US Privacy Policy

Clínica Dental Venegas ("we," "us," or "our") is a dental clinic located in Mexicali, Baja California, Mexico. We advertise our services in the United States and may collect personal information from US residents through our website, digital advertising, and patient intake processes.

This policy describes how we collect, use, and protect the personal information of US residents, and explains the rights available to you under applicable US federal and state law, including the Health Insurance Portability and Accountability Act (HIPAA) where applicable.

This policy does not replace our Mexican Aviso de Privacidad — both policies apply to individuals who interact with us from the United States.

Information you provide directly

• Name, email address, phone number, and mailing address
• Date of birth and demographic information
• Dental and medical history, insurance information
• Payment and billing information
• Communications you send us (email, contact forms, SMS)

Information collected automatically

• IP address, browser type, operating system
• Pages visited, time spent, referring URLs
• Cookie identifiers and advertising identifiers
• Geographic location (city/region level) derived from IP address

Information from third parties

• Advertising platforms (Google Ads, Meta) — click and conversion data
• Insurance verification services
• Referrals from other healthcare providers

Permitted uses of PHI

• Treatment: Sharing your dental records with specialists, labs, or other providers involved in your care
• Payment: Processing claims with your insurance company or payment processor
• Healthcare operations: Quality assessment, staff training, and internal audits
• As required by law: Reporting to public health authorities or responding to lawful subpoenas

Your HIPAA rights

As a patient, you have the right to:

• Request access to and copies of your medical/dental records
• Request corrections to your health information
• Request restrictions on certain uses or disclosures of your PHI
• Receive an accounting of disclosures of your PHI
• File a complaint with the US Department of Health and Human Services (HHS) if you believe your HIPAA rights have been violated: hhs.gov/hipaa/filing-a-complaint

• Schedule and manage dental appointments
• Provide dental treatment and follow-up care
• Process payments and insurance claims
• Send appointment reminders via SMS, email, or phone
• Respond to your inquiries and provide customer support
• Display and measure targeted advertising (with your consent where required)
• Improve our website, services, and patient experience
• Comply with applicable US and Mexican legal obligations

We do not sell your personal information to third parties for their own marketing purposes.

We may share your information with the following categories of recipients:

• Service providers: Vendors who help us operate our website, process payments, or send communications — bound by data processing agreements
• Healthcare partners: Dental labs, specialist referrals, and imaging centers involved in your treatment
• Insurance companies: To process claims you have submitted
• Advertising platforms: Hashed contact data shared with Google/Meta solely to measure advertising effectiveness (not for re-sale)
• Legal authorities: When required by US or Mexican law, court order, or to protect patient safety

We do not share PHI with advertising platforms. Any data shared with ad platforms is limited to non-health contact information and is governed by their respective terms and our agreements with them.

Regardless of which US state you reside in, you have the following general rights:

To exercise any of these rights, contact us using the information in Section 11. We will respond within 45 days, with a possible 45-day extension for complex requests.

Many US states have enacted their own privacy laws. The following table summarizes key rights available to residents of states with active privacy legislation:

Regardless of your state, we honor all deletion and opt-out requests to the best of our ability. California residents should refer to our dedicated California Privacy Policy for the full scope of their CCPA/CPRA rights.

We use cookies and third-party advertising tools to reach potential patients in the United States. These technologies may include:

• Google Ads / Google Analytics: Conversion tracking and remarketing to users who have visited our website
• Meta Pixel (Facebook/Instagram): Audience targeting and ad performance measurement
• Cookies: Session cookies for website functionality; persistent cookies for analytics

We do not use advertising pixels or tracking tools on any page where health information is submitted (e.g., patient intake forms). Advertising tracking is limited to general website pages only.

Opt out of advertising tracking

• Use your browser's cookie settings or an opt-out tool such as optout.aboutads.info
• Opt out of Google's advertising: adssettings.google.com
• Opt out of Meta advertising: facebook.com/adpreferences

We retain personal information for as long as necessary to fulfill the purposes described in this policy, and in accordance with applicable law:

• Patient health records: Retained for a minimum of 7 years from the date of last treatment, or as required by Mexican and applicable US law
• Contact and marketing data: Retained until you opt out or request deletion, whichever comes first
• Website analytics data: Retained for up to 26 months
• Payment records: Retained for 5 years for tax and accounting purposes

Our website and digital advertising are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 through our website. If a minor requires dental treatment, we collect their information only through their parent or legal guardian, who must provide consent on their behalf.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately using the information in Section 11.

To exercise your privacy rights, submit a complaint, or ask questions about this policy:

We may update this policy periodically to reflect changes in law, technology, or our practices. When we make material changes, we will update the "Effective Date" at the top of this page and, where feasible, notify affected users by email. Your continued use of our services after any changes constitutes acceptance of the updated policy.