Data controller
Jesús Omar Barajas Ayala, an individual operating under the trade name Luxury Medical Spa, with an address at Calle Morelos, Mza. 218, Lote 02, Col. Ejidal, Cabo San Lucas, Baja California Sur, Mexico, is responsible for personal data received in connection with requests for information, appointments, assessments and services.
This notice applies to the website and initial contact by telephone or WhatsApp. Clinical records and procedure consent forms may contain supplementary notices and specific formats.
Data we may process
Depending on your interaction and requested service, we may receive:
- Identification and contact data, such as name, telephone number and preferred contact method.
- Information related to your appointment, service or procedure of interest.
- Technical and browsing data, such as pages visited, device type and website interactions, only when you authorize optional analytics.
- Billing or payment information when necessary to fulfill a patient request.
- Sensitive personal data, such as medical history, health status, medications, allergies, clinical photographs and other information required to assess or provide a health service.
The website does not contain clinical forms. If a person voluntarily shares information through WhatsApp, that communication is also processed on the provider’s platform under its own terms and policies.
Website measurement
With your consent, we use Google Analytics 4 to obtain browsing statistics and measure actions such as selecting services or opening contact links. This helps us improve the usefulness of the website; it is not used to receive clinical records, diagnoses or conversation content.
Google acts as a technology provider and may process information under its own policies. You may refuse or withdraw permission from our cookie policywithout affecting access to the website or your ability to request an appointment.
Purposes of processing
Primary purposes
- Respond to requests for information and availability.
- Schedule, confirm, reschedule and follow up on appointments.
- Perform assessments and determine whether a service may be appropriate.
- Create and retain records required for care and follow-up.
- Manage payments, billing, patient safety and health or legal obligations.
- Address questions and requests concerning personal data rights.
Secondary purposes
With authorization, we may send reminders, satisfaction surveys, news or promotional information. Refusing or withdrawing consent for these purposes does not affect requested care.
Consent and limitation of use
When processing requires consent—particularly for sensitive data, photographs, promotional communications or additional purposes—it will be requested through the appropriate form or mechanism.
You may request that promotional use of your data be limited by contacting us through WhatsApp at624 315 0680or by submitting a request at the address above.
Transfers and third parties
Data may be communicated to professionals or providers participating in care, laboratories, technology or administrative providers operating under instructions and confidentiality duties, and authorities when required by law.
Transfers requiring consent will occur only after it has been obtained. Transfers necessary for medical care, legal compliance or the protection of rights will follow applicable law.
ARCO rights
You may request access, rectification, cancellation or opposition regarding the processing of your data and may withdraw consent when applicable.
Your request should include:
- Your name and a method for receiving notifications.
- A document proving identity or legal representation.
- A clear description of the data and the right you wish to exercise.
- Information or documents that help us locate the data.
Requests may be submitted at Luxury Medical Spa’s address. You may also begin the process via WhatsApp at 624 315 0680; before sending identification or clinical information, our team will explain the appropriate secure channel.
A decision will be communicated within the applicable legal period, currently up to twenty days after receipt. If granted, it will be implemented within the following fifteen days. These periods may be extended once when circumstances justify it.
Security, retention and changes
Administrative, technical and physical safeguards proportionate to the nature of the information will be applied. Data will be retained for the time required by the stated purposes and applicable health, tax or legal provisions.
Changes to this notice will be communicated on this page with an updated date. The Spanish version is the primary legal notice; this English version is provided for accessibility.
Reference framework:Mexico’s Federal Law on Protection of Personal Data Held by Private Parties ↗.