Consumer Health Data Privacy Notice

This notice applies to visitors from the United States, in particular residents of Washington (My Health My Data Act, RCW 19.373) and Nevada (Senate Bill 370). The data controller is IVLU S.A.S., NIT 901681646, Calle 127 A #7-19 Consultorio 306, Usaquén, Bogotá. Our treatments are provided only at our clinic in Bogotá, Colombia. It complements our Privacy Policy.

Health data IVLU collects: the treatment you ask about and what you tell us

• The treatment or service you are interested in, selected or written in a contact form.
• Skin, hair or body concerns you describe in a form, email or WhatsApp message.
• Photos you choose to send us so a doctor can assess your case.
• Your appointment request, which may reveal that you are seeking aesthetic or dermatological care.
• Treatment pages you visit on this website, recorded as usage data.

Sources: you and your use of this website

We receive this data directly from you when you fill in a form or write to us, and automatically when you browse the website through Google Analytics, loaded by Google Tag Manager.

Purposes: answer your inquiry and prepare your consultation in Bogotá

• Reply to your question and recommend the right type of consultation.
• Schedule your appointment and send preparation instructions.
• Measure which pages and contact channels people use, to improve the website.

Kommo, Google, Cloudflare and Meta: who receives your health data

• Kommo: stores the messages sent through the contact form on our pages.
• Google: Google Analytics (website usage), our email account and, once our own appointment form is enabled, Google Sheets and Apps Script (form requests).
• Cloudflare Turnstile: checks that form submissions come from a person, once our own form is enabled.
• WhatsApp (Meta) or your email provider, when you choose to contact us through them.

These providers process the data on our behalf. IVLU does not sell your consumer health data.

Your rights: access, delete and withdraw consent

• Access: confirm whether we hold your consumer health data, get a copy and receive the list of third parties that received it.
• Deletion: ask us to delete it. We will also notify the providers listed above. Medical records of patients treated at the clinic are kept for the period required by Colombian law.
• Withdraw consent: stop the collection or sharing you authorized, at any time.

Exercise your rights by writing to centromedicoivlu@gmail.com

Send your request to centromedicoivlu@gmail.com with the subject "Consumer health data request", or call +57 322 835 1465. We may ask for information to verify your identity. We will respond within 45 days, extendable once by 45 more days when necessary, and we will tell you why.

If we deny your request, you can appeal by replying to our answer with the subject "Appeal". We will tell you the result of the appeal in writing. If the appeal is denied, Washington residents may contact the Washington State Attorney General and Nevada residents the Nevada Attorney General.