Dermacancún
Privacy Notice
Last updated: November 2026
At Derma Cancún, we protect your information. This notice explains what personal data we collect, how we use it, and how you can exercise your rights.
1. Identity and address of the controller
The person responsible for processing your personal data is Judith Sam Verdín, who operates the Derma Cancún clinic (hereinafter, “Derma Cancún”). Address: Pabellón Caribe Building, ground floor, Suite 10, Nichupté Ave., Zip Code 77505, Cancún, Quintana Roo, Mexico. Phone: 998 884 5775 · WhatsApp: 998 159 4911 (messages and appointments). Privacy-related email: dermacancun@hotmail.com. This notice is issued in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025.
2. Personal data we process
• Identification and contact details: name, phone number or WhatsApp, email address. • Appointment details: services of interest, requested date and time. • Sensitive personal data (health data), when provided via WhatsApp, by phone, or during a consultation: reason for consultation, medical history, symptoms, diagnoses, treatments, clinical photographs, and other information from your medical record. • Browsing data: IP address, browser type, and pages visited, which are automatically collected by the site platform and third-party services. The “My Appointment” list you create on the site is saved only on your device. We do not receive it until you send it via WhatsApp.
3. Purposes of the processing
Primary purposes (necessary for our relationship with you): • Schedule, confirm, reschedule, and follow up on your appointments. • Answer your questions and provide you with quotes. • Provide you with dermatological and aesthetic medical services and maintain your medical record in compliance with applicable regulations. • Fulfill legal obligations and respond to requests from authorities. Secondary purposes (require your consent): • Send you educational information and reminders about skin care and periodic check-ups. • Statistical purposes and the improvement of the website and our services. If you do not want us to process your data for the secondary purposes, you can let us know at any time through the means provided in section 6. Your refusal does not affect the care you receive.
4. Sensitive data and consent
Health data are sensitive personal data. To process them, the law requires your express written consent, which we will request via handwritten or electronic signature when scheduling or at your first appointment. For your privacy, detailed health data are collected during the appointment. Sending your data or photographs via WhatsApp is your decision, and we will use them solely for the purposes of this notice.
5. Who we share your data with
We do not sell your personal data. To operate, we use service providers that process information on our behalf or through their own platform: Shopify (website platform), WhatsApp / Meta (messaging), and Google (maps and fonts). Each is governed by its own privacy notices. We may share your data with laboratories, other healthcare professionals, or authorities when necessary for your care or required by law. In all other cases, we will only do so with your consent.
6. How to limit the use or disclosure of your data
You can request that we stop sending you communications or limit the use of your data by writing to dermacancun@hotmail.com or via WhatsApp at 998 159 4911. You can also revoke your consent through the same channels.
7. ARCO Rights
You have the right to Access, Rectify, Cancel, and Object to the processing of your data (ARCO rights). To exercise these rights, send a request to dermacancun@hotmail.com with: • Your name and an address or means to receive notifications. • A document proving your identity (or that of your representative). • A clear and precise description of the data and the right you wish to exercise. • Any other element that facilitates locating your data. We will respond within the timeframes established by law. Your medical record is kept for the period specified by applicable regulations, so some cancellation requests may not be granted during that period.
8. Cookies and similar technologies
The site uses technical cookies from the Shopify platform to function and measure its performance. In addition, the map and fonts are loaded from Google servers, which may use their own cookies. You can disable or delete them from your browser settings; some features may stop working.
9. Changes to this notice
Any changes will be published on this page, with the date of the update. If the purposes or the way we process your sensitive data change, we will notify you via WhatsApp or email and, when required by law, ask for your consent again.
10. Authority
If you believe that your right to personal data protection has been violated, you can contact the Secretariat Against Corruption and for Good Governance, the authority that oversees compliance with the law.