Calle Nayarit 465, Col. Rodríguez, Reynosa Mon–Fri 10:00 a.m. – 8:00 p.m. · Sat 10:00 a.m. – 4:00 p.m. · By appointment Mon–Fri 10am–8pm · Sat 10am–4pm

ES English

Home
Privacy notice

Comprehensive privacy notice

Website, digital contact and related services

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

Last updated: November 3, 2026

  1. Identity and address of the data controller

    Dr. Ricardo Alberto Montes Ríos, with address at Calle Nayarit 465, ground floor, Col. Rodríguez, C.P. 88630, Reynosa, Tamaulipas, Mexico, is responsible for the processing and protection of the personal data collected through this website and the electronic channels linked to it, under the Mexican legislation that applies to personal data protection.

  2. Personal data that may be collected

    Depending on how the data subject uses the website, forms, booking assistant or other linked contact channels, the following may be collected:

    • Identification data.
    • Contact data.
    • Data needed to request information or manage an appointment.
    • Information the data subject voluntarily provides in forms, messages or communications.
    • Where applicable, information about the reason for the visit or about the data subject’s health that they voluntarily provide when requesting medical care.

    Contact form. The form on the home page asks for your full name, phone or WhatsApp number, email address (optional), the type of service you are interested in (surgery, test, hearing aids or consultation) and, if you wish, a short message. Please do not include medical information in the message. To send it, we use the Web3Forms service, which receives this data and forwards it by email to the office (Show email). Web3Forms keeps a copy of each submission for 30 days on Amazon Web Services servers that may be located outside Mexico, and then deletes it automatically. We use this data only to respond to your request and, where applicable, to schedule your appointment.

    Booking assistant. Requests you make through the booking assistant are processed on CDsoft, which acts as a data processor, to schedule your appointment and follow up on it. Please do not share medical information in the assistant. The assistant does not use advertising cookies or cross-site tracking cookies. For more details, see CDsoft’s privacy notice.

  3. Sensitive personal data

    Because of the nature of medical services, the data subject may provide information about their present or past health, symptoms, history, conditions, tests, treatments or other medical information. This information will be treated as sensitive personal data and used only for the corresponding purposes, in accordance with the applicable legislation.

    Please do not share medical information in the contact form or in the booking assistant. When sensitive personal data is collected, the legally required consent will be requested.

  4. Purposes of processing

    Primary and necessary purposes:

    • To identify and assist the data subject who requests information.
    • To respond to requests sent through the available contact channels.
    • To manage, confirm, change and follow up on appointment requests.
    • To provide information about the medical services requested.
    • To properly route requests for care and follow up on communications started by the data subject.
    • When a doctor-patient relationship is established, to compile and manage the information that legally belongs in the clinical record and to provide the medical care requested.
    • To comply with the legal, health and administrative obligations that apply to the provision of medical services.

    Secondary purposes: where appropriate, certain contact data may be used to send information about services, news or informational communications that are not essential to the care requested. The data subject may ask that their data not be used for these purposes by writing to Show email.

  5. Transfers, disclosures to processors and third-party involvement

    Personal data may be disclosed when necessary to comply with legal obligations or when any of the cases allowed by the applicable regulations occurs. Technology providers may be involved in running digital services. The legal role of each party, the purposes, the scope of the processing and, where applicable, the need for consent must match the actual technical and contractual process.

    When a transfer requires the data subject’s consent, it will be requested in accordance with the applicable regulations.

    Providers currently involved in the website:

    • Web3Forms, to send the contact form, as described in section 2.
    • CDsoft, for the booking assistant, as described in section 2.
    • Appointment system and electronic records: [pendiente: sistema que utiliza el consultorio y dónde se aloja la información].

    The home page and the Office page show a Google Maps map, which loads when you reach that section. When it loads, Google receives technical information from your browser, such as your IP address, and may use its own cookies in accordance with its privacy policy. The WhatsApp, social media and review site buttons open the corresponding service in a new tab; the website does not send them any of your data. Any information you share directly on those platforms, such as a WhatsApp message, is also governed by each platform’s privacy policy.

  6. ARCO rights, withdrawal of consent and limitation

    The data subject or their legal representative may exercise the rights of Access, Rectification, Cancellation and Objection (ARCO, by their Spanish initials) and, where legally appropriate, may withdraw their consent or request that the use or disclosure of their personal data be limited.

    Requests must be sent to: Show email.

    The request must include the information needed to identify the data subject, state the right they wish to exercise and make it possible to locate the corresponding personal data. When necessary, documents may be requested to prove the identity or representation of the person making the request. Handling of the request is subject to the requirements, deadlines, exceptions and conditions established by the applicable legislation.

    Cancellation or withdrawal of consent does not mean deleting information that must be kept by legal, health or contractual provisions or to comply with applicable obligations.

  7. Tracking technologies and embedded services

    The website may include services or content provided by third parties, such as maps, messaging, forms or appointment systems. These services may process technical information on their own account or use cookies, local storage, pixels or other technologies, according to their settings and the policies that apply to them.

    This website does not use its own cookies, storage in your browser, analytics tools, tracking pixels or advertising. Fonts and images load from this same website. The third-party content that loads is the Google Maps map described in section 5 and, on the booking page, the CDsoft booking assistant described in section 2, which does not use advertising cookies or cross-site tracking cookies.

    When personal data is collected through these technologies, the data subject will be informed, as appropriate, about their use and about the options available to manage them.

  8. Security, confidentiality and electronic clinical records

    The data controller will adopt reasonable and appropriate administrative, technical and physical measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access or processing, taking into account the nature of the information and the processing carried out.

    Information that is part of medical care and of the clinical record is also subject to the applicable health regulations and the corresponding duties of confidentiality.

  9. Changes to this Privacy Notice

    This Privacy Notice may be modified as a result of legal, regulatory, operational, administrative or technological changes, or changes related to the services and the processing of personal data. Changes will be made known to the data subject by publishing the updated version in this same section of the website.

  10. Privacy contact

    Email for ARCO rights and requests related to personal data: Show email.

    Address of the data controller: Calle Nayarit 465, ground floor, Col. Rodríguez, C.P. 88630, Reynosa, Tamaulipas, Mexico.

  11. Reference legal framework

    This document was structured using as a reference the current Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties) and, for clinical information, NOM-004-SSA3-2012, Del expediente clínico (the Mexican Official Standard on clinical records).