Privacy Policy
Last Updated: December 15, 2025.
Welcome to www.drdiazplasticsurgery.com, the official website of Dr. Jorge L. Díaz Martínez, Board-Certified Plastic Surgeon based in Tijuana, Mexico. We value your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, submit information, or interact with our services.
1. Who We Are
This website is operated by Dr. Jorge L. Díaz Martínez and his authorized medical coordination and administrative team. The website provides information about plastic surgery procedures, virtual consultations, educational content, testimonials, and patient coordination services related to Dr. Díaz’s medical practice.
2. Information We Collect
a. Information You Provide Voluntarily
When you interact with our website, you may provide:
-
Full name
-
Phone number and email address
-
Country and city of residence
-
Medical or health-related information submitted for evaluation
-
Photographs submitted for virtual consultations
-
Messages exchanged with our virtual assistant or staff
Providing this information is voluntary; however, certain services may not be available without it.
b. Information Collected Automatically
We may automatically collect technical data such as:
-
IP address and approximate location
-
Browser type, device type, and operating system
-
Pages visited, time spent on the site, and referral sources
-
Cookies and tracking data through analytics and advertising tools (e.g., Google Analytics, Meta Pixel, TikTok Pixel)
3. How We Use Your Information
We use your information for the following purposes:
-
To schedule, manage, and coordinate medical consultations (virtual or in-person)
-
To evaluate surgical candidacy and provide personalized responses
-
To communicate with you regarding appointments, reminders, updates, or follow-ups via email, WhatsApp, or SMS
-
To improve website functionality, user experience, and advertising performance
-
To provide customer service and respond to inquiries through our staff or virtual assistant
-
To send educational content, updates, or promotional information only when you have provided consent
We do not use your data for automated medical decision-making.
4. Use of AI Assistant (Sofi)
This website may use a conversational AI assistant named Sofi to assist visitors.
Sofi may:
-
Answer general questions about procedures and recovery timelines
-
Assist with consultation scheduling
-
Collect preliminary medical information for review
-
Share informational media (images, videos, or documents)
Important:
Sofi does not provide medical diagnoses, medical advice, or treatment decisions. All medical evaluations and final recommendations are performed exclusively by a licensed and certified medical professional.
Conversations may be logged securely for quality assurance, training, and service improvement.
5. Sharing of Information
We do not sell or rent your personal data.
We may share information only with:
-
Authorized medical and administrative staff under Dr. Díaz’s supervision
-
Secure third-party service providers used for communication, analytics, scheduling, and cloud storage (e.g., WhatsApp Business API, Meta platforms, Google services)
-
Legal or regulatory authorities when required by applicable law
All third-party providers are required to follow reasonable data protection standards.
6. Legal Basis for Processing (GDPR)
For users located in the European Union or similar jurisdictions, we process personal data under one or more of the following legal bases:
-
Your explicit consent
-
Performance of a contract or requested service
-
Legitimate interests related to service improvement and communication
-
Compliance with legal and medical record-keeping obligations
7. Data Security
We implement appropriate administrative, technical, and organizational safeguards, including:
-
SSL encryption across the website
-
Restricted access to sensitive data
-
Secure servers and role-based permissions
-
Periodic reviews and data integrity controls
While no system is completely secure, we take reasonable measures to protect your information from unauthorized access or misuse.
8. Data Retention
We retain personal data only for as long as necessary:
-
Medical evaluation records: up to 5 years
-
Chat and inquiry records: up to 12 months
-
Analytics data: up to 26 months (or anonymized)
You may request deletion of your data at any time, subject to legal and medical retention requirements.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
-
Access your personal information
-
Request corrections or updates
-
Request deletion of your data
-
Withdraw consent at any time
-
File a complaint with a relevant data protection authority
Requests can be made using the contact information below.
10. International Data Transfers
Our operations and service providers may be located in countries other than your own. By using our website and services, you consent to the transfer of your information across borders in accordance with this Privacy Policy and applicable laws.
11. Cookies Policy
We use cookies and similar technologies to:
-
Enable website functionality
-
Analyze traffic and usage patterns
-
Support advertising and remarketing campaigns
You may control cookie settings through your browser or our cookie banner when available.
12. Children’s Privacy
Our services are intended only for individuals 18 years of age or older. We do not knowingly collect personal information from minors.
13. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date.
14. Contact Information
If you have questions about this Privacy Policy or how your data is handled, you may contact us at:
Address: New City Medical Plaza, Suite 1102, Zona Río, Tijuana, Mexico.
Representant: Leonardo Rubio
Website creation agency: limitlessintegrationtoolbox@gmail.com