1. Data controller
Colombia Care Hair Restoration S.A.S., Tax ID (NIT) 901.580.458-5, headquartered in Medellín, Antioquia, Colombia (El Poblado).
Data-protection contact: contact@colombiacare.com · WhatsApp: the same channel where you write to us.
2. What we process and why
When you request an evaluation we process: your name, your WhatsApp number (when you message us), your form answers (area to improve, approximate age, medical background, city, tentative dates, free-text messages) and your clinical photographs.
Your photographs and health information are sensitive data. Providing them is voluntary and optional: you are never obliged to share them, and we only process them with your explicit authorization (the checkbox you tick before submitting).
Purposes:
- Evaluating your case with our medical team and preparing your personalized treatment proposal.
- Replying to you on WhatsApp. Part of the conversation may be handled by a virtual assistant supervised by our team; medical matters are always handled by a person.
- Coordinating your appointment, travel and care if you decide to move forward.
- Complying with applicable legal and health obligations.
3. Processors and international transfer
We rely on technology providers acting as data processors, with storage and/or processing in the United States:
| Provider | Role |
|---|---|
| Fly.io | Hosting of the evaluation platform |
| Supabase | Database and private photo storage |
| Anthropic | Assisted processing (virtual assistant) of conversation text |
| Meta (WhatsApp) | Messaging |
| HighLevel (LeadConnector) | Contact and conversation management (CRM) |
| Telegram | Secure internal notification to the medical team |
We require confidentiality and security commitments from every processor. Your photographs are stored in private repositories with access restricted through short-lived signed links.
4. Your rights
- Know, update and correct your data.
- Request proof of the authorization you granted.
- Be informed about how your data has been used.
- Revoke your authorization and/or request deletion of your data and photos, whenever no legal or contractual duty requires us to keep them.
- File complaints with Colombia's data-protection authority (Superintendencia de Industria y Comercio, SIC).
5. How to exercise your rights
Write to contact@colombiacare.com or to the same WhatsApp, stating your name and your request.
- Inquiries: answered within 10 business days (extendable by 5 more, with notice).
- Claims, corrections and deletion: answered within 15 business days (extendable by 8 more, with notice).
6. Data retention
- Data from evaluations that do not become treatments: kept up to 6 months, then securely deleted.
- Data that becomes part of a treated patient's medical record: kept for the legally required term (minimum 15 years, Resolution 839 of 2017).
7. Minors
Our services and this platform are strictly for people 18 or older. We do not knowingly process minors' data.
8. Security
We apply reasonable technical and organizational measures: encryption in transit, private repositories, role-restricted access, activity logging, and removal of location metadata from received photographs.
9. Users in Chile (chilecare-evaluacion)
If you contact us from Chile through Chile Care, your data is handled under the same standards of this policy and in accordance with Chilean Law 19.628 (rights of access, rectification and cancellation through the same channels). A Chile Care-specific policy will be published once its local company is incorporated.
10. Effective date
This policy is effective as of July 12, 2026. Databases remain active while the described purposes subsist. Any substantial change will be published on this page.