Privacy Policy and Personal Data Protection

Last updated: October 14, 2026

1. Introduction

At Alejandra Hurtado – General and Specialized Dentistry, we respect the privacy of our patients, users, and website visitors and are committed to protecting their personal information.

This Privacy Policy establishes the guidelines for collecting, storing, using, sharing, retaining, and deleting personal data obtained through our website, https://alejandrahurtado.co/, our communication channels, and activities related to the provision of dental services.

This policy complies with Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, Decree 1074 of 2015, and other applicable Colombian personal data protection regulations.

2. Data Controller

The entity responsible for processing personal data is:

The Data Controller determines the purposes and means of processing personal information in accordance with applicable Colombian legislation.

3. Personal Information We Collect

Depending on how users interact with our services, we may collect the following categories of information:

Identification and contact information: First and last names, email addresses, telephone numbers, and other information voluntarily provided through forms or communication channels.

Service-related information: Messages, inquiries, contact preferences, appointment requests, and information necessary to schedule consultations or respond to questions.

Technical and browsing information: IP addresses, browser types, devices, visited pages, and information collected through cookies and technologies implemented on our website.

Dental and healthcare information: When applicable and legally permitted, medical history, health conditions, diagnoses, treatments, diagnostic images, and other information necessary to provide dental care.

Health-related information is classified as sensitive personal data under Colombian law and is subject to enhanced protection.

4. Purposes of Data Processing

Personal information may be processed for the following purposes, as applicable:

  • Responding to inquiries, requests, and messages submitted by users.

  • Scheduling appointments, dental evaluations, and consultations.

  • Maintaining communications related to patient care and follow-up.

  • Providing dental services and fulfilling applicable healthcare obligations.

  • Managing administrative, accounting, and billing processes.

  • Improving website functionality, security, and user experience.

  • Analyzing website performance and usage statistics.

  • Sending information about services, updates, campaigns, or promotional communications when valid authorization has been obtained.

  • Handling requests, complaints, claims, and personal data protection inquiries.

  • Complying with legal obligations and requests from competent authorities.

Personal data will not be used for purposes incompatible with those communicated to the data subject unless legally permitted or separately authorized.

5. Consent to Personal Data Processing

Personal data will be collected and processed with the data subject’s prior, express, and informed authorization, except where Colombian law permits processing without consent.

Authorization may be obtained through electronic forms, physical documents, or other legally valid mechanisms that allow subsequent verification.

Submitting a contact form does not automatically constitute consent to receive advertising or marketing communications unrelated to the original request.

Data subjects may withdraw their consent and request the deletion of their personal information when legally permitted.

6. Sensitive Data and Healthcare Information

Due to the nature of dental services, collecting and processing sensitive personal data, particularly health-related information, may be necessary.

Such information will only be processed for legitimate and authorized purposes or under other conditions permitted by applicable legislation.

When consent is required for processing sensitive data, individuals will be expressly informed that providing such information is optional and will be notified of the specific purposes for which it will be used.

Clinical information will be handled confidentially and in accordance with Colombian regulations governing medical records, professional confidentiality, document retention, and personal data protection.

Clinical photographs, X-rays, and diagnostic images collected for treatment or follow-up will not be used for advertising, testimonials, social media publications, or clinical case promotion without the appropriate specific authorization.

7. Personal Data of Children and Adolescents

When dental services involve minors, personal data will be processed in accordance with their best interests and fundamental rights.

Where required, authorization will be obtained through parents or legal guardians, while respecting the minor’s right to be heard according to their maturity and autonomy.

Health information concerning minors will only be processed for legitimate purposes related to their care and other applicable legal obligations.

8. Rights of Data Subjects

Under Colombian Law 1581 of 2012, individuals have the right to:

  • Access, update, and correct their personal information.

  • Request evidence of the authorization granted, except where authorization is not legally required.

  • Obtain information about how their personal data has been used.

  • File complaints with the Colombian Superintendence of Industry and Commerce (SIC) regarding alleged violations of personal data protection regulations.

  • Withdraw consent and request deletion of their personal data when legally appropriate.

  • Access their personal information free of charge under the conditions established by law.

These rights may be exercised directly by the data subject or by legally authorized representatives.

9. Procedures for Inquiries and Complaints

Individuals may submit requests to access, update, correct, delete, or withdraw authorization for the processing of their personal information by contacting:

info@alejandrahurtado.co

Requests must include sufficient information to identify the individual, describe the request, and allow a response to be provided. Reasonable documentation may be requested to verify the identity or legal authority of the applicant.

Inquiries will be addressed within a maximum of ten (10) business days from receipt. If a response cannot be provided within this period, the applicant will be informed of the reasons for the delay and the expected response date, which may not exceed five (5) additional business days.

Complaints and claims will be addressed within fifteen (15) business days, counted from the day following receipt of a complete claim. If additional time is required, the applicant will be informed of the reasons and the new response date, which may not exceed eight (8) additional business days.

If a claim is incomplete, the applicant will be asked to provide the missing information within five (5) days of receipt. If the requested information is not submitted within two (2) months following the request for completion, the claim will be considered withdrawn.

Personal data deletion may be restricted when legal or contractual obligations require its retention, including applicable medical record regulations.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support navigation, maintain functionality, enhance security, and analyze website performance.

Depending on the technologies implemented, these may include:

  • Essential cookies: Necessary for website operation and security.

  • Analytics cookies: Used to understand visitor interactions and improve the website experience.

  • Third-party cookies: Potentially used by external services integrated into the website, including analytics tools, maps, or multimedia content.

Where cookies involve personal data processing requiring authorization, appropriate consent will be obtained before they are activated.

Users may manage cookies through their browser settings and, where available, through the website’s cookie preference controls.

11. Data Sharing and Third-Party Services

Personal information may be processed by technology providers and service partners supporting website operations, communications, information hosting, administrative management, or dental services.

These third parties must comply with applicable confidentiality, security, and personal data protection obligations according to their roles.

Information may also be disclosed to competent authorities when legally required.

International transfers or transmissions of personal data will be carried out in accordance with Colombian data protection requirements and applicable safeguards.

Personal information will not be sold or shared with third parties for their independent purposes without valid authorization or another applicable legal basis.

12. Information Security

We implement reasonable technical, organizational, and administrative measures to protect personal information against loss, alteration, unauthorized access, disclosure, or improper processing.

These measures may include access controls, authentication mechanisms, secure connections, backups, and internal confidentiality procedures.

Although appropriate security measures are implemented, no electronic transmission or storage system can guarantee absolute security.

13. Data Retention

Personal information will be retained for as long as necessary to fulfill the authorized purposes and applicable legal or contractual obligations.

Once the information is no longer required and no legal obligation prevents its removal, it will be securely deleted or anonymized, as appropriate.

Medical records and related healthcare documentation will be subject to the specific retention periods and requirements established by Colombian healthcare regulations.

14. External Links and Third-Party Platforms

Our website may contain links to external platforms, social media networks, messaging services, maps, or other websites.

Information processed directly by these third parties is governed by their respective privacy policies, without limiting any responsibilities that may apply to us for processing activities in which we participate.

We encourage users to review the privacy policies and terms of external services before providing personal information.

15. Changes to This Privacy Policy

Alejandra Hurtado – General and Specialized Dentistry reserves the right to update this Privacy Policy to reflect regulatory, technological, operational, or data processing changes.

Material changes will be communicated through appropriate channels, and new authorization will be obtained when legally required.

The current version will remain available at:

https://alejandrahurtado.co/

16. Effective Date

This Privacy Policy takes effect on October 14, 2026, and will remain applicable for as long as personal data processing activities are conducted under the conditions described herein.

Personal databases will be retained according to the periods necessary to fulfill their intended purposes and applicable legal obligations.