Legal
Privacy notice
Last updated: July 29, 2026.
This Notice describes how your personal data is collected, used, protected, and, where applicable, shared when you visit this site or contact us, in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
1. Data controller
The party responsible for processing your personal data is Dr. Alfredo Chama Naranjo, plastic surgeon, with an address at Vía Rápida Ote. 15000, Chapultepec Alamar, C.P. 22110, Tijuana, Baja California, Mexico (Plaza Península). Contact: contacto@dralfredochama.com · WhatsApp +52 664 585 1602.
2. Data we collect
Depending on how you interact with us, we may collect: identification and contact data (name, email, phone, and whatever you provide through forms or WhatsApp); browsing data (IP address, device and browser type, pages visited, cookies); and sensitive personal health data, when you share information about your health status or your interest in a procedure while scheduling or during a consultation.
3. Sensitive data and express consent
Information related to your health is sensitive personal data. Under the LFPDPPP, its processing requires your express, written consent. You are not required to provide health data through the site; we recommend keeping that information for your direct medical consultation. Consent for clinical treatment and, where applicable, for the use of images is collected separately through the corresponding forms.
4. Purposes
Primary purposes (necessary to provide you care): responding to your requests for information and appointments, contacting you to schedule and follow up on your assessment, coordinating the care you request, and complying with legal obligations. Secondary purposes (you may opt out without affecting your care): reminders and communications about services, and statistical purposes and site improvement. To opt out of secondary purposes, write to contacto@dralfredochama.com.
5. Means to limit use or disclosure
You may request at any time that we limit the use or disclosure of your data for secondary purposes, by writing to contacto@dralfredochama.com. Your decision will not affect the medical care you receive.
6. Your ARCO rights and withdrawal of consent
You have the right to Access your data, Rectify it when inaccurate, Cancel it when you consider it unnecessary, and Object to its processing for specific purposes. You may also withdraw, at any time, the consent you've given us to process your personal data, including sensitive health data, without retroactive effect. Exercising these rights is free of charge. To exercise them, send your request to contacto@dralfredochama.com indicating your name and a means of contact, a clear description of the data and the right you wish to exercise, and a document proving your identity. We will respond within the timeframes established by law.
7. Transfers and sharing
We do not sell your personal data. To operate the Site and provide you care, we share your data with processors who handle it on our behalf and under our instructions (for example, the Site's hosting provider, our email service, and the WhatsApp Business messaging platform, operated by Meta Platforms, Inc.). These processors may be located outside Mexico, including the United States, so your data could be transferred internationally; we require them to meet contractual confidentiality and data-protection obligations. We may also share your data with competent authorities when there is a legal obligation to do so. Outside of these cases, we do not transfer data to other data controllers without your consent, except for the exceptions provided under Article 37 of the LFPDPPP.
8. Cookies and tracking technologies
This site may use cookies and similar technologies (including, where applicable, pixels from platforms such as Meta or Google) for its operation, to measure traffic, and to understand the performance of our campaigns. You can disable cookies from your browser settings; some features may stop working correctly.
9. Data retention
We retain your contact data only for as long as necessary for the purposes described and to comply with legal obligations. Any clinical information that forms part of a medical record is retained in accordance with the Mexican Official Standard NOM-004-SSA3-2012 on clinical records, and other applicable health regulations.
10. Information security
We apply reasonable administrative, technical, and physical security measures to protect your data. However, no method of transmission over the Internet is completely secure, so we cannot guarantee absolute protection.
11. Internet communications
Email, forms, and messaging are not completely secure channels. We ask that you not send detailed or sensitive medical information through these means; that information will be handled appropriately during your consultation.
12. Use of images and testimonials
We do not use photographs, "before and after" images, or identifiable patient testimonials for promotional purposes without your prior, specific, written authorization, which you may revoke at any time. Authorization for clinical treatment is independent of any authorization for image use.
13. Minors
This site is not directed at minors. Processing a minor's data requires the consent of a parent or legal guardian.
14. California residents (CCPA/CPRA)
We operate from Mexico and do not necessarily qualify as a "business" subject to the CCPA/CPRA; nonetheless, as a courtesy to our patients from California, we honor these requests. Medical care is provided in Mexico, so it is not subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA): the processing of your data is governed by the LFPDPPP and by this Notice. If you are a California resident, your state's law may grant you the rights to Know what data we collect and how we use it, Delete the data we hold about you, Correct inaccurate data, Opt out of the sale or "sharing" of your data, Limit the use of your sensitive information, and Not be discriminated against for exercising these rights. We do not sell your personal information. To exercise any of these rights, write to contacto@dralfredochama.com; we will address your request within applicable timeframes.
15. Third-party sites
Our site may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites.
16. Changes to this notice
We may update this Privacy Notice. We will post the current version at dralfredochama.com with its "last updated" date. We recommend reviewing it periodically.
17. Contact
For any questions about this Notice or about the processing of your personal data: contacto@dralfredochama.com · WhatsApp +52 664 585 1602.