Privacy Policy and Data Processing

Last updated: September 7, 2026

MAOS S.A.S. (hereinafter, "the Clinic"), in compliance with Law 1581 of 2012 and Decree 1377 of 2013 of the Republic of Colombia (Habeas Data Law), informs its patients and users about its policy for the processing of personal and sensitive data.

1. Collection of Personal and Sensitive Data

For the provision of our dental and medical tourism services, we will collect personal information that includes, but is not limited to:

• Identification and contact data (name, passport, email, phone).
• Sensitive Data (Medical Information): Medical history, health background, panoramic/periapical X-rays, tomography, and intraoral/extraoral clinical photographs.

Answering health questions and providing photographs, X-rays or other sensitive data is voluntary. If you choose to share them, we will request your prior, express and informed authorization. You may request a general appointment without attaching clinical files; not providing them may limit preliminary guidance, but does not prevent access to an in-person assessment.

2. Purpose of Processing

The collected information will be used exclusively for the following purposes:

• To provide an initial orientation and prepare preliminary information. Images submitted online do not replace a clinical assessment and do not, by themselves, constitute a diagnosis or final treatment plan.
• To manage medical tourism logistics (if applicable) and appointment scheduling.
• To create and maintain the patient's Electronic Medical Record up to date, in compliance with the regulations of the Colombian Ministry of Health.
• To contact the patient for post-operative follow-ups and strictly medical purposes.

3. Confidentiality and Privacy Standards

MAOS S.A.S. applies confidentiality and security measures appropriate to the nature of the information. Data may be processed by clinical and administrative personnel who need it for the disclosed purposes and by providers supporting storage, communications or service operations, subject to data-protection and confidentiality duties. It may also be disclosed when required by a competent authority or in other cases permitted by law. Clinical data will not be sold, and photographs will not be used for advertising without a separate, specific authorization.

4. Rights of the Data Subject (Habeas Data)

As the data subject, you have the right to:

• Know, update, and rectify your personal data.
• Request proof of the authorization granted for data processing.
• Be informed about how your data has been used and file complaints with Colombia's Superintendence of Industry and Commerce when applicable.
• Revoke the authorization and/or request the deletion of the data when there is no legal or contractual duty to remain in our database (Note: under Colombian law, medical records must be kept for a mandatory minimum period).

5. Retention and Security

We keep data for as long as necessary to handle the request and comply with applicable legal or contractual duties. Once those purposes end, the data will be deleted, anonymized, or retained only where a legal duty applies. No Internet transmission is infallible; we therefore limit access and apply reasonable safeguards intended to prevent unauthorized access, use, alteration, or disclosure.

6. Handling of Petitions, Inquiries, and Claims

To exercise your Habeas Data rights, or if you have any questions regarding our privacy policy, you can send a formal request to our legal team at the email address: maosrehabilitacionoral@gmail.com.