Privacy Notice

Identity and address of the Controller

CREI | Comprehensive Emotional Restructuring Center, acting as the Controller of personal data processing, with address in Mexico City, Mexico, makes this Privacy Notice available to you in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

Personal data we process

We collect identification and contact data (name, email, phone), clinical and health data, personal and family history, information about substance use and other addictions, as well as payment and billing data. In some cases, we may process sensitive personal data, including health information, clinical history, habits, and psycho-emotional variables.

Purposes of processing

Primary purposes: providing mental health and addiction services, clinical assessment, therapeutic follow-up, referral and coordination with affiliated clinics, appointment management, record creation, continuity of care, and patient safety.

Secondary purposes: institutional communication, service improvement, statistics, quality, and health education. If you do not want your data to be used for these secondary purposes, you may express your preference through the contact channels provided in this Notice.

Legal basis and consent

Processing is carried out under the LFPDPPP, its Regulations, and the Privacy Notice Guidelines. For sensitive personal data, your express consent is required and may be collected physically or electronically. Use of data for secondary purposes constitutes tacit consent when you do not object through the established channels.

Transfers

We may carry out domestic and international transfers to: affiliated clinics and professionals for continuity of care; laboratories and auxiliary diagnostic providers; insurers and third-party payers when services are managed through them; and health and judicial authorities when required by law. Transfers will be made in accordance with applicable regulations and, when applicable, with your consent.

Security measures

We implement administrative, technical, and physical measures to protect data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. We apply access controls, encryption in transit, secure record storage, and internal privacy and information security policies.

Retention and deletion

We retain data for the time necessary to fulfill the purposes of processing and applicable legal obligations in health matters. Once those purposes are met, data will be blocked and deleted according to documented retention criteria.

ARCO rights and other mechanisms

You may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as revoke your consent and limit the use or disclosure of your data, by sending a request to privacidad@crei.mx including your full name, contact method, description of the right you wish to exercise, and documents proving your identity or representation.

We will respond within the timeframes provided by the LFPDPPP. For questions or complaints, you may contact the INAI as the competent authority.

Minors

In the case of minors, processing will be carried out with the consent of the parent or legal guardian, and their best interests will be protected in accordance with applicable regulations.

Cookies and tracking technologies

We use cookies and similar technologies to improve your experience and analyze site usage. You can manage your preferences via the site's cookie notice or by configuring your browser to block or delete cookies.

Continued use of the site constitutes acceptance of these technologies according to this Privacy Notice.

Updates to this Notice

We may update this Notice to reflect regulatory changes or internal process updates. The current version will be available on this website and will take effect upon publication.