Last updated: November 2026 · Tijuana, Baja California, Mexico
Your medical information is protected. This Privacy Notice is issued under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its applicable regulations and the Mexican Official Standard NOM-004-SSA3-2012 on Clinical Records. All health information you share with us is also protected by medical professional secrecy.
1Data controller identity and address
Clarity Eye Clinic (“Clarity”), an ophthalmology clinic located at José María Velazco #2440, Suite 204, Supermanzana Edificio Torre 21, Zona Urbana Río Tijuana, ZIP 22010, Tijuana, Baja California, Mexico, is responsible for processing and safeguarding your personal data.
To provide eye care, schedule your appointments and follow up on your treatment, we may collect the following data through this website, WhatsApp, phone, email or in person at the clinic:
Identification and contact: full name, date of birth, phone or WhatsApp number, email address, and city and country of residence.
Billing (only if you request an invoice): name or company name, Mexican tax ID (RFC), tax regime, tax address and email for receipts.
Sensitive personal data (health): reason for your visit, visual symptoms, eye and general medical history (for example, diabetes or high blood pressure), medications, allergies, previous surgeries, prescription and visual acuity, and results of diagnostic tests such as optical coherence tomography (OCT), corneal topography, visual fields, ocular ultrasound, intraocular lens calculation and clinical eye photographs.
Browsing data: approximate IP address, device and browser type, pages visited and how you reached the site, only through the cookies you authorize (see section 4).
Data about your health is sensitive personal data. We process it only with your express written consent, which we obtain when we open your clinical record, and with the highest level of confidentiality.
We recommend not sending detailed medical information through the contact form. You can share it securely during your appointment.
3Purposes of processing
Primary purposes, necessary for the care you request:
Scheduling, confirming, rescheduling and reminding you of appointments.
Answering requests sent through our form, WhatsApp, phone or email.
Providing eye exams, diagnostic tests, treatments and ophthalmic surgical procedures, including informed consent.
Creating, updating and safeguarding your clinical record in accordance with NOM-004-SSA3-2012.
Issuing prescriptions and test orders and, when applicable, making your eyeglasses at our optical service.
Following up on your progress, including post-operative care.
Issuing invoices and processing payments.
Secondary purposes, which are not necessary for your care and which you may decline at any time:
Sending reminders for preventive check-ups and information about our services.
Conducting satisfaction surveys to improve the quality of care.
Statistically measuring the use of this website and the effectiveness of our digital campaigns.
If you do not want your data used for secondary purposes, email clarityclinic.mx@gmail.com. Declining will not affect the medical care you receive.
4Cookies and tracking technologies
This website uses cookies that are necessary for it to work and, only with your permission, analytics cookies (Google Analytics, managed through Google Tag Manager) and advertising cookies (for example, Google Ads and Meta).
We use Google Consent Mode v2 on an opt-in basis: analytics and advertising cookies stay disabled until you accept them in the cookie banner. We store your choice for 182 days.
You can change your preferences at any time using the cookie icon or the “Cookie preferences” link in the site footer. You can also delete or block cookies in your browser settings.
Some sections display third-party content, such as Google Maps, Google reviews and WhatsApp links. When you interact with them, those providers may collect information under their own privacy policies.
5Transfers and disclosures
Clarity does not sell, rent or share your personal data for commercial purposes.
We may transfer your data without your consent only in the cases allowed by the LFPDPPP, for example:
When necessary for prevention, medical diagnosis or the provision of health care, including a medical emergency.
When required by a competent authority or by law.
When necessary to fulfill the legal relationship between you and Clarity.
With your authorization, we may share information with other medical specialists, laboratories, imaging centers or insurers when needed for your care or at your request.
We also rely on providers that process data on our behalf (website hosting, email, messaging and analytics tools), who are required to keep it confidential.
6ARCO rights and withdrawal of consent
You or your legal representative may at any time access, rectify or cancel your data, or object to its processing (ARCO rights), as well as withdraw your consent or limit the use and disclosure of your information.
Your full name and a way for us to send you our response.
A copy of a valid official ID or, if applicable, proof of legal representation.
A clear description of the data involved and the right you wish to exercise.
Any other information that helps us locate your data.
We will respond within a maximum of 20 business days from receipt of your request and, if it is approved, carry it out within the following 15 business days.
Please note that, under NOM-004-SSA3-2012, certain clinical record data must be kept for the legally required period even if you request its cancellation.
7Retention and security
We keep your clinical record for at least five years from the last medical act, as required by NOM-004-SSA3-2012. Other data is kept only for as long as needed for the purposes described above.
We apply administrative, technical and physical safeguards to protect your data against damage, loss, alteration, destruction or unauthorized use. Access is limited to staff who need it for your care, and information sent through this website is encrypted with HTTPS (SSL/TLS).
8Minors
When the patient is a minor or a legally incapacitated person, personal data will be provided and authorized by their parent or legal guardian, who may exercise the rights described in this notice.
9Changes to this notice
This Privacy Notice may be updated due to legal changes, authority guidelines or changes to our services. Any update will be published on this page with its revision date.
If you believe your right to data protection has been violated, you may contact the competent personal data protection authority in Mexico.
This English version is provided for convenience. In case of any discrepancy, the Spanish version shall prevail.
