Privacy Policy
Last updated
Effective date: October 14, 2026
Mérida Health Connect (“MHC,” “we,” “our,” or “us”) respects the privacy of clients, prospective clients, and website visitors.
This Privacy Policy explains how we collect, use, disclose, protect, and manage personal information, including sensitive health information, in connection with our healthcare navigation and travel concierge services.
1. Identity of the Data Controller
The party responsible for determining how personal data is processed is:
Legal name: Nicolas Joseph Vanderzanden Flores
Trade name: Mérida Health Connect
Privacy contact: [email protected]
Telephone: +52 999 904 2297
2. Personal Information We Collect
Depending on your interaction with MHC, we may collect:
Identity and contact information: Name, date of birth, email address, telephone number, country of residence, and preferred contact method.
Travel and coordination information: Travel dates, accommodation preferences, transportation requirements, appointment availability, and related logistics.
Payment and billing information: Payment status, transaction records, invoicing details, and relevant billing information. Payment-card information may be processed by authorized third-party payment providers.
Sensitive health information: Medical history, diagnoses, symptoms, medications, allergies, treatment goals, laboratory results, imaging, medical reports, relevant correspondence, and other information you voluntarily provide for healthcare navigation.
Technical information: Information generated when you use our website or booking services, potentially including device information, browser details, cookies, and usage information, depending on the technologies implemented.
3. Purposes of Processing
We use personal information for purposes necessary to provide requested services, including:
- Responding to inquiries and booking appointments.
- Conducting administrative client intake.
- Arranging consultations with independent physicians.
- Coordinating medical appointments, referrals, and diagnostic services.
- Sharing authorized information with selected healthcare professionals.
- Organizing requested travel and concierge services.
- Processing payments, maintaining accounting records, and complying with legal obligations.
- Communicating about appointments, schedules, service changes, and follow-up coordination.
- Maintaining appropriate records and protecting the security of our systems.
Optional purposes, requiring appropriate consent where applicable, may include marketing communications, newsletters, testimonials, promotional photography, and nonessential website analytics or advertising technologies.
We do not require clients to consent to optional marketing uses as a condition of receiving necessary services.
4. Sensitive Medical Information and Consent
Health information is considered sensitive personal data under Mexican law.
Before collecting or processing sensitive health information, MHC will obtain the express consent required by applicable law, unless a statutory exception applies.
Consent may be documented through an appropriate signed or legally valid electronic authorization.
Clients may be asked to authorize disclosure of relevant records to identified physicians, specialists, hospitals, diagnostic facilities, or other parties involved in requested coordination.
We will seek to limit disclosures to information reasonably necessary for the authorized purpose.
We will not use identifiable medical information in testimonials, advertisements, or public materials without separate, specific authorization.
5. Sharing Personal Information
Where appropriate and legally permitted, information may be disclosed to:
Healthcare professionals and facilities: To arrange or support consultations, referrals, diagnostic testing, and other client-requested services.
Technology service providers: Including appointment-booking, secure record-management, communications, hosting, and payment-processing providers.
Travel and concierge partners: Where necessary to provide requested transportation, accommodation, or other logistics, generally without sharing medical details unless necessary and authorized.
Professional advisers and authorities: Accountants, legal advisers, regulators, or public authorities where legally appropriate or required.
Certain disclosures may constitute transfers requiring separate consent under Mexican law. MHC will obtain that consent where applicable and will distinguish such transfers from processing carried out by service providers acting on MHC’s instructions.
We do not sell clients’ identifiable medical information.
6. International Processing and Storage
Some of our technology providers may process or store information outside Mexico.
Where international processing or transfers occur, MHC will take steps required by applicable law, including appropriate contractual protections and consent where necessary.
7. Jane, Payment Providers, and Other Technology
MHC may use Jane for scheduling, client administration, and related services, and payment providers integrated with Jane for payment processing.
Those providers may process information necessary to deliver their services under their applicable contractual and privacy arrangements.
Clients should also review any separate privacy notices presented by the relevant technology or payment providers.
MHC will configure access permissions and data handling to reflect staff responsibilities and confidentiality requirements.
8. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information processed.
These may include restricted staff access, individual user accounts, access controls, staff confidentiality obligations, and secure technology systems.
No internet-based system can guarantee absolute security.
If a security incident occurs, MHC will assess its legal notification and remediation obligations and take appropriate action.
9. Data Retention
Personal information will be retained only for as long as necessary for the purposes for which it was collected and to meet applicable legal, medical-record, accounting, contractual, and dispute-resolution requirements.
Retention periods may differ between administrative records and records maintained by independent healthcare providers.
When retention is no longer required, information will be securely deleted, anonymized, or otherwise handled in accordance with applicable law.
10. Your Privacy Rights — ARCO
Under applicable Mexican law, individuals may exercise rights relating to:
- Access: Request information about personal data held.
- Rectification: Request correction of inaccurate or incomplete information.
- Cancellation: Request cancellation of data where legally appropriate.
- Opposition: Object to certain uses of personal information.
To submit a request, contact:
Requests should provide sufficient information to identify the requester and the data or rights concerned. We may request reasonable identity verification.
We will respond within the periods required by applicable law and explain any lawful grounds for denying or limiting a request.
11. Withdrawal of Consent
Where processing relies on consent, individuals may request its withdrawal through our privacy contact.
Withdrawal does not retroactively invalidate lawful processing already completed and may be subject to legal retention requirements or other statutory exceptions.
Withdrawal of consent necessary to provide a requested service may affect our ability to continue that service.
12. Communications and Marketing
We may send messages necessary to coordinate appointments, provide service updates, or respond to client inquiries.
Optional marketing communications will be subject to applicable consent requirements. Recipients may opt out of such communications using the instructions provided or by contacting MHC.
13. Cookies and Website Analytics
Our website may use essential cookies necessary for website functionality and, if enabled, analytics or other optional technologies.
We will not intentionally place identifiable sensitive medical information into advertising or analytics tracking systems.
14. Children’s Information
MHC’s general website and booking services are intended primarily for adults.
Services involving minors will require appropriate authorization from a parent, guardian, or other legally authorized representative, subject to applicable law and the minor’s rights.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology, legal obligations, or data-handling practices.
Updated versions will be published on our website, and material changes will be communicated through appropriate channels where required.
16. Contact
For questions, privacy requests, complaints, or concerns regarding personal information, contact:
Mérida Health Connect
Email: [email protected]
Phone: +52 999 904 2297
Legal operator: Nicolas Joseph Vanderzanden Flores
Important: Where required, express consent for processing sensitive medical information will be obtained separately from general acceptance of this Privacy Policy.