Privacy Notice · Aviso de Privacidad

In accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, "LFPDPPP") and its Regulations, TrueCell (the "Data Controller", "we", "us", or "our"), with its address in Tijuana, Baja California, México, and coordinating operations associated with facilities in Tijuana, Baja California and Cancún, Quintana Roo, México, provides you with this Privacy Notice (the "Notice"). This English text is a translation offered for the convenience of international users; the Spanish Aviso de Privacidad below is the legally controlling text under Mexican law. This Notice describes the personal data we collect through our website, forms, chat and messaging tools, telephone, and related services (collectively, the "Services"), how and why we process it, with whom we may share it, how long we keep it, how we protect it, and the rights and choices available to you.

1. Scope and Acceptance

This Notice applies to personal data we collect through the Services and through your communications with us. It does not apply to information collected by Independent Providers (the independent, third-party licensed physicians, practices, hospitals, and laboratories that furnish medical care), each of which maintains its own records and privacy practices governing your clinical care. By using the Services or providing personal data to us, you acknowledge that you have read and understood this Notice. If you do not agree with it, please do not use the Services or provide personal data.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identification data: name, official identification, date of birth, gender, nationality, and country/city of residence.
• Contact data: email address, telephone/mobile number, and mailing address.
• Sensitive health data: medical history, diagnoses, symptoms, imaging and laboratory results, current medications, area of concern, and other health information you provide so that an Independent Provider can assess your candidacy for a therapy. Under Mexican law this is sensitive personal data, and we process it only with your express, written consent.
• Inquiry and scheduling data: the content of your messages, forms, chat conversations, treatment or travel interests, timeframe, and appointment details.
• Transaction and financial data: limited billing or payment-coordination information; note that payment is arranged directly with the applicable Independent Provider or facility, and we do not collect or store full payment-card numbers.
• Technical, device, and usage data (cookies): IP address, browser and device type, operating system, referring pages, pages visited, time spent, clicks, and similar analytics data collected through cookies and comparable technologies.
• Communications data: records of your communications with us, including email, telephone, SMS, and chat, and your related preferences and consents.

You are not obligated to provide personal data, but if you choose not to, we may be unable to respond to your inquiry or coordinate the services you request. You are responsible for ensuring that any personal data you provide is accurate and that, if you provide data about another person, you are authorized to do so.

3. How We Collect Your Data

We collect personal data: (a) directly from you, when you complete a form, use our chat, call, email, or otherwise communicate with us; (b) automatically, through cookies and similar technologies when you use our website; and (c) from third parties where permitted, such as analytics and advertising providers, referral sources, or service providers that support our Services.

4. Purposes and Legal Bases for Processing

We use the personal data we collect for the following primary purposes, which are necessary to provide the service you request:

• Responding to your inquiries and providing information about therapies.
• Coordinating pre-treatment evaluations, appointments, scheduling, and follow-up with Independent Providers.
• Coordinating travel, transfer, and concierge logistics you request.
• Operating, maintaining, securing, and improving the Services.
• Complying with legal, regulatory, health, tax, and record-keeping obligations, and responding to lawful requests.
• Establishing, exercising, or defending legal claims and enforcing our Terms.

Where you consent, we also use your data for the following secondary purposes, which are not necessary for the requested service but allow us to serve you better:

• Website behavior analysis, statistics, and service improvement.
• Advertising, marketing, remarketing, and commercial prospecting.
• Sharing statistical or navigation data with third parties for market-research purposes, in dissociated (de-identified) form where possible, through cookies and tracking technologies.

You may refuse or withdraw consent to the secondary purposes at any time, without affecting the primary purposes, by contacting us as described below.

5. Sensitive Health Data and Consent

Because a portion of the data you may share concerns your health, we treat it with heightened care. We collect and process sensitive health data only for the primary purpose of coordinating your requested evaluation or care, only with your express consent, and only to the extent necessary. We do not use sensitive health data for marketing, and we do not sell it. You may withdraw your consent to the processing of sensitive data at any time, subject to legal retention obligations, by contacting us; withdrawal may prevent us from coordinating the services you have requested.

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies through which it is possible to recognize your device, analyze your behavior as an internet user, measure and improve the Services, and, where you consent, support advertising. Essential cookies are necessary for the website to function; non-essential (analytics and marketing) cookies are used only where you accept them.

You have the right to accept or reject non-essential technologies through our cookie-preferences banner, available at the bottom of our website, and you can control cookies through your browser settings. Manage cookie preferences.

7. How We Share and Disclose Personal Data

We do not sell your personal data. We may share personal data as follows:

• Independent Providers: with the licensed physicians, practices, hospitals, and laboratories coordinating or furnishing your requested evaluation or care, so they can serve you.
• Service providers (subprocessors): with vendors that perform services on our behalf under confidentiality and data-protection obligations, such as hosting, analytics, communications, scheduling, SMS/messaging, customer-relationship management, and, where you consent, advertising.
• Corporate group: with TrueCell's subsidiaries, affiliates, or parent entities that support the Services, consistent with this Notice.
• Legal and safety: when we believe in good faith that disclosure is necessary to comply with law, regulation, legal process, or a governmental request; to enforce our Terms; or to protect the rights, property, safety, or security of TrueCell, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate protections.

Mobile phone numbers and SMS opt-in data are handled separately and are not shared with third parties or affiliates for marketing or promotional purposes — see the SMS Policy below.

8. International Data Transfers

Because we coordinate care in México for users who may reside in the United States, Canada, and elsewhere, your personal data may be transferred to, stored in, and processed in México, the United States, or other countries whose data-protection laws may differ from those of your jurisdiction. Where we transfer personal data, we take steps intended to ensure it remains protected consistent with this Notice and applicable law. By using the Services and providing your data, you understand that it may be processed in these locations.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Notice, to provide and coordinate the services you request, and to comply with our legal, regulatory, accounting, and record-keeping obligations, resolve disputes, and enforce our agreements. When personal data is no longer required, we take reasonable steps to securely delete, destroy, or de-identify it. Retention periods vary depending on the type of data and the applicable legal requirements.

10. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against loss, misuse, and unauthorized access, disclosure, alteration, or destruction, and we require our service providers to do the same. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot and do not guarantee the absolute security of your personal data. You are responsible for maintaining the confidentiality of any credentials and for the security of the devices and networks you use. Any transmission of personal data is at your own risk, and, to the fullest extent permitted by law, we disclaim liability for any unauthorized access to or use of your data that occurs despite our reasonable safeguards.

11. Your Privacy Rights (ARCO) and Choices

Under Mexican law, you have the right at all times to Access the personal data we hold about you and know how we use it; to request Rectification when it is inaccurate or incomplete; to request its Cancellation (deletion) from our records; and to Object to its use for specific purposes. These are your ARCO rights. You may also revoke your consent, limit the use or disclosure of your data, and opt out of secondary (marketing) purposes.

To exercise any of these rights, email info@truecellgroup.com with your request and sufficient information to verify your identity and locate your data. We will respond within the timeframes required by applicable law. Depending on your place of residence, you may have additional or different rights under local law (for example, certain residents of the United States or other jurisdictions); we will honor applicable rights to the extent required by law.

12. Children's Privacy

The Services are intended for adults and are not directed to children. We do not knowingly collect personal data from individuals under 18 years of age through the Services without appropriate parental or guardian consent. Where care is sought for a minor, the requesting parent or legal guardian is responsible for providing that consent and any related information. If you believe we have collected data from a minor without appropriate consent, contact us and we will take reasonable steps to delete it.

13. Automated Tools, Chat, and Analytics

Our website may use automated chat or messaging tools and third-party analytics services. Chat interactions and information you submit through them are collected and processed as described in this Notice. Automated tools provide general information only and do not make clinical decisions; any candidacy or treatment decision is made solely by an Independent Provider. Third-party analytics providers may set their own cookies and process technical data in accordance with their own policies.

14. Third-Party Links and Services

The Services may link to or integrate third-party websites, tools, and booking widgets that we do not control. This Notice does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing personal data to it.

15. Marketing Communications

Where you have consented, we may send you marketing communications by email or other channels. You may opt out of marketing at any time by using the unsubscribe mechanism in the communication or by contacting us. Opting out of marketing does not affect service or transactional communications necessary to respond to your inquiry or coordinate services you have requested. Consent to marketing is not a condition of any service.

16. Changes to This Privacy Notice

We may modify, change, or update this Notice as a result of new legal requirements, our own operational needs, changes to our privacy practices, or changes to our business model. We will inform you of changes by publishing the updated Notice on this website, and the "Last updated" date above indicates when it was last revised. Your continued use of the Services after any change constitutes your acknowledgment of the updated Notice.

17. Contact and Data Controller

For any questions about this Notice, the processing of your personal data, or to exercise your ARCO rights, contact the Data Controller, TrueCell, at info@truecellgroup.com or +1 858-988-5257.

18. SMS & Text Messaging Policy (English)

This section governs SMS and text-message communications between TrueCell and individuals who provide a mobile phone number through our website forms or chat. It is provided in English for international patients and to satisfy carrier (A2P 10DLC) compliance requirements.

Consent & Opt-In

By submitting your phone number through a TrueCell form (including the consultation form at truecellstemcell.com/book) and selecting any SMS-related option, you expressly consent to receive text messages from TrueCell related to your inquiry, appointment scheduling, treatment information, and customer-care follow-up. Consent is not a condition of purchase.

Message Types & Frequency

Messages may include: appointment confirmations and reminders, responses to your inquiry, scheduling links, pre-treatment instructions, post-treatment follow-up, and customer-care communications. Message frequency varies based on your interaction with TrueCell. Standard message and data rates may apply, depending on your mobile carrier and plan.

Opt-Out (STOP) & Help (HELP)

You may opt out of TrueCell SMS communications at any time by replying STOP to any message you receive from us. After replying STOP, you will receive one final confirmation message and no further texts. For assistance, reply HELP or contact us at info@truecellgroup.com.

No Sharing of Mobile Information

Mobile information (including your phone number, opt-in status, and SMS message content) will not be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subprocessors is limited solely to those necessary to deliver the messaging service itself (for example, our SMS platform provider), to comply with applicable law, or to provide the medical, scheduling, and concierge services you have requested. This is true regardless of any other privacy or data-sharing language elsewhere in this notice.

Carriers

Carriers are not liable for delayed or undelivered messages.

Data Retention & Deletion

Mobile phone numbers and SMS opt-in records are retained only as long as needed to provide the requested service or to comply with legal obligations. To request deletion of your phone number and associated SMS records, email info@truecellgroup.com.

Contact

For questions about this SMS policy, contact info@truecellgroup.com or call +1 858-988-5257.

De conformidad con lo establecido en la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) y su Reglamento, TrueCell (en adelante, "El Responsable"), con domicilio en Tijuana, Baja California, México, pone a su disposición el presente Aviso de Privacidad Integral.

1. Datos Personales Recabados

Para llevar a cabo las finalidades descritas en el presente aviso, recabaremos los siguientes datos personales:

• Datos de identificación (nombre, identificación oficial).
• Datos de contacto (correo electrónico, teléfono).
• Datos Sensibles: Datos de salud e historial médico (necesarios para evaluar la viabilidad de la terapia con células madre). Para el tratamiento de estos datos, requerimos su consentimiento expreso y por escrito.
• Datos de Navegación (Cookies): Información sobre su comportamiento en nuestro sitio web, tipo de navegador, dirección IP, tiempo de interacción y páginas visitadas.

2. Finalidades del Tratamiento de Datos

Los datos personales que recabamos de usted los utilizaremos para las siguientes finalidades que son necesarias para el servicio que solicita:

• Proveer información sobre terapias con células madre.
• Realizar evaluaciones médicas pre-tratamiento.
• Gestión de citas y seguimiento de pacientes.
• Cumplimiento de obligaciones legales y normativas sanitarias en México.

De manera adicional, utilizaremos su información personal para las siguientes finalidades secundarias que no son necesarias para el servicio solicitado, pero que nos permiten brindarle una mejor atención:

• Análisis de comportamiento y estadísticas del sitio web.
• Fines publicitarios, mercadotécnicos y prospección comercial.
• Compartir datos estadísticos o de navegación con terceros para fines de investigación de mercado, siempre de manera disociada cuando sea posible, mediante el uso de cookies y tecnologías de rastreo.

3. Uso de Cookies y Tecnologías de Rastreo

Le informamos que en nuestra página de internet utilizamos cookies, web beacons y otras tecnologías, a través de las cuales es posible monitorear su comportamiento como usuario de internet, así como brindarle un mejor servicio y experiencia al navegar en nuestra página.

Usted tiene el derecho de aceptar o rechazar el uso de estas tecnologías no esenciales a través de nuestro banner de preferencias de cookies disponible en la parte inferior de nuestra página web.

Administrar preferencias de Cookies

4. Derechos ARCO y Revocación del Consentimiento

Usted tiene en todo momento el derecho a conocer qué datos personales tenemos de usted, para qué los utilizamos y las condiciones del uso que les damos (Acceso). Asimismo, es su derecho solicitar la corrección de su información personal (Rectificación); que la eliminemos de nuestros registros o bases de datos (Cancelación); así como oponerse al uso de sus datos personales para fines específicos (Oposición). Estos derechos se conocen como Derechos ARCO.

Para el ejercicio de cualquiera de los derechos ARCO, o para revocar su consentimiento para el tratamiento de datos, usted deberá presentar la solicitud respectiva al siguiente correo electrónico: info@truecellgroup.com.

5. Transferencia de Datos Personales

Le informamos que sus datos personales pueden ser compartidos dentro y fuera del país con empresas subsidiarias, filiales, afiliadas o controladoras de TrueCell; con los médicos, prácticas médicas, hospitales y laboratorios independientes que coordinan o prestan la atención solicitada; y con terceros proveedores de servicios (encargados) que actúan por cuenta de TrueCell bajo obligaciones de confidencialidad, tales como alojamiento, analítica web, comunicaciones, agendamiento, mensajería y marketing, siempre que, tratándose de fines secundarios, usted haya otorgado su consentimiento. Asimismo, podremos transferir o divulgar datos cuando ello sea necesario para cumplir con una obligación legal, requerimiento de autoridad competente o proceso legal, para proteger derechos, o en el marco de una fusión, adquisición, reorganización o venta de activos. Los números de teléfono móvil y los datos de suscripción a SMS se manejan de forma separada y no se comparten con terceros ni afiliadas con fines de marketing.

6. Transferencias Internacionales

Dado que coordinamos servicios en México para usuarios que pueden residir en los Estados Unidos, Canadá u otros países, sus datos personales pueden ser transferidos, almacenados y tratados en México, en los Estados Unidos o en otros países cuyas leyes de protección de datos pueden diferir de las de su jurisdicción. Cuando realizamos dichas transferencias, adoptamos medidas orientadas a que sus datos permanezcan protegidos conforme al presente Aviso y a la legislación aplicable. Al utilizar los Servicios y proporcionar sus datos, usted entiende que estos pueden ser tratados en dichas ubicaciones.

7. Plazo de Conservación de los Datos

Conservaremos sus datos personales únicamente durante el tiempo necesario para cumplir con las finalidades descritas en este Aviso, prestar y coordinar los servicios que solicita, y cumplir con nuestras obligaciones legales, regulatorias, contables y de conservación de registros, así como para resolver controversias y hacer cumplir nuestros acuerdos. Cuando los datos ya no sean necesarios, adoptaremos medidas razonables para eliminarlos, destruirlos o disociarlos de forma segura.

8. Medidas de Seguridad

Implementamos medidas de seguridad administrativas, técnicas y físicas razonables, orientadas a proteger sus datos personales contra pérdida, uso indebido, y acceso, divulgación, alteración o destrucción no autorizados, y exigimos lo mismo a nuestros proveedores. No obstante, ningún método de transmisión por internet ni de almacenamiento electrónico es completamente seguro, por lo que no podemos garantizar la seguridad absoluta de sus datos personales. En la máxima medida permitida por la ley, no asumimos responsabilidad por accesos o usos no autorizados que ocurran a pesar de nuestras medidas razonables de seguridad.

9. Menores de Edad

Los Servicios están dirigidos a personas adultas y no a menores de edad. No recabamos conscientemente datos personales de personas menores de 18 años a través de los Servicios sin el consentimiento del padre, madre o tutor correspondiente. Cuando se solicite atención para un menor, el padre, madre o tutor legal que realiza la solicitud es responsable de otorgar dicho consentimiento y de proporcionar la información relacionada.

10. Modificaciones al Aviso de Privacidad

El presente aviso de privacidad puede sufrir modificaciones, cambios o actualizaciones derivadas de nuevos requerimientos legales, de nuestras propias necesidades por los servicios que ofrecemos, de nuestras prácticas de privacidad o por cambios en nuestro modelo de negocio.

Nos comprometemos a mantenerlo informado sobre los cambios que pueda sufrir el presente aviso de privacidad mediante su publicación en este sitio web.

11. Contacto

Para cualquier duda sobre este Aviso de Privacidad, sobre el tratamiento de sus datos personales, o para ejercer sus Derechos ARCO, puede contactarnos en info@truecellgroup.com o al +1 858-988-5257.