Privacy Notice

Your information deserves careful handling.

This notice explains how personal information is used when you request information, obtain a quote, book a stay, or receive services at Bella Recovery House.

Personal Data Controller

Bella Recovery House is the trade name under which the services described in this notice are provided.

Controller's legal name:

Controller's full address:

Privacy contact email:

Last updated:

Information We Request

Depending on the stage of your inquiry or stay, we may request:

• Identification and contact details: your name, phone number, email address, and information needed to identify your booking.

• Stay details: dates, room preference, companions, and requested services.

• Administrative information: billing details and payment references.

• Authorized contacts: your emergency contact and people you authorize to receive updates.

• Information needed for your care: your procedure, discharge instructions, allergies, prescribed medications, dietary restrictions, and mobility or assistance needs.

Health information is sensitive personal data. Requests for this information are limited to what is necessary to organize and provide appropriate support.

The initial contact form is not intended to collect medical records, medical photographs, or identification documents.

How We Use Your Information

We use necessary information to:

• Respond to questions and availability inquiries.

• Prepare quotes and organize reservations.

• Manage payments, receipts, and invoicing.

Prepare your arrival, accommodation, meals, and assistance.

• Coordinate services you book.

• Communicate with your treating team when appropriate.

• Contact people you authorize.

• Handle changes, cancellations, questions, and incidents.

• Meet applicable legal obligations.

Health Information and Consent

Before collecting sensitive personal data, we will request your express written consent through the appropriate process, except where an applicable legal exception permits otherwise.

Accepting the contact form does not replace the consent required to process health information.

If you are inquiring for someone else, initially provide your own contact details. The patient's health information must be provided with appropriate authorization or legal representation.

Advertising and Optional Communications

We use your contact information to respond to your inquiry and manage the services you book.

Promotional messages, updates, and email or messaging campaigns require a separate choice.

Declining advertising does not affect your inquiry, reservation, or care.

You may withdraw this permission through the unsubscribe option in a message or by contacting the privacy email listed in this notice.

We will not use medical records, diagnoses, medical photographs, or procedure information to create advertising audiences or feed advertising tracking tools. Forms collecting health information will be excluded from advertising tracking.

Advertising use of your image, voice, testimonial, or recovery story requires specific, separate authorization.

When Information May Be Shared

When necessary for the purposes described, relevant information may be shared with:

• Your doctor or treating team to coordinate instructions and follow-up.

• Professionals or facilities involved in additional or emergency care.

• Providers of services you request, limited to information needed to arrange them.

• Family members or companions you have authorized.

• Competent authorities when required by law.

When a transfer requires your consent, we will request it separately before the transfer takes place. Legal exceptions will be applied only when appropriate.

Providers processing information on Bella's behalf must follow the applicable instructions and data protection obligations.

Website, Cookies, and Digital Tools

Our website uses Squarespace and may progressively incorporate analytics, advertising, communication, automation, and booking tools, such as Google Analytics, Meta Pixel,

WhatsApp Business, and email marketing platforms

Depending on the tools in use and your preferences, information processed may include your IP address, browser or device identifiers, pages visited, interactions, referral source, and cookie preferences.

These technologies may be used to:

• Operate the website and its forms.

• Remember preferences.

• Measure visits and understand website use.

• Evaluate advertising campaign performance.

• Manage inquiries, communications, and bookings.

• Display advertising when appropriately authorized.

Analytics and advertising tools requiring consent will be activated according to your choices.

You may accept, reject, or configure optional categories through the preferences panel and change your decision later.

Information about providers, purposes, and cookie duration will be kept current in that panel as tools are introduced. If a new tool introduces purposes requiring additional consent, we will request it before using the tool for those purposes.

External platforms may process information outside Mexico. Their involvement will be disclosed according to the service used, with the measures and requirements applicable to data processing or transfers.

Retention and Protection

Information will be retained for the time needed to fulfill the purposes described and meet applicable legal obligations and retention periods.

Once those purposes have been fulfilled, information will be blocked or deleted as appropriate.

Access must be limited to staff and providers who need the information for their roles, with administrative, technical, and physical measures appropriate to its sensitivity.

Your Personal Data Rights

You may request:

• Access: learn what personal data is processed and how it is used.

• Rectification: correct inaccurate or incomplete information.

• Cancellation: request deletion where legally appropriate.

• Opposition: object to processing in applicable circumstances.

You may also request to withdraw consent or limit the use or disclosure of your information.

How to Exercise Your Privacy Rights

To exercise these rights, contact the privacy email listed at the beginning of this notice.

Suggested subject: Privacy Request - Bella Recovery House.

Include:

• Your name and a way to receive our response.

• A clear description of your request.

Details that help us locate your information or identify your relationship with Bella.

• For rectification requests, the correction you are requesting.

We will explain how to verify your identity or representation through an appropriate method.

Avoid sending identification documents or medical information in your initial message.

We will handle your request within applicable legal timeframes. Our response will explain the outcome, steps for fulfilling the request, or reasons for any applicable limitation.

Withdrawal of consent does not apply retroactively. Cancellation may be subject to legal retention obligations.

Changes to This Notice

The current version will be available on this page with its update date.

New digital tools will be reflected in this notice and the preferences panel, as appropriate.

When purposes change or new authorization is required, we will inform you and request the applicable consent before the new processing begins.