Privacy Policy

Enlivencell ("we", "us", or "our") is responsible for the personal information handled through this website. This policy explains how information is collected and used when you browse, contact us, request a consultation, use the patient portal, purchase products, or use our chat assistant. Our contact details appear below.

Health information is sensitive. This website policy does not replace any specific clinical privacy notice, authorization, or informed consent provided during your care. Where applicable law requires separate consent, browsing this site or accepting website terms is not a substitute for that consent.

Information you provide may include your name, email, phone number, country, language preference, inquiry, treatment interests, appointment preferences, and wellness goals. Patient accounts may contain profile details, care plans, health history, uploaded medical documents, and messages with the care team.

For purchases, we receive contact, shipping, billing, cart, order, and payment-status information. Payment card details are submitted to Stripe through its payment interface; our application uses payment references and transaction details to manage orders.

We also receive chat messages and technical information such as browser and device details, IP address, pages visited, referral links, campaign information, approximate location or country inferred from technical settings, and interactions with the site.

We use information to respond to requests, coordinate consultations and care, operate patient accounts, share documents and care plans with authorized users, process purchases, arrange fulfillment, and send service messages such as login codes and appointment updates. We also use it to prevent abuse, troubleshoot problems, maintain records, and meet legal obligations.

Additional uses include understanding public-site traffic and campaign performance and sending optional marketing communications according to your preferences. You can change marketing email preferences in portal settings or contact us to object to optional communications without cancelling your care.

Our technology providers include Vercel for hosting, Supabase for accounts, databases and document storage, Cal.com for scheduling, Stripe for payments, Resend for email, Cloudflare Turnstile for signup protection, PostHog for analytics and diagnostics, and OpenAI for the AI assistant. Information relevant to a feature may be processed by its providers. Chat messages and conversation history are stored for continuity and staff review and may be sent to the AI provider to generate responses.

Information may be available to authorized staff and service providers supporting care, operations, and order fulfillment. We may disclose information when required by law, to address fraud or security incidents, or to protect legal rights. Providers may process information outside Mexico or your country of residence, where laws may differ. Any transfer requiring your consent remains subject to that requirement.

External services, including linked social platforms, apply their own privacy notices when you interact with them. Avoid entering medical records, payment details, or other sensitive information into the public chat assistant; use the patient portal or contact the care team for an appropriate channel.

If you opt in to text messages, we use your mobile number and messaging preferences to provide the messages you requested and manage your consent. You can opt out by replying STOP, opt back in by replying START, and get help by replying HELP or contacting us at the email below. Consent to marketing texts is not a condition of purchasing products or receiving care.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not share mobile information with third parties or affiliates for marketing or promotional purposes.

We use cookies and similar browser storage for sign-in, language preferences, shopping-cart and booking continuity, and traffic attribution. Public-site analytics record page visits and interactions; analytics tools may also collect diagnostic or session information. Our public analytics provider excludes admin, patient portal, and authentication routes from its public page tracking.

You can review, block, or delete cookies and site storage in your browser settings and use browser controls or extensions to restrict analytics requests. Blocking storage may affect sign-in, language, cart, or booking features. Clearing cookies does not delete records already held by us, and analytics may resume on a later visit if your browser allows it.

We retain information for the purposes described here and applicable clinical, accounting, legal, and dispute-resolution requirements. Retention depends on the record and our relationship with you; deleting an account does not necessarily remove records we must retain. Contact us for a request concerning a particular record.

Access controls and other technical and organizational safeguards help protect information. No online service or transmission is completely secure. Keep login codes and credentials private and notify us if you suspect unauthorized account access.

You may request access, correction, cancellation or deletion, or object to the processing of your personal information (ARCO rights in Mexico), and request to withdraw consent or limit its use or disclosure, subject to applicable law. Contact the email or postal address below with the subject "Privacy request", your name, a way to reply, the right you wish to exercise, and enough detail to locate the relevant information.

We may need to verify your identity or the authority of a representative before acting. Do not send identity documents or medical records in your initial email; we can coordinate a suitable verification channel. We will address requests under the applicable legal time limits and explain any lawful restriction. You may also raise a concern with the competent data-protection authority.

The website is intended for adults arranging their own services or authorized adults acting for someone else. A parent or legal guardian should contact the clinic directly about care involving a minor. If you believe a child provided information without appropriate authorization, contact us.

We may update this policy as services or requirements change. The effective date above identifies this version. Material changes and any additional consent requirements will be handled as required by applicable law.