Dr. Hirosi Sashida
Book

Privacy Policy

Clínica Sashida

Last updated: June 27, 2026

This English version is provided as a courtesy translation for international (medical tourism) patients. In case of any discrepancy, the Spanish version (Aviso de Privacidad) shall prevail as the legally binding document under Mexican law.

1. Who is responsible for your personal data?

The controller of your personal data is Clínica Sashida, S.A. de C.V. (hereinafter "Clínica Sashida", "we", or "the Controller"), located at:

For anything related to your personal data, we have designated a Personal Data Department, reachable at contacto@clinicasashida.com.

Business hours: Monday to Friday, 9:00–17:00; Saturday, 9:00–13:00; Sunday closed.

This Policy is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines.

2. What personal data do we process?

2.1 Identification and contact data

When you contact us via WhatsApp, phone call, or our Doctoralia profile, we may collect:

  • Full name.
  • Phone number.
  • Email address.
  • The reason for your inquiry.

Note: our website has no data-capture forms of its own. You provide your information directly through the contact channels above.

2.2 Sensitive personal data (health data)

As a medical practice, to care for you we process sensitive personal data, specifically health data, such as:

  • Clinical history, medical background, and conditions.
  • Diagnoses, instructions, and progress notes.
  • Clinical photographs (including "before and after" images for medical and follow-up purposes).

This sensitive data is collected only during in-person or video consultations, never through the website. Its processing requires your express, written consent (see Section 6).

2.3 Browsing data

Our website uses Vercel Analytics, which generates aggregated and anonymous usage metrics. This service does not use advertising cookies and does not allow us to identify you personally (see Section 8).

3. Why we use your data: primary purposes

The following purposes are necessary for our relationship. Without them we could not provide the service:

  • Scheduling and managing your medical appointments.
  • Providing medical care: assessment, diagnosis, and treatment in plastic, aesthetic, and reconstructive surgery.
  • Postoperative follow-up and continuity of care.
  • Creating and keeping your clinical record, as required by applicable health regulations (including Mexican standard NOM-004-SSA3-2012).
  • Billing and compliance with tax, accounting, and legal obligations.
  • Communicating with you about your care, results, or instructions.

4. Secondary purposes (you may opt out)

The following purposes are not necessary for your medical care but help us improve your experience:

  • Appointment or care reminders.
  • Satisfaction and quality surveys.
  • Marketing and promotional communications about Clínica Sashida.

You may refuse consent for these purposes at any time without affecting your medical care. To do so, email contacto@clinicasashida.com with the subject "Opt-out of secondary purposes", stating your name and which uses you reject.

If you do not state your refusal, we will understand that you consent to these secondary purposes.

5. How we obtain your data

We obtain your personal data:

  • Directly from you, when you contact us or attend a consultation.
  • Through the Doctoralia (Docplanner) platform, when you book through it.
  • Indirectly and anonymously, via Vercel Analytics browsing metrics.

6. Sensitive data and images: express consent

6.1 Health data

Under Articles 8, 9, and related provisions of the LFPDPPP, processing your sensitive health data requires your express written consent through your signature, obtained during consultation via the relevant clinical and informed- consent forms.

6.2 Use of patient photographs ("before and after")

Clínica Sashida may publish patient photographs for disclosure purposes (e.g., "before and after" images on the website or social media) only when the patient has expressly authorized it in writing, through a specific consent document separate from the medical treatment consent.

Such consent:

  • Is voluntary and may be revoked at any time (see Section 10).
  • Specifies the channels where the images may be shared.
  • May be given on an anonymized basis (without identifying data) upon request.

Medical advertising notice: published images and content are for informational and disclosure purposes. They do not constitute any promise or guarantee of results. Outcomes of any procedure vary by patient and must be individually assessed in consultation. Clínica Sashida complies with applicable medical-advertising regulations (Mexico's General Health Law and COFEPRIS provisions).

7. Data of minors

Where care involves minors or persons under guardianship, their data will be processed with the consent of the parent, guardian, or legal representative, who must prove such capacity.

8. Cookies and tracking technologies

Our website uses Vercel Analytics for aggregated and anonymous usage statistics. This tool:

  • Does not install advertising or profiling cookies.
  • Does not collect data that identifies you personally.
  • Is used only to understand site performance and improve it.

If we later add cookies or technologies that process personal data, we will inform you by updating this Policy and, where applicable, through the corresponding consent mechanisms.

Third-party links: our site may contain outbound links to social networks (e.g., Meta/Facebook, Instagram, or TikTok). Those platforms are governed by their own privacy policies, over which Clínica Sashida has no control.

9. Data transfers and remittances

9.1 Data processors (remittances)

To operate, we share certain data with providers that process information on behalf of and under the instructions of Clínica Sashida (processors). These remittances do not require your consent under the LFPDPPP:

  • Doctoralia / Docplanner — appointment-scheduling platform.
  • Vercel — website hosting and analytics.

These providers must process your data in line with this Policy and maintain confidentiality.

9.2 Transfers to third parties

Clínica Sashida does not sell or trade your personal data. We may transfer your data without your consent only in the cases set out in Article 37 of the LFPDPPP, including:

  • When required by law or a competent authority (judicial, health, tax).
  • When necessary for your medical care or in an emergency, by health professionals.
  • To fulfill obligations under a legal relationship with you.

Any other transfer will require your prior consent.

10. Your ARCO rights and consent revocation

You have the right to Access your data, Rectify it when inaccurate, Cancel it when no longer needed, and Object to its processing (ARCO rights). You may also revoke any consent you gave us, including the use of your photographs.

How to exercise them

Send your request to contacto@clinicasashida.com, including:

  1. Your full name and a means of contact.
  2. A copy of official ID proving your identity (or legal representation).
  3. A clear description of the data and the right you wish to exercise.
  4. Any element that helps us locate your data.

Timeframes (Article 32 LFPDPPP)

  • We will communicate our decision within 20 business days of receiving your request.
  • If granted, we will make it effective within the following 15 business days.

Exercising these rights is free (you only cover shipping or reproduction costs, if any).

Legal limitation: cancellation or objection regarding your clinical record may be limited by retention obligations under health regulations (e.g., NOM-004-SSA3-2012), for the period they establish.

Revoking consent or canceling data has no retroactive effect and may mean we can no longer provide the service.

11. Limiting the use or disclosure of your data

You may request to limit the use or disclosure of your data by emailing contacto@clinicasashida.com. If granted, we will add you to our internal exclusion list.

12. Changes to this Privacy Policy

This Policy may change due to legal updates, our services, or our privacy practices. Any update will be posted at https://drhirosisashida.com/privacy-policy, showing the new update date. We recommend reviewing it periodically.

13. Competent authority

If you believe your right to personal data protection has been violated, you may contact the competent authority for personal data protection under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.