Privacy Policy

Last Updated: September 11, 2026

Introduction
Monarca Clinic ("Monarca," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes what information we collect, how we use it, how we protect it, and your rights regarding your data.
This policy applies to all information collected through our website (www.monarcaclinic.com), our patient portal, and any related communications including email, phone, WhatsApp, and video consultations.
 
Information We Collect
Information You Provide Directly
When you contact us, book a consultation, or create a patient portal account, we may collect:

• Full name

• Email address

• Phone number

• Country and state of residence

• Date of birth

• Procedure(s) of interest

• Medical history and health information you provide during consultations

• Pre-operative lab results and physician clearance documents you upload

• Photographs you submit for surgical evaluation

• Communications between you and Monarca Clinic staff (emails, messages, call notes)

• We use third-party payment processors to handle credit card and bank transfer transactions. These processors are PCI-DSS compliant and do not store your full payment information on our servers.

 
Information Collected Automatically
When you visit our website, we automatically collect certain technical information:

• IP address and approximate geographic location

• Browser type and version

• Device type (desktop, mobile, tablet)

• Pages visited, time spent on each page, and navigation patterns

• Referring website or search terms that led you to our site

• Cookies and similar tracking technologies (see Cookies section below)

 
How We Use Your Information
We use the information we collect for the following purposes:

• Coordination of care: To facilitate introductions with surgeons, schedule consultations, coordinate travel and hospital logistics, and manage your patient journey.

• Communication: To respond to your inquiries, provide updates on your consultation or procedure, and send post-operative follow-up communications.

• Payment processing: To process deposits, procedure payments, and issue receipts.

• Website improvement: To analyze how visitors use our website and improve our content, navigation, and user experience.

• Marketing (with your consent): To send you relevant information about procedures, educational content, or promotional offers. You may opt out of marketing communications at any time.

 
How We Share Your Information
We do not sell your personal information to third parties. We may share your information with the following parties, only as necessary to provide our services:

• Partner surgeons: We share relevant medical information (health history, photos, lab results) with the surgeon you are matched with, solely for the purpose of evaluating your candidacy and planning your procedure.

• Partner hospitals: We share necessary patient information with the hospital where your procedure will be performed, as required for scheduling, admission, and billing.

• Payment processors: We use third-party payment processors to handle credit card and bank transfer transactions. These processors are PCI-DSS compliant and do not store your full payment information on our servers.

• Analytics providers: We use Google Analytics to understand website traffic and usage patterns. Google Analytics collects anonymous, aggregated data and does not identify individual users.

• Legal requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

 
Health Information
We understand that the medical and health information you share with us is sensitive. We treat all health-related information with additional care:

• Health information is shared only with the specific surgeon and hospital involved in your care.

• Health information is never used for marketing purposes.

• Health information is never sold to third parties.

• Access to health information within Monarca Clinic is limited to staff members who need it to coordinate your care.

 
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for the website to function properly (e.g., maintaining your login session in the patient portal). These cannot be disabled.

• Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics). These collect anonymous, aggregated data.

• Marketing cookies: Used to deliver relevant content and measure the effectiveness of our marketing campaigns (e.g., Meta Pixel, Google Ads). These are only activated with your consent.

You can manage your cookie preferences through your browser settings or through the cookie consent banner displayed when you first visit our website. Disabling certain cookies may affect your ability to use some features of our website.
 
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Patient coordination records: Retained for 7 years after your last interaction with Monarca Clinic, consistent with standard medical recordkeeping practices.

• Payment records: Retained for 7 years as required for tax and accounting purposes.

• Website analytics data: Retained in anonymized, aggregated form indefinitely.

• Marketing communications preferences: Retained until you unsubscribe or request deletion.

 
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
For All Users

• Access: You may request a copy of the personal information we hold about you.

• Correction: You may request that we correct any inaccurate or incomplete information.

• Deletion: You may request that we delete your personal information, subject to legal retention requirements.

• Opt-out of marketing: You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

 
For California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.

• The right to request deletion of your personal information.

• The right to opt out of the sale of your personal information. (Monarca Clinic does not sell personal information.)

• The right to non-discrimination for exercising your CCPA rights.

 
For EU/EEA Residents (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to data portability (receiving your data in a machine-readable format).

• The right to restrict processing of your data.

• The right to object to processing based on legitimate interests.

• The right to withdraw consent at any time.

• The right to lodge a complaint with a supervisory authority.

 
For Mexican Residents (LFPDPPP)
If you are a Mexican resident, you have rights under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), including the rights of access, rectification, cancellation, and opposition (ARCO rights). To exercise your ARCO rights, contact us at the email address below.
 
Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest.

• Secure access controls for our patient portal and internal systems.

• Regular security assessments of our technology infrastructure.

• Staff training on data privacy and security practices.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
 
International Data Transfers
Monarca Clinic operates across the United States and Mexico. Your personal information may be transferred to and processed in Mexico, where our partner surgeons and hospitals are located. By using our services, you consent to the transfer of your information to Mexico for the purposes described in this policy. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
 
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete such information.
 
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.
 
Contact Us
If you have questions about this Privacy Policy, wish to exercise any of your rights, or have concerns about how your data is handled, please contact us:
Monarca Clinic 
Email: hello@monarcaclinic.com