1. Introduction
At IVLU S.A.S. ("IVLU"), we prioritize and respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information obtained through our website, medical consultations, and service delivery.
IVLU complies with Colombia's Data Protection Law 1581 of 2012, Decree 1377 of 2013, and relevant international standards including GDPR principles. By providing personal data, you agree to the practices described herein.
2. Information We Collect
2.1. Personal Identifiers:
- Full name
- Government-issued ID number
- Date of birth
- Physical address
- Phone number
- Email address
- Payment information
2.2. Medical Information:
- Medical history and clinical records
- Allergies and medications
- Clinical photographs for diagnosis
- Previous test results
- Treatment notes
2.3. Website Usage Data:
- IP address
- Browser type
- Visited pages
- Session duration
- Referral source
- General geographic location
3. Data Collection Methods
We collect information through:
- Direct input: Website forms, medical consultations, appointment scheduling
- Automated means: Cookies and tracking technologies
- Authorized third parties: Insurance providers, medical referrals (with consent)
4. Purpose of Data Processing
We process personal information to:
- Deliver aesthetic medicine and hair restoration services
- Maintain medical records and treatment tracking
- Coordinate appointments and send care instructions
- Process payments and billing
- Respond to inquiries
- Send service updates (with consent)
- Improve services and website experience
- Comply with legal obligations
- Protect legitimate business interests
5. Legal Basis for Processing
Data processing is conducted under:
- Explicit consent: Through forms and policy acceptance
- Contractual necessity: Service delivery
- Legal compliance: Health and tax regulations
- Legitimate interests: Service improvements respecting user rights
6. Third-Party Data Sharing
IVLU does not sell personal information. Limited sharing occurs with:
- Service providers: Payment processors, IT support
- Medical professionals: With patient consent
- Government authorities: When legally required
- Insurance companies: For claims processing (with consent)
All third parties must maintain confidentiality and security standards.
7. International Data Transfers
Data may be stored on servers outside Colombia. We ensure:
- Adequate protection measures per Colombian regulations
- GDPR-compliant transfers when applicable
- Standard contractual clauses for non-adequate jurisdictions
8. Information Security
We implement robust security measures including:
- Data encryption
- Strict access controls
- Intrusion detection systems
- Regular backups
- Staff training
- Security audits
While we employ industry-standard protections, absolute security cannot be guaranteed.
9. Data Retention
We retain information:
- As necessary for stated purposes
- Per legal requirements (minimum 15 years for medical records)
- Until consent withdrawal (where applicable)
Obsolete data is securely deleted or anonymized.
10. Your Rights
Under Colombian law and international standards, you may:
- Access your personal data
- Request corrections
- Withdraw consent
- Request deletion (subject to legal exceptions)
- Object to processing
- File complaints with supervisory authorities
GDPR-specific rights apply to EU residents. CCPA provisions apply to California residents.
11. Cookies & Tracking Technologies
Our website uses:
- Essential cookies: Basic functionality
- Analytical cookies: Usage analysis
- Functional cookies: Preference storage
- Marketing cookies: Ad personalization (opt-in required)
Manage preferences through browser settings. Note: Disabling cookies may affect site functionality.
12. Minors' Privacy
We do not knowingly collect data from individuals under 18 without parental consent. Treatments for minors require legal guardian authorization and medical supervision.
COPPA-compliant procedures are followed for any minor-related data.
13. External Links
Our website may contain third-party links. We are not responsible for external content or privacy practices. Review third-party policies before engaging.
14. Policy Updates
We may periodically update this policy. Significant changes will be:
- Posted prominently on our website
- Communicated via email when appropriate
Always check the "Last Updated" date for current version.
15. Contact Us
For privacy inquiries or data requests:
- Email: Ipsivlumedicinaestetica@gmail.com
- Phone: +573228351465
- Mailing Address: Calle 127 A #7-19 Consultorio 513, Usaquén, Bogotá
Data Controller:
IVLU S.A.S.
NIT (Tax ID): 901681646
Address: Calle 127 A #7-19 Consultorio 513, Usaquén, Bogotá
By using our services, you acknowledge reading and understanding this Privacy Policy.
Last Updated: March 7, 2025