Privacy Notice

In accordance with the provisions of the Federal Act on the Protection of Personal Data Held by Individuals, hereinafter referred to as “the Act”, this Privacy Notice is issued:

1.- Responsible or Responsible for Personal Data:

For the purposes of this Privacy Notice, Mericor S.A. de C.V. (hereinafter “LEONA”) with registered office at Av Jose Vasconcelos 210, Interior 6-B, Residencial San Agustín, San Pedro Garza Garcia, Nuevo Leon, 66260, is the Responsible or Responsible for obtaining, disclosing, storing, using, handling, processing and transferring personal data or sensitive personal data (hereinafter “Personal Data”) that You as a user, visitor, customer or person interested in any of LEONA's services (hereinafter referred to as “You”) provide us with either: (i) directly; (ii) as the Manager of the Personal Data or Sensitive Personal Data that You, as Responsible, collect from patients in the exercise of your profession as a Physician (hereinafter indistinctly in singular or plural form as the “Patient”); or (iii) through the transfer of Personal Data or Sensitive Personal Data that You, as Responsible, carry out to LEONA with the express consent of the Patient.

2.- Definitions applicable to the Privacy Notice.

The terms used in this Privacy Notice with an initial capital letter in each word will have the following meanings:

Aggregate Information: information that has been anonymized and combined with that of other users and analyzed or evaluated as a whole, so that no specific individual can be identified.

Anonymized Information: information that has been stripped of registration information (for example, your name and contact information) and other personal data, so that the individual cannot be reasonably identified and put him at potential risk.

Individual Information: information about an individual's sociodemographic characteristics, pathological and non-pathological medical history, lifestyle, nutritional and clinical data and/or images.

Registration Information: information provided when registering as a user or customer of the Site (as this term is defined in paragraph 3 of this Privacy Notice).

Sensitive Personal Information or Data: personal data that affects the owner's most intimate sphere, or whose misuse could give rise to discrimination or pose a serious risk to the owner. Data that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preference are considered sensitive.

Self-Informed Information: information that you provide directly to LEONA or through the use of tools such as the use of questionnaires, forms, use of the Site (as defined in paragraph 3 of this Privacy Notice), including the use of LEONA's mobile applications, web platforms or software as well as the use of data messaging applications or systems to send and receive text, voice, images, videos, documents, contacts (i.e. Whatsapp, Telegram, iMessage, or any other similar characteristics that may be used by You from time to time) related to our services, including Personal and Sensitive Information about You.

Patient Information: information or Personal Data of a Patient that You provide to LEONA either as a transfer of this or as a Processor, directly or through the use of tools such as the use of questionnaires, forms, the use of the Site (as defined in paragraph 3 of this Privacy Notice), including the use of LEONA mobile applications, web platforms or software as well as the use of applications or data messaging systems to send and receive text messages, voice, images, videos, documents , contacts (i.e. Whatsapp, Telegram, iMessage, or any other similar characteristic that you may use from time to time) related to our services, including Personal and Sensitive Patient Information.

Inferences and derived data: information, data, assumptions or conclusions that are derived or calculated directly or indirectly from Self-Reported Information or Patient Information and from other sources, such as medical images. Web behavioral information: information about how you use our services collected through histories, cookies, web beacons or beacons, and similar technologies (for example, device information, IP address, browser type, domains and pages viewed).

Services: refers to all the Services provided by LEONA through the Site (as this term is defined in paragraph 3 of this Privacy Notice) and that you may request when creating a User account.

3.- Personal Data Collected:

The Personal Data that LEONA collects, through any of the alternatives mentioned in the previous point, is carried out through your use of our website Www.leona.health or any website owned by LEONA, including related sites, mobile applications, digital platforms, software, social networks, tools owned by LEONA, or even through the use of data messaging to send and receive text messages, voice, images, videos, documents, contacts (i.e. Whatsapp, Telegram, iMessage, or any other similar feature that may be used by You from time to time) regardless of the form and place of access (hereinafter or in this Privacy Notice, referred to together or individually as the “Site”) which will be protected and treated in accordance with the Federal Law on the Protection of Personal Data Held by Individuals (hereinafter “Personal Data Act”), in accordance with this Privacy Notice and other applicable regulations.

In order to make use of the Services offered by LEONA on the Site, you agree that you will have to create a User account on the Site and provide us with Registration Information, which consists of:

- Telephone;

- Full name;

- Gender of birth and gender;

- Date of birth;

- Telephone number, landline or mobile number, copy of official identification and copy of proof of address, Email;

- SHORT, ETC.

- Debit/credit card details and any financial information that is necessary to fulfill the processing purposes set out in this Privacy Notice;

LEONA will only have access to the information that you voluntarily provide personally and directly, as well as to that Patient Information that you provide to LEONA either as a data transfer or as a Manager. Therefore, LEONA may only collect and store the following Personal Data, in order to carry out the purposes described in this Privacy Notice.

3.1. Information You Provide to LEONA directly:

Self-Informed Information. In order to provide LEONA services related to Facilitating Your Communication, as a Doctor, with Your Patients, we process the personal and sensitive information provided by You through the Site, surveys, forms, applications, web platforms and software. This information may include Personal Data about your personal traits (for example, weight and height), ethnicity, diseases (for example, type 2 diabetes and hypertension), other health-related information (for example, cholesterol levels, systolic and diastolic pressure) and family history information. Before disclosing information about a family member, you must ensure that you have the family member's permission to do so.

3.2. Information that You, as a Physician, Provide to LEONA Regarding Your Patients:

Patient Information. In order to provide LEONA services related to Facilitating the communication of You, as a Doctor, with Your Patients, we treat the personal and sensitive information provided by You through the Site. This information may include Personal Data and/or Sensitive Personal Data about your personal traits (for example, weight and height), ethnicity, diseases (for example, type 2 diabetes and hypertension), other health-related information (for example, but not limited to, cholesterol levels, systolic and diastolic pressure) and family medical history information of your Patients. Before transferring the data of your Patient's family members or providing them to LEONA as a Manager, you as a Physician must ensure that, where appropriate, your Patient has the express consent of the family member to do so, or you are the Guardian or Legal Representative in the case of minors.

By accepting this Privacy Notice, You, as Responsible for obtaining, disclosing, storing, using, managing, processing and transferring Your Patient's Personal Data and/or Sensitive Personal Data, confirm and guarantee to LEONA that, for the processing of your Patient's personal data in accordance with this Privacy Notice, you have the express consent of your Patient, whether in writing, by electronic, optical means or by any other technology or by unambiguous signs as established in article 8 of the Personal Data Act, and that, in the case of Sensitive Personal Data, the Patient has the express written consent of the Patient for its treatment in accordance with this Privacy Notice, through the Patient's autograph signature, their electronic signature, or any authentication mechanism they have established for this purpose, in accordance with the provisions of article 9 of the Personal Data Act.

3.3. Information collected through tracking technologies: use of cookies and webcons:

LEONA uses cookies and similar technologies (such as beacons, tags, web beacons, scripts and device identifiers (collectively, “Cookies”) to allow its servers to recognize the web browser you use and tell us how and when you visit and use the Services, to analyze trends, learn about our user base, operate and improve products and/or services. Cookies are text files that are automatically downloaded and stored on the hard drive of a computer, tablet, phone or electronic device when you use this device to access the Site. LEONA may supplement the information it collects from you with information received from third parties, including third parties that have placed their own Cookies on your device (s).

LEONA uses the following types of Cookies:

Essential cookies. Essential Cookies are necessary to provide the services you have requested. For example, certain Cookies allow you to access secure areas of our services. Disabling these Cookies may make certain services unavailable;

Functional cookies. Functional Cookies are used to record your choices and settings in relation to the services provided by LEONA, maintain your preferences over time and recognize you when you return to the site. These Cookies help to personalize the content of the site for you, greet you with your name and remember your preferences;

Performance/analysis cookies. Performance/analysis cookies allow us to understand how visitors use the LEONA website, for example, by collecting information about the number of visitors to the site, what pages visitors view and how long visitors view the pages of the site. Performance/Analysis Cookies also help measure the performance of advertising campaigns carried out by LEONA to improve campaigns.

Google, Inc. (“Google”) uses cookies in connection with its Google Analytics services. Google's ability to use and share the information collected by Google Analytics about your visits to the site is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option of disabling the use of Google cookies by visiting Google's advertising disabling page at https://policies.google.com/technologies/ads or the Google Analytics disabling browser add-on at https://tools.google.com/dlpage/gaoptout/.Usted you can decide whether or not to accept Cookies through your Internet browser settings. Most browsers have the option of disabling Cookie functionality, which will prevent your browser from accepting new Cookies, and (depending on the sophistication of your browser software) allowing you to decide on the acceptance of each new Cookie in several ways. You can also delete all Cookies that are already on your computer.

On the other hand, web beacons are images inserted in a website or email, which can be used to monitor the behavior of a user, such as storing information about a user's IP address, length of time spent interacting on that page and the type of browser, among others.

When you browse the LEONA Site, LEONA, or its Internet service providers, may use Cookies, web beacons or similar technologies. LEONA uses cookies to help identify you as a user, to improve your experience on the site, to evaluate promotional effectiveness and to ensure trust and security on the site as well as to: Personalize and improve the User experience; Provide security; Analyze the use of our Services (such as to analyze your interactions with the results, reports and other features of the service); Collect demographic information about our User base; offer you our Services; Monitor the success of campaigns of marketing; and Posting targeted advertising on our site and other sites on the Internet.

You can decide whether or not to accept Cookies by configuring your Internet browser. Please note that third parties (including, for example, advertising networks and providers of external services such as network traffic analysis services) may use cookies over which we have no control. These Cookies are likely to be analytical/operational or for advertising purposes.

Most browsers have the option of disabling the functionality of Cookies, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on the acceptance of each new Cookie in several ways. You can also delete all Cookies that are already on your computer. If you reject Cookies, you can still use our site, but your ability to use some features or areas of our site may be limited.

How Can You Manage Cookies?

Those cookies that are not mandatory for browsing this website may be disabled in the website settings. These settings are located in the footer of the Site. In addition, most web browsers allow you to choose whether or not to accept cookies and also allow you to delete them once they have been stored. The options available and the mechanism used will vary from browser to browser. Such browser settings are typically found in the “options”, “tools” or “preferences” menu. You can also check the browser's “help” menu. For example:

Cookie settings in Internet Explorer

Cookie settings in Firefox

Cookie settings in Chrome

Cookie settings in Safari

The Personal Data that we obtain from these tracking technologies are the following: ID number; Browsing time; Browsing time on our website, sections viewed, and Internet pages accessed prior to ours.

3.4. Other types of information

We are continuously working to improve our Services with new products, applications and features that may result in the collection of new and different types of information. We will update our Privacy Notice and/or request your prior consent for further processing, as necessary.

4.- Purpose of the Processing of Personal Data:

4.1. Main Purposes of Data Processing:

  1. In the case of you as a user, visitor, customer or person interested in registering and making use of any of LEONA's services, your personal data, whether containing Self-Informed Information, Registration Information or any other personal data of you that is provided to LEONA from time to time for the purposes of this Privacy Notice, will be used to provide you with our Services and, where appropriate, operate them according to your activity as a Physician, analyze, improve or complement them. These activities may include, among other things, the use of your Personal Data in a manner consistent with this Privacy Notice to:
  • Communicate with You, execute your requests according to the scope of our Services, complement and support your activity as a Doctor, coordinate your schedule, confirm and follow up on medical appointments, send messages and make follow-up calls to Your Patients, interact with them on your behalf to follow up on medical treatments that You are providing to Your Patient and, in general, facilitate the communication and interaction that You, as a Doctor, have with Your Patients;
  • Enable and improve the use of our website, including providing personalized content and information and tracking the use of our Services; Enforce our Terms and Conditions, and other agreements; Monitor, detect, investigate and prevent prohibited or illegal behavior on our Services, to combat spam and other security risks;
  • To communicate with you, in order to connect you with opportunities or alternatives for complementary services for your activity, by service providers with whom LEONA has business alliances.

  1. In the case of Patient Information that You, as your Doctor provides us, will be used to generate and make available to you a Patient Profile with the medical information of your clinical case, a medical record or electronic medical record that can be used by You for the monitoring and personalized attention of your Patients or to generate interaction with various medical specialists who are providing medical care to the Patient, as well as to complement and generate alternative treatments with different doctors, through the use of artificial intelligence for the extraction of clinical information contained in the medical tests or clinical results that your Patient sends to him by any means that, in turn, is interrelated or connected with the LEONA Services.

It may also be used by LEONA to generate analysis and research on anonymized statistical diagnoses, effectiveness in the use of medications, academic or academic research material.

As established in paragraph 3.2. of this Privacy Notice, You, as Responsible for obtaining, disclosing, storing, using, managing, processing and transferring Your Patient's Personal Data and/or Sensitive Personal Data, confirm and guarantee to LEONA that, for the processing of any personal data of your Patient in accordance with this Privacy Notice, you have the express consent of your Patient either in writing, by electronic, optical means or by any other technology or by unambiguous signs in accordance with the provisions of article 8 of the Personal Data Act, and that, in the case of Sensitive Personal Data, the Patient has the express written consent of the Patient for its treatment in accordance with this Privacy Notice, through the Patient's autographed signature, their electronic signature, or any authentication mechanism that they have established for this purpose, in accordance with the provisions of article 9 of the Personal Data Act.

LEONA may include part of the information collected and anonymized in a large set of data for analysis aimed at making scientific discoveries, epidemiological studies and the development of new tools focused on improving health, maintaining health and medical care.

LEONA may be sponsored, funded, or work in collaboration with third parties, such as non-profit foundations, academic institutions, government agencies, business partners related to health services, or pharmaceutical companies. LEONA can study a specific group or population; identify potential areas or targets for focused health campaigns; carry out or support the development of preventive or early diagnostic health strategies, or devices to diagnose, predict or treat medical conditions or other health conditions; work with the public, private and/or non-profit entities on health research initiatives. The moment you decide to use LEONA's services or software, you accept that your Personal Data may be used in accordance with the following principles:

Your Personal Data will be used for research purposes, but it will be anonymized and will not be linked to contact information or personal data that allows you to be individually identified.

LEONA may share summary statistics, which do not identify any particular individual or contain information at the individual level, with qualified research collaborators.

You can withdraw your consent to participate in LEONA research at any time by writing to hola@leona.health.

4.2. Secondary purposes of data processing.

We inform you that the Personal Data you provide to us may be used for purposes that are not necessary for the provision of the services offered by LEONA, or have not given rise to the legal relationship of the Data Controller, such as: (i) offering promotions and events, (ii) carrying out research and market analysis to know the consumption preferences of our current or potential customers and generating statistical reports, (iii) knowing the consumption patterns or trends in the consumer segment of our products, (iv) receive advertising in print or through electronic media, including communications for online marketing or telemarketing purposes about products and services, and (v) participation in surveys.

If you do not express your express refusal to process personal data for secondary purposes, through the means indicated to exercise ARCO rights, it will be understood that you have given your express consent for these purposes. If you do not want your Personal Data to be used for the Secondary Purposes described above, you can communicate this through the following email: hola@leona.health.

In the same way, the personal data collected may also be processed so that the Data Controller can meet legal requirements of competent authorities.

Carry out research and development activities, which may include, for example, performing data analysis to develop or improve existing products and services, using collected and/or calculated information to evaluate the performance of our solutions, identify and correct errors, improve and provide usage and marketing reports, and carry out quality control activities.

They may also be used to provide Customer Service. When you contact LEONA at hola@leona.health we may use or request personal information, including confidential information, as needed to answer your questions, resolve disputes, and/or investigate and resolve problems or complaints.

For marketing communications. By providing your personal and contact information to use any of LEONA's services, you agree that we can send you notifications about product offers, services or promotions from LEONA, our partners and/or our business partners, through the contact means provided. You can unsubscribe from receiving these marketing communications at any time.

5.- Means adopted by LEONA to limit the Use or Disclosure of Personal Data:

Personal Data will be treated with the strictest confidentiality, taking care of the administrative, physical and technical security measures that LEONA implements in its internal security policies and procedures, avoiding possible illegal disclosure of data and limiting its use to what is established in this Privacy Notice.

LEONA implements physical, technical and administrative measures to prevent unauthorized access or disclosure of your information, to maintain data accuracy, to ensure appropriate use of information and to safeguard your personal information. Our team regularly reviews and improves our security practices to help ensure the integrity of our systems and your information. These practices include, but are not limited to, the following areas:

Encrypted. LEONA encrypts or encrypts sensitive information for transmission to remote servers.

Data storage on servers that follow high security standards. LEONA stores the data collected during the use of our software, website and mobile applications, on AWS servers that comply with HIPAA (“Health Insurance Portability and Accountability Act”) privacy standards.

Limited access to essential personnel. We limit access to information to authorized personnel in work functions, with strict access controls.

6.- Means to Exercise the Rights of the Owners:

At any time, you or your duly accredited legal representative may exercise your rights of Access, Rectification (when you consider that the data is erroneous or inaccurate), Cancellation (if you consider that the data is not being treated properly) and Opposition (if you do not want your data to be processed for specific purposes), hereinafter jointly referred to as “ARCO Rights”. The exercise of one of them does not prevent the exercise of the others.

To exercise your ARCO rights, you must submit your request at our address located at Av Jose Vasconcelos 210, Interior 6-B, Residencial San Agustín, San Pedro Garza Garcia, Nuevo Leon, 66260, or send it to our personal data department at hola@leona.health.

The request must contain the following data: (i) name of the Owner, (ii) address and email address to notify him of the response to his request, (iii) a clear and precise description of the data with respect to which he seeks to exercise the corresponding right, (iv) the subject of the request, (v) any element that facilitates the location of the data. In addition, you must attach a copy of your identification and, where appropriate, the document that accredits legal representation.

The deadline for responding to your request will be 20 business days from the day on which the request for access, rectification, cancellation and corresponding opposition was received. The response will be communicated to you within the period mentioned above to the email address you provided in your request or by sending a letter to the address provided in the request. Once you receive such notification, you will have a period of 15 business days to make it effective if appropriate.

At any time you can revoke the consent you have given us for the processing of your personal data, so that we stop using them. To do this, you must submit an application in the terms mentioned above, for the exercise of ARCO Rights. The procedure to be followed will be the same as that provided for the exercise of ARCO rights. If your request is appropriate, your data will no longer be processed by LEONA.

At any time, the Data Controller may refuse to process your personal data for purposes other than those that gave rise to the legal relationship LEONA and you. The procedure to be followed will be the same as that provided for the exercise of ARCO rights. If your request is appropriate, your data will no longer be processed by LEONA.

7.- Data Transfer:

Having read, understood and accepted the terms established in this Privacy Notice, You give your consent for LEONA, acting as Data Controller or any Responsible, to transfer Personal Data to any third party, domestic or foreign, on the understanding that the treatment that such third parties give to Personal Data must comply with the provisions of this Privacy Notice and will be used for the Primary and Secondary purposes established in this Privacy Notice.

By accepting this Privacy Notice, You, as Responsible for obtaining, disclosing, storing, using, handling, processing and transferring Your Patient's Personal Data and/or Sensitive Personal Data, confirm and guarantee to LEONA that, for the processing of your Patient's personal data in accordance with this Privacy Notice including, where appropriate, the transfer, you have the express consent of your Patient, whether in writing, by electronic, optical means or by any other technology or by unambiguous signs in accordance with the provisions of Article 8 of the Personal Data Act, and that, in the case of Sensitive Personal Data, they have the express written consent of the Patient for their treatment in accordance with this Privacy Notice, through the Patient's autographed signature, their electronic signature, or any authentication mechanism they have established for this purpose, in accordance with the provisions of article 9 of the Personal Data Act; It also guarantees and ratifies LEONA that, for the purposes of data transfer, you have the express authorization of your Patient, as established in article 36 of the Personal Data Act, and the exceptions provided for in article 37 of the aforementioned regulation are even applicable.

For the purposes of the provisions of this Section, LEONA informs Personal Data Holders that in order to deliver products, services and solutions to its customers, consumers, employees, suppliers and other users of its services, it has entered into or will enter into various commercial agreements with suppliers of products and services, both in the national territory and abroad, to provide, among other services, the following services: (i) telecommunications and e-mail, (ii) administration and management of databases, (iii) automated processing of Personal Data and its storage, (iv) authentication and validation of emails, and (v) telemarketing, credit card terminals and electronic invoicing. The Owner's authorization granted in accordance with this Section empowers LEONA to transmit Personal Data to such providers or third parties, on the understanding that such providers or third parties are obliged, by virtue of the corresponding contract, to maintain the confidentiality of the Personal Data provided by the Data Controller and to comply with this Privacy Notice. The Data Controller may transfer Personal Data to any other company in the same business group to which the Data Controller belongs and that operates with the same internal processes and policies.

Notwithstanding the foregoing, LEONA will not sell, lease, or rent your individual-level information or any confidential information to a third party for research purposes without your express consent.

LEONA may share aggregated information for statistical purposes, or for contact purposes with some of its business partners, who will always be easily identifiable by the appearance of their logo (s) on the platform with which the User interacts.

You accept and grant your express consent so that LEONA can share Personal Data with Google Analytics, Firebase and Segment to meet the needs of the Services it offers on its Site. Therefore, by accepting this Privacy Notice, you expressly accept that your Personal Data will be shared with the following companies:

Recipient of Personal Data/Country/ Purpose

Google Analytics/ USA/Get a complete view of the Users who come to the Site. Establish different metrics such as a sales channel, lead objectives, conversion, etc. Basic composition of the Site's audience.

Firebase/USA/ Provide access to Mobile Services, including analytics, authentication and the real-time database. Work like GA when we migrate to the native application.

Segments/ USA/ Allow us to know our Users, establish specific audiences to optimize lookalike campaigns with FB and Ig, inform and activate inbound marketing processes;

While LEONA directly carries out most of the data processing activities required to provide our services to you, we contract with some external service providers to help us support our services for cloud storage, information technology (IT) services and security, including but not limited to AWS, Google Analytics, Firebase and Segment.

LEONA is responsible for the processing of Personal Data and will be responsible for any misuse by external service providers.

In addition, LEONA may transfer Personal Data in the following cases:

a) At the request of legal bodies

Under certain circumstances, your personal information may be subject to processing in accordance with laws, regulations, court subpoenas, government orders, or other subpoenas. For example, we may be required to disclose personal information in coordination with regulatory authorities in response to legal requests from public authorities, including to meet national security or law enforcement requirements. LEONA will preserve and disclose all information to law enforcement agencies, or others who so request backed by a legal order, or if it believes in good faith that such preservation or disclosure is reasonably necessary to:

Comply with legal or regulatory process, or obligations that LEONA may have in accordance with ethical and professional rules, laws and regulations; enforce LEONA's Terms and Conditions; respond to claims that any content violates the rights of third parties; or protect the rights, property, or personal safety of LEONA, its employees, users, partners, customers and the general public.

b) Business transactions

In the event that LEONA undergoes a business transition such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personal information is likely to be among the assets transferred. In such a case, your information would be subject to the policies of the pre-existing Privacy Notice. Derived from the services of our suppliers and/or contracts with business partners, your information may be stored and processed in Mexico or in any other country where LEONA or its subsidiaries, affiliates, business partners or service providers maintain facilities and, therefore, your information may be subject to the laws of those other jurisdictions that may be different from the laws of your country of residence.

If the Data Controllers do not want the Data Controller to transfer their Personal Data, they can express their refusal by sending a communication to the Data Controller to the following email address: hola@leona.health.

8.- Information Retention Period.

We inform you that we retain your personal information for as long as necessary to provide any service and fulfill the purposes set out in this Privacy Notice. To determine the appropriate retention period for your personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of such personal information, the purpose for which we process your personal information and whether we have other alternatives to fulfill those purposes.

The information collected through the use of artificial intelligence to extract clinical information contained in the medical tests or clinical results that your Patient sends to you by any means that, in turn, is interrelated or connected with the LEONA Services will be stored for 5 years in compliance with the applicable law on the subject, unless you continue to provide constant and permanent care for the Patient, in which case, it will be stored in addition to the Patient Profile for as long as this relationship is hold. In this case, you acknowledge and guarantee to LEONA that you have informed your Patient and obtained your express authorization to do so, so that the conservation will be considered justified in pursuing a legitimate, specific purpose in accordance with the activities or explicit purposes that LEONA pursues in providing its Services, since these are aimed at supporting, supplementing and assisting You, as a Doctor, in the prevention or medical diagnosis, the provision of health care, medical treatment or the management of health services with your Patient.

After that period, your information will be destroyed, unless it is reasonably necessary to keep it to comply with our legal obligations (including requests or orders from any authority), to comply with regulatory requirements, to resolve disputes, for security reasons, to prevent and prevent fraud or other unlawful acts, to comply with your additional requests, or to enforce any terms of use of our platforms, policies or other legal documents as appropriate.

9.- Changes to the Privacy Notice:

Any changes to this Privacy Notice will be informed to you through the following means:

• By email to the address provided by the owner of the personal data.

• By publication at LEONA's home address.

• By publication in LEONA's commercial establishments, its website and/or social networks.

This Privacy Notice may be modified at any time in order to respond to legislative developments, as well as changes to LEONA's internal policies.

If the purposes for which your personal data are processed change, if necessary, your consent will be requested again.

10.- Disagreements or Complaints, And Competent Authority:

If you consider that your right to the protection of your Personal Data or those of your Patients has been injured by any conduct or omission on our part, or you presume a violation of the provisions of the Federal Law on the Protection of Personal Data Held by Individuals, its Regulations and other applicable laws, you may file your disagreement or complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI). For more information, we suggest you visit their official website www.inai.org.mx.

For any complaint or suggestion regarding this Privacy Notice, please contact us immediately at the following email address: hola@leona.health.

11.- Authorization and Consent

As the Owner of your Personal Data as well as Responsible for the Personal Data of your Patients, you acknowledge that:

You have read and understood this Privacy Notice; In accordance with articles 8 and 9 of the Personal Data Act, you give your express consent to the collection, use, storage, processing, transfer and protection of your Personal Data; The use of our website and, in general, of our services constitute tacit confirmations of your consent to the provisions of this Privacy Notice.