Legal
Privacy Policy, How Baja Premium Care Handles Your Information
This policy explains what personal and health-related information we collect, how we use and protect it, and what rights you have, whether you are a website visitor, a patient, or a prospective patient contacting us from the United States or Mexico.
Effective date: June 14, 2026 · Last updated: June 14, 2026
Information We Collect
We collect information when you visit our website, fill out a contact or reservation form, communicate with our team, or become a patient at our facility. The types of information we may collect include:
Personal identification information
- Full name
- Email address
- Phone number (including WhatsApp)
- Country and city of residence
Health and medical information
Because we provide post-surgical care, we may collect sensitive health-related information, including:
- Type of surgical procedure
- Surgery date and treating surgeon’s name
- Post-operative care requirements and medical history (where relevant to your stay)
- Vital signs and clinical notes collected during your stay
- Medication lists and prescriptions
We handle all health-related data with heightened care and only collect what is necessary to provide your care.
Technical and usage information
- IP address and approximate location
- Browser type and device information
- Pages visited and time spent on the website
- Referring URLs and search terms
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to reservation requests and answer your questions
- To coordinate your recovery stay, room assignment, nursing care plan, dietary requirements
- To communicate with your surgeon or medical team as necessary for your care
- To send confirmation emails and appointment reminders
- To process payments securely
- To improve our website and services
- To comply with legal and regulatory obligations under Mexican law
We do not use your personal or medical information for advertising, profiling, or sale to third parties.
How We Protect Your Information
We take the security of your personal and medical information seriously. Our protective measures include:
- SSL/TLS encryption on all web forms and data transmissions
- Password-protected access to patient files and internal systems
- Role-based access controls, only staff who need your information to provide care can access it
- Secure physical storage of any paper-based records at our facility
- PCI DSS compliant payment processing, we do not store card numbers
No system is 100% secure. If you believe your information has been compromised, contact us immediately at info@bajapremium.com.
Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:
With your medical team
We may share relevant post-operative information with your surgeon or their clinic to coordinate your care, with your implicit consent as a patient receiving our services.
With trusted service providers
We may share limited information with third-party providers who help us operate , such as payment processors, email platforms, or scheduling tools. These providers are contractually required to protect your data and may not use it for their own purposes.
With hospitals and emergency services
In the event of a medical emergency, we may share relevant health information with hospitals, paramedics, or emergency services as necessary to protect your life or safety.
When required by law
We may disclose information when required by Mexican law, judicial order, or a competent government authority.
Cookies and Tracking
Our website may use cookies and similar tracking technologies to improve your browsing experience and understand how visitors use the site. Types of cookies we may use:
- Essential cookies: required for the website to function (e.g. form submissions, session management)
- Analytics cookies: help us understand page traffic and user behavior in aggregate, using tools such as Google Analytics
- Preference cookies: remember choices you’ve made on the site
You can disable cookies in your browser settings at any time. Disabling essential cookies may affect how the website functions.
Your Rights
Depending on your country of residence, you may have certain rights regarding your personal information. Under Mexican law (LFPDPPP, Federal Law on Protection of Personal Data Held by Private Parties), these rights are commonly referred to as ARCO rights:
- Access: request to know what personal data we hold about you
- Rectification: request correction of inaccurate or incomplete data
- Cancellation: request deletion of your data when it is no longer necessary
- Opposition: object to the processing of your data for specific purposes
If you are a US-based patient, you may also have rights under applicable US state privacy laws. We honor reasonable requests regardless of jurisdiction.
To exercise any of these rights, contact us at info@bajapremium.com with your name, contact information, and a description of your request. We will respond within 20 business days.
Cross-Border Data Handling (Mexico–US)
Baja Premium Care is located in Tijuana, Baja California, Mexico. A significant portion of our patients are residents of the United States, primarily from California and the surrounding region.
When you submit information through our website or contact us from the United States, your data is received and processed in Mexico under Mexican law. By using our services, you acknowledge that your personal data may be transferred to and stored in Mexico.
We apply appropriate safeguards to protect your information regardless of where it is processed, consistent with the principles of the Mexican LFPDPPP and general international privacy standards.
We recommend that US-based patients review this policy alongside any applicable rights under their home state law (e.g. California Consumer Privacy Act / CCPA). We will honor verified rights requests from California residents.
Data Retention
We retain personal and health-related information for as long as necessary to:
Provide and document the care you received at our facility
Comply with legal and regulatory record-keeping requirements
Resolve disputes or respond to legal claims
Clinical records are typically retained for a minimum of 5 years from your last stay, in accordance with Mexican healthcare regulations. Website inquiry data (e.g. contact forms) is retained for up to 2 years unless you request deletion sooner.
When data is no longer needed, we delete or anonymize it securely.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or applicable law. When we do, we will revise the “Last updated” date at the top of this page.
We encourage you to review this page periodically. For material changes, we may notify active patients directly by email. Continued use of our website or services after any update constitutes acceptance of the revised policy.
Contact Us
For any questions, concerns or requests related to this Privacy Policy, including the exercise of your ARCO rights, please contact us through any of the following channels:d to this Privacy Policy, including the exercise of your ARCO rights, please contact us through any of the following channels:
info@bajapremium.com
Phone / Whatsapp
+1 619 679 6366
+1 619 391 7371
(664) 123 - 4625
Mailing address
Av. Virreyes 3350
Co. Madero Sur (La Cacho)
CP 22046, Tijuana, BC, Mexico