Privacy notice
How we process and protect your personal data under Mexican law (LFPDPPP), the European GDPR and U.S. privacy laws.
Data controller: identity and address
Healthcare by the Sea (the “Center”) is the controller of your personal data, with address at De Los Tules 168-10, Las Aralias, 48328 Puerto Vallarta, Jalisco, México.
For anything related to this notice, write to info@seahealth.com.mx or call +52 322 293 6906.
This notice applies to the Center’s website and to the data you share with us through its forms and contact channels.
Personal data we process
Through the contact form we only collect the data needed to assist you:
- Full name
- Email address
- Phone number
- Country of residence
- Service of interest
- Any message you choose to write
The form is not designed to receive clinical information. Please do not include health data in your message; that information is handled only during the assessment with the specialist, under the applicable confidentiality measures.
While browsing, and only if you accept analytics cookies, technical usage data (pages visited, device type) is collected in aggregate form. See the Cookie Policy for details.
Purposes of processing
Primary purposes (necessary to assist you):
- Responding to and following up on your information request
- Coordinating your assessment with a specialist
- Managing the service relationship and communication with you
- Complying with applicable legal obligations
Secondary purposes (only with your consent): sending you information about the Center’s services and measuring site usage through analytics. You may refuse these purposes at any time without affecting the care you request.
Mexico: ARCO rights (LFPDPPP)
Under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, you have the right to Access, Rectify, Cancel or Object to the processing of your data (ARCO rights), and to withdraw your consent.
- Send your request to info@seahealth.com.mx stating your name, the right you wish to exercise and a copy of your official ID
- We will respond within the legal timeframes (20 business days to communicate our determination and 15 additional business days to implement it, where applicable)
- If you believe your request was not addressed, you may contact the Mexican data protection authority (INAI, www.inai.org.mx)
European Union: General Data Protection Regulation (GDPR)
If you reside in the European Economic Area, we process your data on the following legal bases: your consent (art. 6(1)(a)), pre-contractual measures taken at your request (art. 6(1)(b)) and our legitimate interest in handling your requests (art. 6(1)(f)).
You have the rights of access, rectification, erasure, objection, restriction of processing and data portability. You can exercise them by writing to info@seahealth.com.mx.
Your data is processed in Mexico, outside the European Economic Area. We adopt contractual safeguards and security measures so that processing maintains an adequate level of protection.
If you consider that the processing infringes the GDPR, you have the right to lodge a complaint with the supervisory authority of your country of residence.
United States: privacy disclosures
The Center does not sell or share your personal data with third parties for targeted advertising.
If you reside in a state with an applicable privacy law (for example, California), you may request access to the data we hold about you, its correction or its deletion, and you will not be treated differently for exercising your rights.
To submit these requests, write to info@seahealth.com.mx.
Processors, retention and security
To operate the site and assist you, we use providers that process data on behalf of the Center, under contracts and access controls:
- Website and database hosting
- Resend (transactional email delivery)
- Cloudflare Turnstile (form anti-spam protection)
- Google Analytics (usage analytics, only with your consent)
We keep your data for as long as needed for the purposes described and the applicable legal periods. We apply reasonable administrative, technical and physical measures to protect your information against unauthorized access or use.
The site is not directed at minors; we do not knowingly collect data from minors without the consent of a parent or guardian.
Cookies and changes to this notice
The use of cookies and similar technologies is described in our Cookie Policy, available in the site footer.
We may update this notice to reflect legal or operational changes. The current version will always be published on this page with its date of last update.
Last updated: July 2, 2026.
