Privacy Notice
How Dentalist handles your personal data, what we use it for, and what you get to decide about it.
Last updated: August 7, 2026
Courtesy translation
This English version is provided for your convenience. Dentalist operates in Mexico and is governed by Mexican data protection law, so the Spanish-language notice is the legally binding one. If anything differs between the two, the Spanish version prevails.
Read the Spanish versionAt Dentalist we know that trusting us with your information — and your family’s — is part of trusting us with your health. This notice explains, plainly, what data we collect through this website, what we use it for, who we share it with, and how you can exercise your rights over it.
If anything here is unclear, write to us. We would rather explain it than leave you guessing.
1. Who is responsible for your data
Dra. N. Vanessa Machuca Rojas, operating commercially as "Dentalist", is responsible for the use and protection of your personal data.
Address for the purposes of this notice: Calle Ignacio Zaragoza 8960, Zona Centro, C.P. 22000, Tijuana, Baja California, Mexico.
Contact for data protection matters: info@dentalist.clinic. Phone: +52 664 597 7347.
2. What data we collect on this site
Through this website we collect only the data you give us voluntarily, plus certain technical browsing information.
- Identification and contact details
- Full name and phone number. If the visit is for a child, we also collect the child’s name and the name of their parent or legal guardian.
- Information about why you are contacting us
- The service you are interested in and whatever you write about your situation. This field may include health information: symptoms, pain, previous treatments, allergies, medical conditions or medications.
- Browsing data
- IP address, browser and device type, pages visited, time spent, and how you found the site. This is collected through cookies and similar technologies, and only with your consent when they are not strictly necessary.
Sensitive personal data
Information about your health — symptoms, allergies, medical conditions, previous treatments or medications — is considered sensitive personal data under Mexican law. We only process it with your express consent, and solely to prepare for and provide better dental care. Sharing it in the form is never required: if you prefer, write only your general reason for visiting and give us the details in person at your appointment.
3. How the contact form actually sends your information
It is worth knowing how our form works technically, because it is not the usual setup: when you submit it, your information is not stored on this website or on any server of ours. Instead, WhatsApp opens on your device with a message already written out, and you decide whether to send it.
That means two things. First, until you send that message, we receive nothing. Second, once you send it, the conversation lives in WhatsApp, a service operated by Meta Platforms, Inc., and is additionally governed by that company’s privacy policies.
Once we receive your message, your data becomes part of our patient records and is covered by this notice and by the clinic’s security measures.
4. What we use your data for
We separate the purposes that are necessary to care for you from those that are not, so you can opt out of the latter without it affecting your treatment.
- Primary purposes (necessary)
- Answering your request; scheduling, confirming, changing or cancelling your appointment; preparing for your visit using the clinical information you share; putting together your estimate and treatment plan; providing the dental care you requested and its follow-up; and meeting the legal and health-regulatory obligations that apply, including maintaining your clinical record.
- Secondary purposes (not necessary)
- Sending you checkup or hygiene reminders; letting you know about services, promotions or changes at the clinic; inviting you to rate your experience; and running statistical and audience analysis to improve this site and our outreach campaigns.
You can say no to the secondary purposes
If you do not want us to use your data for secondary purposes, write to info@dentalist.clinic and tell us. Declining is never a reason to deny you care, and it does not affect the services you requested in any way.
5. Data about children and adolescents
A large part of our practice is pediatric dentistry, so we handle children’s data often and with particular care.
A child’s data may only be provided by their parent or legal guardian, who gives consent on their behalf. By filling out the form in "Child" mode, you confirm that you have that authority.
This data is used exclusively for the primary purposes described in this notice: preparing and providing the child’s dental care and its follow-up. We do not use it for advertising directed at minors.
6. Who we share your data with
We do not sell, rent or trade your personal data. We share it only when it is necessary to care for you or when the law requires it.
- Dental insurers (including U.S. carriers)
- When you ask us to verify your coverage or process your care through a PPO plan, we share your policy details and the clinical information strictly needed for that verification or claim with the insurer. By asking us to handle that, you consent to this transfer, which may involve sending data outside Mexico.
- Dental laboratories
- To fabricate prostheses, crowns, night guards, aligners and similar work, we send the laboratory the models, studies and data strictly needed to produce your treatment.
- Outside specialists and imaging centers
- When your case calls for a second clinical opinion, a referral to a specialist outside the clinic, or an imaging study such as a CT scan, we share the clinical information needed for that care.
- Competent authorities
- When there is a duly founded and substantiated request from a health, judicial or administrative authority, as provided by law.
- Technology providers
- This site relies on third-party services to run and to measure itself: WhatsApp (Meta Platforms, Inc.), Google (Tag Manager) and Vercel (hosting and analytics). These providers process data on our behalf or under their own policies, and some store information outside Mexico.
Transfers that do not require your consent
The law allows certain transfers without additional consent — for example, when they are necessary for the medical care you requested, or when a competent authority requires them. Outside those cases, we do not transfer your data without telling you.
8. Your ARCO rights and how to exercise them
Under Mexican law you have the right to know what data we hold about you and what we use it for (Access); to ask us to correct data that is inaccurate or incomplete (Rectification); to ask us to delete it when you believe it is not being handled according to the principles and duties set by law (Cancellation); and to object to us using it for specific purposes (Opposition). These are known collectively as ARCO rights. You may also withdraw any consent you have given us.
To exercise any of these rights, send your request to info@dentalist.clinic with the following:
- Your full name and a way for us to send you our response.
- A copy of official identification proving your identity, or your legal representative’s, when acting on someone else’s behalf.
- A clear description of the data your request concerns and which right you wish to exercise.
- For rectification requests, documentation supporting the correction you are asking for.
Timeframes and limits
We will respond within the timeframes set by applicable law, using the channel you indicate. Please note that certain clinical record data must be retained for the period required by Mexican health regulations, so deletion may not be possible right away; in those cases we will explain why.
9. How we protect your information
We apply reasonable administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction, and unauthorized use, access or processing.
Access to clinical information is limited to the staff who need it to care for you, and they are bound by confidentiality. This site is served over an encrypted connection (HTTPS).
No system is infallible. If a security breach were to occur that significantly affects your rights, we will inform you so you can take action.
10. How long we keep your data
We keep your data for as long as needed to fulfill the purposes described in this notice and to meet the legal, health-regulatory, tax and liability obligations that apply.
Clinical record information is retained for the period required by Mexican health regulations. Once the applicable periods end, data is deleted or anonymized.
11. Links to third-party sites
This site links to external services such as WhatsApp, Google Maps, Doctoralia, Facebook, Instagram and TikTok. When you use them you leave our site and become subject to those platforms’ privacy policies, over which we have no control.
12. Changes to this notice
We may update this notice when our services, our data handling practices or applicable legal requirements change.
The current version will always be published on this page, with the last-updated date visible at the top. When a change is substantial — a new purpose or a new type of transfer, for example — we will let you know through the contact details we have on file or through a visible notice on this site.
13. If you are not satisfied
If you believe your right to the protection of personal data has been violated, or that our handling of your data breaches applicable law, you may take the matter to the competent Mexican data protection authority through the complaint or proceeding that applies.
Before that, we would appreciate the chance to hear it directly at info@dentalist.clinic — in most cases we can resolve it right away.
Questions about your data?
Write to us and we will walk you through it. Reach us at info@dentalist.clinic or +52 664 597 7347.