Your privacy matters to us. Here is a plain-language summary of the data we collect, how we use it, and how to exercise your rights.
Who is responsible for your data?
Hospital CMQ de Vallarta, S.A. de C.V., located at Calle Basilio Badillo No. 365, Col. Emiliano Zapata, C.P. 48300, Puerto Vallarta, Jalisco, Mexico, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. This policy covers care at the hospital and the hospitalcmq.com website in Spanish, English, and French. Our Data Protection Officer (Quality Management Department) handles all matters related to your data.
What data do we collect?
- At the hospital: name, date of birth, age, address, religion, cultural and socioeconomic data, and the health information generated during your care, which is sensitive data we process only with your express written consent.
- On the website: what you send us through the form (name, WhatsApp number, optional email, and message), by WhatsApp, or by phone; browsing data (IP, browser, device, language, pages visited, date and time); and the text you type in site search, used only to show you results.
We don’t ask for health data, insurance policy numbers, or payment details on the website. Please don’t include medical details in the form; if you do, we will protect them as sensitive data.
How do we use it?
- To care for you: providing medical care, answering and following up on your requests and appointments by WhatsApp, phone, or email, evaluating service quality, and protecting the site against spam and abuse.
- Additional purpose: measuring site usage statistically to improve it. You can opt out with the cookie preferences button or by emailing info@hospitalcmq.com, without affecting your care.
We don’t use your data for personalized advertising, and we don’t sell it.
What cookies do we use?
- Necessary: they save your cookie choice and check that you’re not a bot (Cloudflare Turnstile).
- Analytics: Google Analytics 4, loaded through Cloudflare Zaraz, which never records what you type in the form or search box; and Cloudflare Web Analytics, which uses no cookies.
- Third-party: embedded Google Maps and X/Twitter posts may set their own cookies.
If you visit from Canada, the European Union, the United Kingdom, or Switzerland, analytics stays off until you accept it. In other countries, including Mexico and the U.S., you can turn it off at any time in cookie preferences.
Who do we share your data with?
- Another hospital, only if you need a transfer, for your diagnosis and continuity of care.
- Technology providers that process it on our behalf, mainly in the United States: Cloudflare (hosting and security), Twilio, WhatsApp (Meta), and SendGrid (form messages), Google (analytics, maps, and email), Algolia (site search), Kinsta (content management), and X Corp. (embedded posts). They may only use it to provide their service to us.
How long do we keep it and how do we protect it?
Your clinical file is kept for at least 5 years after your last care, as required by Mexican standard NOM-004-SSA3-2012. The website doesn’t store your requests in its own database: they reach the hospital by WhatsApp and email and are kept as long as needed to care for you. The entire site uses an encrypted connection (HTTPS), and only authorized staff can access your information.
Your rights
You can exercise your ARCO rights (Access, Rectification, Cancellation, or Objection), withdraw your consent, or limit the use of your data. If you live in Canada (including Quebec) or Europe, you can also request a copy of your data in a structured format and file a complaint with your local authority (in Quebec, the Commission d’accès à l’information du Québec).
Send your request with your name, a copy of your ID, and a description of what you’re asking for. We will respond within 20 business days at the latest.
Data Protection Officer — Quality Management Department
Phone: +52 (322) 226 6500 · Email: info@hospitalcmq.com
Other important points
- The website is not intended for minors; requests for a minor must be sent by a parent or legal guardian.
- Every admission includes a signed Hospital Services Agreement detailing how your information is used.
- External sites we link to (WhatsApp, social media, insurers) have their own privacy policies.
- Any change to this policy will be published on this page.
Last updated: October 2026.