COMPREHENSIVE PRIVACY NOTICE
Last updated: February 2026
1) Identity and address of the person in charge
The Dr. Francisco Rafael Hernández Pérez (hereinafter, the “Responsible”), with address at Hospital Punta Mita, Acceso a número 1, C.P. 63734, Corral del Risco, Nayarit, Mexico, is responsible for the use, treatment and protection of your personal data according to the Federal Law for the Protection of Personal Data in Possession of Private Parties (LFPDPPP) and its Regulations.
Privacy contact information:
- E-mail: privacidad@drfranciscohernandez.com (or the official mail assigned)
- Phone: +52 667 303 2366
- Hours of operation: Monday to Friday from 08:00 to 18:00 hrs.
- Website: https://drfranciscohernandez.com
2) Personal data we collect
For the purposes described in this Privacy Notice, the Responsible may collect and process the following categories of personal data, either directly in consultation, through our website, or through digital communication channels (WhatsApp/Calls):
a) Identification and contact:
Full name, date of birth, telephone number, e-mail address, city/state of residence and other contact information strictly necessary.
b) Data for attention and follow-up (Sensitive Data):
Reason for consultation, pathological and heredofamilial history, symptoms, diagnoses, treatments, evolution notes, laboratory results, clinical images (X-rays, MRI, CT scans) and any information directly related to your present or future health condition.
c) Administrative and billing data:
Fiscal data (RFC, fiscal address), information on Major Medical Insurance policies, and vouchers or administrative references necessary for the relationship and management of services.
d) Navigation data (web site):
Online identifiers and technical data (IP address, browser type, pages visited, interaction events) collected when you interact with our digital platform.
3) Sensitive personal data and express consent
In accordance with current legislation, data relating to your present or future state of health are considered to be sensitive personal data.
For the processing of such data, the Data Controller will collect your express consent through digital mechanisms (by checking the “checkbox” provided in our web forms) or in person (by autographic signature when opening your physical clinical record - NOM-004-SSA3-2012).
4) Purposes of processing
4.1 Primary purposes (Necessary for the provision of the medical service)
Your personal data will be used for the following purposes that give rise to and are necessary for the relationship with the Responsible:
- Schedule, confirm, modify and manage your appointments (face-to-face or virtual).
- Contact you by reasonable means (Call, SMS, WhatsApp, Email) for pre- and post-operative logistical care.
- To provide specialized medical care in traumatology and orthopedics, clinical assessment, diagnosis, treatment and follow-up.
- Integration, preservation and updating of your clinical record, in strict compliance with Mexican health regulations.
- Management of administrative aspects, invoicing, and coordination with insurance companies (if applicable).
4.2 Secondary purposes (Not required; subject to your choice)
In addition, and only if you do not object, we may process your data for:
- Sending educational medical information, service updates or general health reminders.
- Conducting satisfaction surveys to improve service at our facilities.
- Analytics and measurement of website performance and effectiveness of our digital campaigns.
You can refuse the processing of your data for these secondary purposes at any time by sending an email to our privacy contact.
5) Choices and means to limit the use or disclosure of your data
To limit the use of your personal data for secondary purposes, you may:
- Send an email to privacidad@drfranciscohernandez.com with the subject “Limit data usage” indicating your full name and the requested limitation.
- To request it directly by sending a message to the official channel of WhatsApp (+52 667 303 2366), where we will confirm the registration of your application.
6) Cookies and tracking technologies
We inform you that we use on our web site cookies and similar tracking technologies for the purpose of monitoring user behavior, measuring traffic analytics and ensuring the proper functioning of the site.
- Strictly necessary cookies: For the technical operation and safety of the site.
- Analytics and marketing cookies: To understand how you interact with the web (Google Analytics) and measure advertising conversions (Meta/Google Ads).
You can disable the use of non-essential cookies by using the preferences banner (Cookie Consent) when you first enter the site, or by modifying the privacy and security settings of your Internet browser.
7) ARCO rights (Access, Rectification, Cancellation and Opposition)
You, as the data subject, have the right to:
- Access to your personal data and to the details of their processing.
- Rectify them if they are inaccurate or incomplete.
- Cancel them when it considers that they are not required for any of the aforementioned purposes.
- Oppose to the processing of such data for specific purposes.
To exercise your ARCO rights, you must send a request to the following email address privacidad@drfranciscohernandez.com or present it physically at our domicile, enclosing:
- Full name of the owner and means of communicating the response (e-mail or address).
- Copy of valid official identification (INE, Passport) or document proving legal representation.
- Clear and precise description of the personal data on which you are seeking to exercise any of the ARCO Rights.
Legal response times: The person in charge will inform you of the decision taken within a maximum period of 20 (twenty) working days counted from the date on which the request was received. If the request is accepted, it will be effective within the following 15 working days.
8) Revocation of consent
You may revoke the consent you have given us to process your information. However, please note that for primary health care purposes, revocation may make it impossible for us to continue providing our clinical services, as the medical record is a regulatory requirement.
9) Changes to the Privacy Notice
This notice may be modified, changed or updated as a result of new legal requirements, our own operational needs or changes in our service model. We are committed to keep you informed about changes by posting the updated version on our website: https://www.google.com/search?q=https://drfranciscohernandez.com/aviso-de-privacidad/.
10) Treatment in special medical situations
In situations of medical emergency where the holder is not in a position to give consent, the processing of personal and sensitive data will be carried out in accordance with the legal exceptions set forth in Article 10 of the LFPDPPP, always acting under the duty of secrecy and professional ethics for the benefit of the patient's health.