Privacy Notice

1. Data controller

Numia Wellness S.A. de C.V., operating under the brand Nümia Wellness + Dental, with address at Plaza Paseo Coba, Manzana 23, Local 216, C. Diagonal 85 Sur, Ejidal, C.P. 77712, Playa del Carmen, Quintana Roo, México, is responsible for the processing and safekeeping of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and its implementing regulations.

For any matter related to this notice, write to [email protected].

2. Personal data we process

Depending on your relationship with us, we may process the following categories of data:

• Identification data: full name, date of birth, nationality, signature.
• Contact data: phone, email, address, country of residence.
• Billing data: tax ID, tax address and tax regime, when you request an invoice.
• Browsing data: IP address, device and browser type, pages visited and traffic source.

3. Sensitive personal data

In order to provide dental care we process sensitive personal data, namely data concerning your present and past health. This includes your clinical and dental history, medical and surgical background, allergies, current medication, relevant systemic conditions, imaging and diagnostic studies, clinical photographs, and your treatment plan and its progress.

This data requires your express written consent. It is collected only within the clinical relationship, becomes part of your clinical record, and is retained for the period required by applicable health regulations for clinical records, regardless of whether you remain a patient.

We do not process sensitive data from people who merely browse the site or request general information.

4. Primary purposes

The following purposes are necessary for our relationship with you. Without them we cannot treat you:

• Scheduling, confirming, rescheduling and following up on your appointments.
• Building your clinical history, issuing a diagnosis and proposing a treatment plan.
• Providing dental care and post-treatment follow-up.
• Building, safeguarding and updating your clinical record.
• Answering your questions, information requests and quotes.
• Issuing tax receipts and handling administrative and billing control.
• Complying with legal, health and tax obligations, and responding to requests from competent authorities.

5. Secondary purposes

The following purposes are not necessary for your care, and you may refuse them without affecting it:

• Sending you hygiene reminders, periodic check-up reminders and oral health content.
• Informing you about services, promotions and clinic news.
• Inviting you to answer satisfaction surveys.
• Using clinical images for educational or outreach purposes, always anonymized and only if you give separate, specific consent.

6. How to refuse secondary purposes

You may state your refusal from this moment by writing to [email protected] with the subject "Refusal of secondary purposes" and your full name. We have five business days to respond.

You may also unsubscribe from our communications at any time by replying to the message or using the unsubscribe link where available.

7. Data transfers

We do not sell, rent or trade your personal data.

Your data may be shared with third parties that provide services to us, acting on our instructions and under confidentiality obligations: dental laboratories for prosthetics and appliances, imaging and diagnostic services, technology infrastructure and storage providers, form and appointment scheduling platforms, web analytics services, and accounting or tax firms.

We may transfer your data without your consent in the cases provided by law, including: when required by a competent authority, when necessary for emergency medical care, and when the transfer is legally required to comply with health or tax obligations.

Any transfer other than the above will require your prior consent.

8. Your ARCO rights

You have the right to Access your personal data, to Rectify it when inaccurate or incomplete, to Cancel it when you believe it is not required for the stated purposes, and to Object to its processing for specific purposes.

To exercise them, send your request to [email protected] including: your full name and a means to send you our reply, a copy of official identification proving your identity or legal representation, a clear description of the data and the right you wish to exercise, and any element that helps locate your data.

We will respond within a maximum of twenty business days. If granted, it will take effect within the following fifteen business days.

Please note that the right of cancellation is limited with respect to the clinical record, which we must retain for the period set by applicable health regulations.

9. Withdrawing consent

You may withdraw the consent you gave us at any time by writing to [email protected], following the same procedure described for ARCO rights.

Withdrawal is not retroactive and does not apply where retaining the data is necessary to comply with a legal obligation or to preserve the clinical record.

10. Limiting use or disclosure

If you wish to limit the use or disclosure of your data without exercising an ARCO right, you may request it at [email protected]. Where applicable, you will be added to our internal exclusion list.

11. Cookies and tracking technologies

This site uses web analytics tools that collect aggregated information about your browsing, in order to understand which content is useful and improve the site. This information is not used to identify you personally.

You may disable cookies from your browser settings. Doing so may affect how some sections of the site work.

12. Security measures

We have implemented administrative, technical and physical security measures intended to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access or processing. Access to clinical records is restricted to staff involved in your care.

13. Changes to this notice

This notice may be amended to address legislative developments, internal policies or new services. Any change will be published on this same page, https://numia.dental/en/privacy, with its update date. We suggest reviewing it periodically.

14. Data protection authority

If you believe your right to the protection of personal data has been infringed, you may approach the competent personal data protection authority in Mexico to file the corresponding complaint or proceeding.