1. Data controller

Dr. Evert Hair Institute — Torre Médica COMEDAL — Ciudad del Río, Calle 20 # 43F – 113, Consultorio 1003, Medellín, Colombia. WhatsApp: +57 312 763 5544. Email: dreverthairinstitute@gmail.com.

This policy is governed by Colombian Law 1581 of 2012 (habeas data), Decree 1377 of 2013 and other applicable Colombian data protection regulations. If you contact us from abroad, your data is processed in Colombia under these rules.

2. What data we collect, and where

• Contact form: name, country/city, WhatsApp, optional email, reason for inquiry and message.
• Cost calculator: your questionnaire answers, optional photos, name, country/city and WhatsApp.
• Online consultation: name, age, country/city, WhatsApp, your concern, and scalp photos — which are sensitive health data.
• Browsing: if we enable analytics tools (Google Analytics, Meta Pixel), site usage data under their own policies. It will be disclosed on this page.

3. Sensitive health data

The photos you submit and the information about your hair condition are sensitive data. Processing them requires your explicit authorization, which you give by ticking the consent box before submitting. You are not obliged to authorize it; without that authorization, we simply cannot provide the remote assessment.

4. What we use your data for

• Responding to your inquiry through your preferred channel (WhatsApp or email).
• Preliminary medical review of your photos by the clinical team.
• Scheduling and managing your consultation.
• Internal records of inquiries and their status.
• Meeting the clinic’s legal and contractual obligations.

We never use your photos in advertising or social media without a separate, specific written authorization.

5. How long we keep it

• Online consultation cases that do not continue with the clinic: automatically deleted, photos included, after 6 months.
• Contact and quote requests: kept for the duration of the business relationship and applicable legal terms.
• Patients who continue their process: their information becomes part of their clinical record, governed by health-record regulations.

6. Your rights

As data subject you may: access, update and correct your data; request proof of authorization; be informed about how it has been used; file complaints with the Colombian Superintendence of Industry and Commerce; revoke your authorization and request deletion where no legal or contractual duty prevents it.

To exercise these rights, write to dreverthairinstitute@gmail.com or WhatsApp +57 312 763 5544. We respond within the legal terms (10 business days for queries, 15 for claims).

7. Security

Medical photos are stored in a protected area of the server, outside the public site, with access restricted to authorized clinical staff. The site runs over encrypted connections (HTTPS). We apply reasonable technical and organizational measures against unauthorized access, loss or misuse.

8. Third parties

Data is processed on our hosting provider’s infrastructure. If we enable third-party services (analytics, Google appointment booking), they process data under their own policies and it will be disclosed here. We do not sell or share your data for commercial purposes.

9. Changes

Substantial changes will be published on this page with their update date.