Privacy Policy

Last updated: September 2026.

This Privacy Policy is issued in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations. The Spanish version is the governing text.

Data controller

Dr. Berenice Franco (Mexican Professional License 3909214; credential FMCPM-604798), based in San Miguel de Allende, Guanajuato, Mexico, is responsible for processing and protecting your personal data. Contact: Berenice@dr.bfranco.com.

Personal data we collect

• Identification and contact data: name, date of birth, email, phone number, and country or city of residence.
• Sensitive health data: medical history, symptoms, family history, medications and supplements, lifestyle habits, and lab results.
• Billing and payment data, when applicable.

Sensitive data is processed only with your express consent, obtained in writing or electronically before care begins.

Purposes

Purposes required for the doctor-patient relationship:

• Providing online functional medicine consultations.
• Creating and safeguarding your medical record.
• Ordering and interpreting lab tests and following up on your treatment plan.
• Scheduling, confirming, and managing appointments and payments.

Secondary purpose: sending you educational health and wellness information. You may opt out at any time by writing to the email above, without affecting your care.

Platforms and transfers

To provide care, we use service providers that process data on our behalf: Practice Better (scheduling, records, and patient portal), clinical laboratories (when tests are ordered), Fullscript (supplement orders, if you choose to use it), and WhatsApp or email for communication. Your data is never sold or shared with third parties for marketing. It will only be shared without your consent where required by law.

ARCO rights and withdrawing consent

You may Access, Rectify, Cancel, or Oppose the processing of your data (ARCO rights), and withdraw your consent, by emailing Berenice@dr.bfranco.com with your name, a way to reply to you, proof of identity, and a clear description of your request. We will respond within 20 business days. Some medical record data must be retained for the period required by health regulations.

Changes to this policy

Any changes to this Privacy Policy will be posted on this page.