PRIVACY POLICY
Kynova Healthcare Hub
Effective Date: [07 22, 2026]
Last Updated: [07 22, 2026]
1. INTRODUCTION
Welcome to Kynova Healthcare Hub (“Kynova,” “we,” “our,” or “us”).
Your privacy is fundamental to the trust you place in us. We are committed to protecting the personal information you share while receiving medical care, using our website, communicating with our team, or subscribing to our services.
This Privacy Policy explains how Kynova Healthcare Hub collects, uses, stores, protects, and discloses personal information through www.kynovahealth.com and during the delivery of our healthcare services.
As an international healthcare provider located in Guadalajara, Jalisco, Mexico, Kynova is committed to respecting applicable privacy and data protection laws, including:
- Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)
- The General Data Protection Regulation (GDPR) for individuals located within the European Economic Area
- The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
- The California Online Privacy Protection Act (CalOPPA)
- Other applicable privacy regulations governing the collection and processing of personal information.
By accessing our website, submitting information, requesting medical services, or otherwise interacting with Kynova Healthcare Hub, you acknowledge that you have read and understood this Privacy Policy.
2. WHO WE ARE
Kynova Healthcare Hub is a private healthcare clinic located in Guadalajara, Jalisco, Mexico.
We provide comprehensive medical services, diagnostics, treatment, rehabilitation, and patient care across multiple medical specialties. In addition to clinical care, we offer integrated patient coordination services designed to support both domestic and international patients throughout their healthcare journey.
For the purposes of applicable privacy laws, Kynova Healthcare Hub is the data controller responsible for the collection and processing of personal information described in this Privacy Policy.
Controller
Kynova Healthcare Hub
Guadalajara, Jalisco
Mexico
Email:
3. INFORMATION WE COLLECT
Depending on how you interact with Kynova, we may collect several categories of information.
Personal Identification Information
Including but not limited to:
- Full name
- Email address
- Telephone number
- City of residence
- Country of residence
This information is generally collected when you:
- Contact us through our website
- Request information
- Schedule appointments
- Subscribe to newsletters
- Communicate with our team
Medical Information
When necessary for the provision of healthcare services, diagnosis, treatment planning, or patient care, we may collect medical information directly from you during consultations or through our clinical intake processes.
Medical information may include health-related information that you voluntarily provide as part of receiving care.
Kynova treats medical information as sensitive personal information and applies additional safeguards appropriate for healthcare data.
Website Usage Information
When visiting our website, certain technical information may be collected automatically.
Examples include:
- Browser type
- Device information
- Operating system
- Pages visited
- Session duration
- Referral URLs
- IP address
- Approximate geographic location
- Language preferences
This information helps us improve website performance, security, and user experience.
Marketing Preferences
If you choose to subscribe to our newsletter or marketing communications, we may collect your communication preferences to personalize future communications.
You may unsubscribe at any time.
4. HOW WE COLLECT INFORMATION
We collect information in several ways.
Information You Provide
Including when you:
- Complete website forms
- Contact us by email
- Schedule appointments
- Subscribe to newsletters
- Request information
- Communicate with our healthcare team
Information Collected Automatically
Through technologies such as:
- Cookies
- Google Analytics
- Google Tag Manager
- Meta Pixel
These technologies help us understand website usage, improve functionality, analyze performance, and deliver relevant communications where permitted by law.
Information Generated During Healthcare Services
As part of providing medical care, Kynova may generate clinical records, treatment notes, diagnostic findings, appointment history, and other healthcare-related documentation necessary for continuity of care and compliance with applicable healthcare regulations.
5. PURPOSES FOR PROCESSING PERSONAL INFORMATION
We process personal information only when there is a legitimate reason to do so.
Purposes include:
- Providing healthcare services
- Diagnosing medical conditions
- Planning and delivering treatment
- Scheduling appointments
- Managing patient records
- Responding to inquiries
- Coordinating patient care
- Improving our healthcare services
- Improving website functionality
- Sending requested information
- Delivering newsletters (when consent has been provided)
- Complying with legal obligations
- Preventing fraud
- Maintaining information security
- Protecting patient safety
We do not process personal information for purposes incompatible with those described in this Privacy Policy.
6. LEGAL BASIS FOR PROCESSING (GDPR)
Where the GDPR applies, Kynova processes personal information under one or more of the following legal bases:
- Consent
- Performance of a contract
- Compliance with legal obligations
- Protection of vital interests
- Legitimate interests
- Provision of healthcare and medical diagnosis under Article 9 of the GDPR concerning special categories of personal data.
Whenever consent is required, individuals may withdraw that consent at any time without affecting the lawfulness of prior processing.
7. SENSITIVE PERSONAL INFORMATION
Certain information processed by Kynova may qualify as sensitive personal information under applicable laws.
Examples include health information collected during the provision of medical services.
Sensitive personal information is processed only when necessary for:
- Diagnosis
- Medical treatment
- Continuity of care
- Compliance with healthcare regulations
- Patient safety
- Legal obligations
Access to sensitive information is restricted to authorized personnel with a legitimate need to know.
Appropriate administrative, physical, and technical safeguards are implemented to protect such information.
8. INFORMATION WE DO NOT COLLECT
Unless specifically required during the clinical process, Kynova does not intentionally collect through its public website:
- Financial payment information
- Government-issued identification
- Passport information
- Medical imaging uploads
- Laboratory uploads
- Radiology files
If additional information becomes necessary during the delivery of healthcare services, it will be requested through appropriate clinical channels rather than the public website.
9. COOKIES AND TRACKING TECHNOLOGIES
Kynova Healthcare Hub uses cookies and similar technologies to enhance the functionality, security, and performance of our website, understand how visitors interact with our content, and improve the overall user experience.
Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your browser, remember preferences, and collect information about website usage.
Depending on your location, certain cookies will only be activated after obtaining your consent through our Cookie Consent Banner.
Types of Cookies We Use
Essential Cookies
These cookies are necessary for the operation of our website and cannot be disabled through our systems. They enable core functionality such as page navigation, security, accessibility, and form submissions.
Analytics Cookies
Analytics cookies help us understand how visitors interact with our website by collecting anonymous statistical information.
We currently use:
- Google Analytics 4
- Google Tag Manager
Information collected may include:
- Pages visited
- Time spent on pages
- Device type
- Browser information
- General geographic location
- Referral sources
- Website performance metrics
This information helps us improve our website and better understand user behavior.
Marketing Cookies
Marketing cookies help us measure the effectiveness of advertising campaigns and provide more relevant communications.
We currently use:
- Meta Pixel
These technologies may collect information regarding website interactions for advertising measurement and campaign optimization.
Scheduling Technologies
Our website integrates Calendly to allow visitors to request appointments and consultations.
When using Calendly, your information is processed according to both this Privacy Policy and Calendly’s own privacy practices.
10. COOKIE CONSENT
Visitors located in jurisdictions where consent is legally required, including the European Economic Area and the United Kingdom, will be presented with a cookie consent banner before non-essential cookies are activated.
You may:
- Accept all cookies
- Reject non-essential cookies
- Customize your preferences
You may also modify your cookie preferences at any time through our Cookie Settings.
11. NEWSLETTER COMMUNICATIONS
If you choose to subscribe to our newsletter, we may use your email address to send:
- Healthcare updates
- Educational content
- Clinic news
- Service announcements
- Wellness information
- Promotional communications
Newsletter communications are sent only with your consent where required by law.
You may unsubscribe at any time by:
- Clicking the unsubscribe link included in every email
- Contacting us at:
Unsubscribing from marketing communications does not affect transactional or healthcare-related communications.
12. HOW LONG WE KEEP YOUR INFORMATION
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, and enforce our agreements.
General retention periods include:
Website Inquiries
Up to twenty-four (24) months following the most recent communication.
Newsletter Information
Until the individual withdraws consent or unsubscribes.
Patient Medical Records
Medical records are retained for the period required under applicable Mexican healthcare regulations and other legal obligations governing medical documentation.
Where legally required, records may be retained beyond the completion of treatment.
Analytics Information
Analytics information is retained according to the retention settings established within Google Analytics and other authorized service providers.
When retention is no longer necessary, information is securely deleted, anonymized, or otherwise disposed of in accordance with applicable laws.
13. HOW WE PROTECT YOUR INFORMATION
Kynova Healthcare Hub implements reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, misuse, or destruction.
These measures include, where appropriate:
- Secure website encryption (HTTPS/TLS)
- Restricted access to personal information
- Role-based access controls
- Secure password policies
- Continuous monitoring of website security
- Secure hosting infrastructure
- Employee confidentiality obligations
- Periodic review of security practices
Although no method of transmission over the Internet or electronic storage is completely secure, we continuously work to maintain appropriate safeguards consistent with industry standards.
14. SHARING OF PERSONAL INFORMATION
Kynova Healthcare Hub does not sell personal information.
We do not rent or trade personal information to third parties for monetary consideration.
We may share personal information only when necessary under the following circumstances:
Healthcare Delivery
With authorized healthcare professionals involved in your diagnosis, treatment, or continuity of care.
Service Providers
With trusted vendors that assist us in operating our business, including:
- Website hosting
- Analytics services
- Appointment scheduling
- Email communication platforms
- Customer relationship management (CRM) systems
These providers process information only as necessary to perform services on our behalf and are contractually required to maintain appropriate confidentiality and security measures.
Legal Obligations
When disclosure is required to:
- Comply with applicable law
- Respond to lawful governmental requests
- Protect patient safety
- Protect our legal rights
- Prevent fraud
- Respond to emergencies involving health or safety
15. THIRD-PARTY SERVICES
Our website may utilize services provided by third parties, including:
- Google Analytics
- Google Tag Manager
- Meta Pixel
- Calendly
- Hosting services provided by Hostinger
- CRM platforms used for patient communication and relationship management
- Google Workspace for business communications
Each third-party provider maintains its own privacy practices.
We encourage users to review the privacy policies of these providers when appropriate.
16. YOUR PRIVACY RIGHTS (GDPR)
If you are located within the European Economic Area or another jurisdiction where the GDPR applies, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
- Lodge a complaint with your local supervisory authority
To exercise these rights, please contact:
We may request additional information to verify your identity before responding to your request.
17. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
If you are a resident of the State of California, you may have certain rights regarding your personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Subject to applicable exceptions, California residents may exercise the following rights:
Right to Know
You may request information regarding:
- The categories of personal information we collect.
- The categories of sources from which personal information is collected.
- The business or commercial purposes for collecting personal information.
- The categories of third parties with whom personal information is shared.
- The specific pieces of personal information we maintain about you.
Right to Correct
You may request that inaccurate personal information maintained by Kynova Healthcare Hub be corrected.
Right to Delete
You may request deletion of personal information collected from you, subject to legal, medical, contractual, or regulatory obligations that require us to retain certain information.
Right to Data Portability
Where applicable, you may request a copy of your personal information in a portable and commonly used electronic format.
Right to Opt-Out of Sale or Sharing
Kynova Healthcare Hub does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under California law.
Accordingly, our website is not required to provide a “Do Not Sell or Share My Personal Information” mechanism based on our current data practices. If our practices change in the future, this Privacy Policy will be updated accordingly.
Right to Limit the Use of Sensitive Personal Information
Sensitive personal information is processed only to provide healthcare services, fulfill legal obligations, ensure patient safety, and operate our clinic.
We do not use sensitive personal information for purposes beyond those permitted by applicable law without obtaining any required consent.
Right Against Discrimination
Kynova Healthcare Hub will not discriminate against you for exercising any of your privacy rights.
This means we will not:
- Deny services.
- Charge different prices based solely on the exercise of privacy rights.
- Provide a different level or quality of service because you exercised your rights under applicable privacy laws.
18. MEXICAN PRIVACY RIGHTS (ARCO RIGHTS)
In accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), individuals whose personal data is processed by Kynova Healthcare Hub have the right to exercise the following ARCO rights:
Access
Request confirmation regarding whether we process your personal information and obtain access to it.
Rectification
Request correction of inaccurate, incomplete, or outdated personal information.
Cancellation
Request deletion of personal information when legally appropriate and when no legal obligation requires continued retention.
Objection
Object to certain types of processing where permitted by applicable law.
To exercise your ARCO rights, please submit your request by email to:
For security purposes, we may request additional information to verify your identity before responding to your request.
19. EXERCISING YOUR PRIVACY RIGHTS
Individuals wishing to exercise any privacy rights described in this Privacy Policy may contact us at:
Email:
info@kynovahealth.com
Requests should include sufficient information to allow us to:
- Verify your identity.
- Understand your request.
- Respond appropriately within applicable legal timeframes.
Additional documentation may be requested where necessary to prevent unauthorized disclosure of personal information.
20. CHILDREN’S PRIVACY
Kynova Healthcare Hub’s website is intended for adults seeking healthcare information and services.
Our website is not directed toward children under the age of 18, and we do not knowingly collect personal information directly from children through our website.
If we become aware that personal information has been submitted through our website by a child without appropriate legal authorization, we will take reasonable steps to delete such information promptly.
This section does not limit Kynova’s ability to provide lawful medical services to minors when authorized by a parent, legal guardian, or as otherwise permitted under applicable healthcare laws.
21. DO NOT TRACK (CalOPPA)
Certain web browsers include a “Do Not Track” (“DNT”) feature that signals to websites a user’s preference regarding online tracking.
At this time, there is no universally accepted standard for responding to Do Not Track signals.
Accordingly, our website does not currently respond differently to DNT browser requests.
Should an industry standard become established, Kynova Healthcare Hub may update its practices accordingly.
22. LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to third-party websites for informational or convenience purposes.
Kynova Healthcare Hub is not responsible for the privacy practices, content, security, or policies of external websites.
We encourage users to review the privacy policies of any third-party websites they visit.
23. CHANGES TO THIS PRIVACY POLICY
Kynova Healthcare Hub may update this Privacy Policy from time to time to reflect:
- Changes in applicable laws or regulations.
- Changes to our services.
- Changes in technology.
- Changes to our business operations.
- Improvements to our privacy practices.
When material changes are made, the updated version will be published on our website together with the revised “Last Updated” date.
Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.
24. CONTACT US
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us using the following information:
Kynova Healthcare Hub
Guadalajara, Jalisco
Mexico
Email:
We are committed to responding to privacy-related inquiries within the timeframes required by applicable law.
25. ACCEPTANCE OF THIS PRIVACY POLICY
By using www.kynovahealth.com, requesting information, scheduling appointments, subscribing to communications, or receiving services from Kynova Healthcare Hub, you acknowledge that you have read and understood this Privacy Policy.
Where consent is required under applicable law, your continued use of our website or services constitutes your consent to the processing of your personal information as described herein.
Effective Date
Effective Date: [07, 22, 2026]
Last Updated: [07, 22, 2026]