical condition.

When you do provide it, it will be processed solely for the purposes in this policy, with access restricted to staff who need it to assist you.

Where the data subject is a minor, processing follows their best interest and requires authorization from their legal guardian.

Our WhatsApp is first handled by a virtual assistant that uses artificial intelligence to understand and draft messages. It answers general questions, sends educational material and books, reschedules or cancels appointments according to the practice's rules.

The assistant does not diagnose, prescribe or interpret test results, and makes no medical decisions. If there are signs of an emergency, or whenever you ask, the conversation is handed over to a member of the team.

To provide the services, data is processed on the controller's behalf, and only for these purposes, by the following providers: Supabase (database and application servers), Cloudflare (website hosting and document storage), Meta Platforms (WhatsApp Business), Anthropic (artificial intelligence model behind the virtual assistant), Resend (email delivery), Google (scheduling calendar) and Bold (payment gateway, Colombia).

Several of these providers are located in the United States or other countries. By authorizing processing, you also authorize this international transfer or transmission, made to providers with security measures and contractual confidentiality commitments, in accordance with Law 1581 of 2012.

To access, update and correct your data.

To request proof of the authorization given.

To be informed about how your data has been used.

To file complaints with the Superintendency of Industry and Commerce for breaches of the law.

To revoke authorization and request deletion, where no legal or contractual duty requires retention.

Single channel: [email protected]. State your name, the right you wish to exercise and the relevant facts.

Enquiries are answered within a maximum of ten (10) business days, extendable by five (5) further business days.

Complaints are handled within fifteen (15) business days, extendable by eight (8) further business days. If a complaint is incomplete, you will be asked within the following five (5) days to complete it.

Reasonable technical and administrative measures are applied to prevent unauthorized access, loss or alteration of data.

Data is retained for as long as necessary for the stated purposes. Medical records are retained for the periods required by health regulations, under the confidentiality that applies to them.

This site uses browser local storage to remember preferences such as language and whether you have already accepted this notice. That information does not leave your device.

This site does not use third-party analytics tools or advertising pixels. If they are enabled in the future, they will be described here beforehand.

This policy is effective from November 5, 2026 and may be amended. Substantial changes will be announced through this same channel.