Privacy Policy
Last updated: 18 April 2025
1. Who we are
Blue Clinic & Studio S.A.S. (“we”, “our”) is a dental tourism provider established in Medellín, Colombia (NIT 900 xxx xxx‑1).
2. Personal Data We Collect
- Contact data: name, email, phone.
- Health data: images, medical history (HIPAA PHI).
- Technical & analytics data: IP, device, pages visited.
3. How We Use Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide consultations & treatment | Article 6‑1‑b (contract) Article 9‑2‑h (health) |
| Marketing newsletters | Consent |
| Analytics & site optimisation | Legitimate interest |
4. Cookies
We use first‑party cookies for site functionality and third‑party cookies (Google Analytics, Microsoft Clarity) for usage analytics. Manage preferences via our cookie banner or your browser settings.
5. Data Subject Rights
You may request access, rectification, erasure, or portability of your data. Email privacy@blueclinic.com.
6. International Transfers
Data is stored on AWS US‑East (USA). EU transfers rely on Standard Contractual Clauses (2021/914).
7. Retention
Medical records: 15 years (Colombian Resolution 1995/1999). Marketing data: until consent withdrawn or 24 months of inactivity.
8. Changes
Policy updates will be posted here and, when material, emailed to affected users.