This notice explains what personal data we may collect, why we use it, who we may share it with, and how you can exercise your rights when you interact with hisonrisa, book an appointment, receive dental care, or use site technologies in Mexico City.
A quick summary of how we handle your data at hisonrisa:
HISONRISA, S.A. DE C.V., with its clinic service address at Tepic 139-706, Roma Sur, Cuauhtémoc, 06760 Ciudad de México, CDMX, is responsible for processing your personal data. For privacy questions, ARCO rights, or consent withdrawal, you can write to hi@hisonrisa.com.
Data about your health status, medical or dental history, studies, X-rays, clinical photos, and chart notes may qualify as sensitive personal data. To process them, we will request your express written consent through clinical forms, informed-consent documents, or equivalent records, except in cases permitted by law.
Please share only information that is relevant to your request or care coordination. Messages, photos, X-rays, and CBCT files help us route your request and prepare the visit, but they do not replace an in-person diagnosis, treatment approval, or emergency care.
The website uses technical and security resources. It may also use self-hosted cookie-free first-party analytics to measure aggregate site use and UTM campaigns. When you submit forms, use the website chat, or open certain WhatsApp links from campaign pages, we may record data such as IP, browser, referrer, visited URL, UTM parameters, ad click identifiers, button context, or a request reference. Cookie preferences let you control interactive maps, video embeds, third-party analytics, and marketing; we also respect Global Privacy Control for marketing signals when the browser sends it.
If you open WhatsApp, maps, YouTube, or other external platforms, those third parties apply their own notices. We do not intentionally send appointment details, message contents, clinical information, X-rays, clinical photos, or treatment data to advertising platforms.
We keep information only for as long as needed to fulfill purposes, comply with legal obligations, and defend claims. Clinical records are kept for at least the applicable minimum period. We also maintain reasonable administrative, technical, and physical safeguards, and we will publish relevant updates to this notice here.
Last updated: May 23, 2026
This full Privacy Notice explains how HISONRISA, S.A. DE C.V. collects, uses, keeps, communicates, and protects your personal data when you interact with the clinic, request information, book an appointment, receive dental care, or use website forms and digital resources. Its content is drafted on the basis of Mexico's Federal Law on Protection of Personal Data Held by Private Parties, the applicable privacy-notice guidelines, and other Mexican rules related to healthcare services and clinical records.
HISONRISA, S.A. DE C.V., with its clinic service address at Tepic 139-706, Roma Sur, Cuauhtémoc, 06760 Ciudad de México, CDMX, is responsible for processing your personal data for the purposes described in this notice. For privacy questions, ARCO-rights requests, or consent withdrawal, you can write to hi@hisonrisa.com .
When a short-form notice is shown in forms, booking flows, or specific contact points, this full notice is the reference document for the expanded information.
We do not collect the same information in every case. The categories may vary depending on whether you only request information, book an appointment, receive treatment, ask for CFDI billing, or request help with a reimbursement.
During dental evaluation and care we may collect sensitive personal data, especially data about present or future health status, medical and dental history, allergies, medications, studies, X-rays, clinical photos, progress notes, and other elements of the clinical record.
To process sensitive personal data, such as health information, medical or dental history, allergies, medications, studies, X-rays, clinical photos, and elements of the clinical record, we will request your express written consent through clinical forms, informed-consent documents, or equivalent records, except in cases permitted by law. Where applicable, we may also process sensitive data to comply with obligations arising from the healthcare relationship or from applicable health regulations.
Please share only information that is relevant to your request or care coordination. Messages, photos, X-rays, and CBCT files help us route your request and prepare the visit, but they do not replace an in-person diagnosis, treatment approval, or emergency care.
In addition to the purposes needed to answer requests, book appointments, and provide dental care, we may process technical and browsing data for secondary purposes when the corresponding controls or consents are in place.
These secondary purposes are not required to receive dental care. You can reject or change optional technologies through the site's cookie preferences, the footer opt-out link, or by writing to our privacy contact.
We do not intentionally send advertising platforms appointment details, message contents, clinical information, requested treatments, X-rays, clinical photos, medical files, or other sensitive personal data from your clinical record.
We also do not use customer lists, enhanced conversions, advanced matching, hashed contact identifiers, or conversion names that reveal a specific dental treatment without separate privacy review and explicit approval.
You may also object or ask us to limit non-essential uses by writing to hi@hisonrisa.com .
We do not sell your personal data. We only disclose or make it available to third parties when this is necessary to fulfill the purposes described, to operate services with processors, when you request it, or when there is a legal obligation.
If a transfer to a third party outside our processors does not fall within a legal scenario allowing it without consent, we will request your authorization before carrying it out.
When you use website forms, website chat, or other digital resources, we may automatically obtain certain technical and contextual data, such as IP address, browser, language, referrer, visited URL, aggregate cookie-free measurement, cookie identifiers when present, consent preferences, UTM parameters, and ad click identifiers, as well as information needed to validate security challenges on forms.
Necessary technologies protect the site, forms, and basic preferences. First-party cookie-free analytics may measure aggregate site use without creating persistent cookie identifiers. Third-party analytics technologies, such as Google Analytics 4, remain subject to your analytics choice. Marketing technologies, such as Google Ads, Meta Pixel, or TikTok Pixel, remain subject to your marketing choice and to Global Privacy Control signals when your browser sends them.
To reduce risk on a dental-care website, advertising conversion events must remain generic, such as contact, appointment request, phone click, or WhatsApp click, without treatment names or form data.
On campaign pages, forms and some WhatsApp links may store a request or page reference together with campaign parameters, click identifiers, button context, and technical metadata in Cloudflare D1. References shown in WhatsApp are used for request follow-up and should not include symptoms, notes, phone numbers, emails, UTM parameters, or other clinical details.
You can change your preferences from the cookie link in the footer. If you disable interactive maps or video embeds, future page loads should use static alternatives or external links instead of loading interactive maps or embedded players.
If you choose to use the website chat, message us on WhatsApp, open maps, view embedded videos, or leave the site for social networks or third-party services, those services may process data under their own terms and privacy notices.
You may exercise your rights of access, rectification, cancellation, or objection, and you may revoke consent when legally applicable and when there is no duty to keep or continue processing certain data.
In clinical, billing, security, or claims-defense matters, some requests may be subject to restrictions or mandatory retention periods established by law.
For optional web technologies, you can revoke or modify your preferences from the cookie panel. When the browser sends Global Privacy Control, we treat that signal as an opt-out for marketing, sale, or sharing of data for targeted advertising in contexts where it applies.
Although hisonrisa is located in Mexico and this notice is primarily based on applicable Mexican law, some campaigns or visits may involve residents of U.S. states with opt-out rights for sale, sharing of data, or targeted advertising.
If a security incident were to occur that significantly affects your patrimonial or moral rights, we will inform you through reasonably available means in accordance with applicable law.
We may update this notice to reflect operational, legal, or regulatory changes. The current version will be available on the website with its updated date. If a change materially affects the purposes or the way data is processed, we will adopt the corresponding reasonable communication measures.
