Privacy notice

At Joya Hospitals we are committed to protecting the personal data you entrust to us. This notice generally describes how we handle information collected through this website and our contact channels.

Data controller

Joya Hospitals, together with the entities that operate each hospital, is responsible for the personal data it collects. The address, contact details and full notices applicable to each hospital are set out in each location’s documents.

Full notices by hospital

To read the full privacy notice that applies to your hospital, see the documents below (available in Spanish):

Information we collect on this site

We may collect identification and contact data (name, email address, telephone), the hospital or service you are interested in, the message you send through our forms and, if you subscribe to the newsletter, your email address and name. We may also receive health-related information when you choose to share it in connection with a request for care.

Purposes

Respond to information, contact, appointment and service enquiries.
Manage medical, administrative, billing and insurance services where applicable.
Send communications related to the service you requested.
Send information and benefits by email when you consent.
Comply with legal obligations and requests from competent authorities.

Sensitive personal data

Medical care may require sensitive personal data, including health data. When you provide this data to receive care, it is processed with enhanced security measures and, where required by law, with your express consent. We do not condition medical care on providing data that is not necessary for the service.

Transfers and processors

We may share data with providers supporting our operations (for example, email, hosting, laboratory, insurance or government services), only for the purposes described and with appropriate safeguards. We do not sell your personal data.

Your rights

You may exercise your rights of access, rectification, cancellation and objection, and withdraw your consent, through our contact form or at the corresponding hospital. Please provide your name, a contact method, the right you wish to exercise and the relevant data. We will respond within the periods required by law.

Cookies and technologies

The site uses technical cookies and technologies necessary for its operation and to remember preferences. Subscription forms are operated by Mailchimp; its practices are described at mailchimp.com/legal/privacy. We do not use our own advertising cookies on this site.

If you subscribe to the newsletter, we will use your email address and name to send you information and benefits. You can unsubscribe at any time using the link in each email. Subscription may require email confirmation (double opt-in).

Security and retention

We implement reasonable administrative, technical and physical measures to protect data. We retain information for as long as necessary for the purposes described and to comply with legal obligations.

Minors

Data of minors must be provided by their parent or legal guardian. If we detect improper processing, we will act to protect the data.

Changes

We may update this notice to reflect legal or operational changes. The current version will be published on this page with its update date.

Contact

For questions about this notice or your personal data, use our contact form. If you believe we have not handled your request correctly, you may contact Mexico’s National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Last updated: October 26, 2026.