Your trust starts with clarity.
Your privacy matters.

Who is responsible?

Dr. Vargas & Co. is responsible for the personal data described in this notice.

Address: Medsuites · Medical Tower, P.º del Centenario 9580-9, Zona Urbana Río Tijuana, 22010 Tijuana, Baja California, México.

For privacy requests, including access, rectification, cancellation, opposition (ARCO) and withdrawal of consent, write to [email protected].

What do we ask for?

Your name, your selected contact channel and either your email address or an international phone number. Country and general treatment interest are optional. We also receive the page and language used, a request reference and the accepted privacy notice version.

This form does not accept photos, files, medical histories, diagnoses, payment details or identity documents. Please do not include medical information in your name or contact fields. Any clinical intake must take place through a separate, appropriate channel.

When the live form is enabled, security checks process network and browser signals, including your IP address. Temporary anti-abuse counters use a keyed hash of the IP address; the counters contain no name, email, telephone or treatment interest.

Why do we use your details?

To respond to your request through your selected channel, explain next steps, discuss an individual estimate and prevent abuse of the contact service. An estimate request does not confirm an appointment, clinical suitability, a final price or treatment.

The required checkbox authorizes contact about this request. It does not subscribe you to a newsletter or authorize unrelated advertising. We do not sell the contact details submitted through this form.

Service providers and external links

For live reception, Cloudflare hosts the site and verifies spam protection with Turnstile. Resend transmits form requests to the receiving inbox hosted by Google/Gmail. Messages sent to the public domain address are forwarded to that inbox through Cloudflare Email Routing. These providers may process information outside Mexico under their applicable terms. The clinic uses them to operate and secure the requested communication.

The website does not connect this form to the private clinical system. No advertising or audience analytics service is currently connected. The map loads OpenStreetMap tiles, which involves a request from your browser to that provider. Google Maps and other external links open services with their own privacy policies.

Storage and safeguards

Contact details are sent to the receiving inbox so we can handle your inquiry. We retain them only as necessary to follow up on the request and meet applicable obligations; you may request cancellation when appropriate. Email providers may maintain their own security logs and backups.

The form does not save your entries to browser storage or a contact database on this website. Anti-abuse counters expire after their short security windows and expired records are removed when the service next handles requests. Security controls include encrypted transport when live, server-side validation, access-restricted secrets and submission limits.

Your choices and ARCO rights

You may request access to your data, correct it, request cancellation or object to processing, withdraw consent, or limit its use by emailing [email protected] with the subject “Privacy / ARCO”. Withdrawal does not affect processing that already took place.

Include your name, a reply address and a clear description of the request and the data concerned. We will explain any proportionate identity verification needed through a suitable channel; do not send an identity document through the estimate form. Requests are handled within applicable legal time limits. We will explain any lawful reason that limits a request.

You may choose not to submit the form. Without a contact channel, we cannot respond to an estimate request.

Updates and local preview

Changes to this notice will be published at this address with a new date and version. The form records the version accepted with each live request.

In the local development preview, the server validates fictitious test entries without sending email or saving contact details. The preview message is not a receipt from the clinic. Live reception remains disabled until the email sender and security configuration are ready.