Notice of Privacy Practices
SMILE DC SC, with trade name SMILE DENTAL CARE or SMILE DENTAL NOGALES, hereinafter “SMILE”, with address at Plaza Pesqueira 40-C, Col. Fundo Legal, CP 84030 in Nogales, Son., with telephone number +52 631 312 8746 and email info@smiledentalnogales.com, is responsible for the processing of your personal data and sensitive personal data in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its regulations, and other applicable provisions.
The purpose of this Privacy Notice is to clearly and understandably inform you what data we collect, how we use it, how we protect it, and the means by which you may exercise your rights. If you have any questions regarding this Privacy Notice, you may contact us using the contact information provided above.
Personal Data We Collect
For the proper provision of our services, SMILE may collect the following personal data: full name, age, gender, marital status, address, home phone, cell phone, email, employment information, photographs, videos, and fingerprint data.
Additionally, we collect some personal sensitive data such as: reason for appointment, dental insurance information, medical and dental history, prior dental treatment experiences, expectations of the services to be received by SMILE, diagnoses, treatment, dental health projection, results of studies, analyses and clinical examinations and relevant medical and dental information.
Personal data and certain sensitive personal data are provided directly by the data subject; therefore, SMILE assumes such data to be truthful, complete, accurate, and up to date. It is the responsibility of the data subject to notify SMILE of any changes.
Purpose for the use and disclosure of your personal and health information
The collection, use, disclosure, or storage of your personal and sensitive personal data will be for the following primary purposes, which are necessary for the provision of services: identification and contact with the patient; creation and updating of the clinical record; preparation, diagnosis, planning, execution, and follow-up of dental treatments; request, analysis and storage of studies related to your oral health; billing of services provided; administrative, financial, and collection management of medical and dental payment from insurance; manage, schedule remind, and confirm appointments.
Additionally, your data may be used for the following secondary purposes: sending information regarding SMILE’s products, services, promotions, or advertising; satisfaction surveys; and internal statistical studies.
If you do not wish your data to be processed for secondary purposes, you may notify us at any time using the contact information provided in this Privacy Notice.
Relationship with U.S. Dental Insurance Companies and HIPAA:
SMILE is a dental healthcare provider established in Mexico and is not a “Covered Entity” nor a “Business Associate” under the United States Health Insurance Portability and Accountability Act (HIPAA).
In cases where a dental insurance company from the United States or any other country makes payment directly to SMILE or issues a reimbursement check payable to the patient, such interaction is carried out exclusively at the patient’s request and with the patient’s express authorization, solely for purposes of benefits verification, claim submission, coordination, and processing of payments or reimbursements.
This does not imply that SMILE assumes any health plan administration functions or HIPAA-related obligations. Notwithstanding the foregoing, SMILE voluntarily adopts privacy and security measures reasonably aligned with international standards, including practices compatible with HIPAA, to protect the medical and dental information of its patients.
Limitations on Use, Disclosure, and Transfer of Personal Data:
SMILE does not sell or commercialize your personal data.
However, your personal data and sensitive personal data may be shared, transferred, and processed, within or outside Mexican territory, without requiring additional consent, when necessary to fulfill the purposes described above, with: dental laboratories; health study and analysis providers; external healthcare personnel, professional advisors, clinics, hospitals, other providers of dental services; medical and dental insurers for collection of payment from medical insurance; financial institutions for payment processing, collections, and credit or debit card charge clarifications; technology service providers and data storage providers using national or international servers; professional advisors; and competent authorities when legally required.
In all such cases, it’ll be ensured that the third parties with whom your information is shared comply with the appropriate security and privacy measures to protect your information.
The data subject expressly authorizes SMILE to use and, where applicable, disclose personal and sensitive personal data, including clinical and financial information, to domestic or foreign dental insurance companies exclusively for purposes of coverage and benefits verification, claim submission and follow-up, management of direct payments to SMILE or the treating dentist, and management of reimbursements issued to the patient.
ARCO Rights (Access, Rectification, Cancellation, and Opposition)
You or your legal representative may exercise your rights of access, rectification, cancellation, and opposition with respect to your personal data at any time, provided there is no legal obligation preventing SMILE from doing so, such as mandatory retention of clinical records.
Requests must be submitted in writing either by email to the address provided above or in person at our facilities. Requests related to documentation contained in the clinical record must be submitted personally and in writing at our offices.
The request must include: the data subject’s full name and date of birth; a clear description of the ARCO right to be exercised; a copy of a valid government-issued identification with photograph and signature; and, in the case of rectification, the data to be modified along with supporting documentation.
SMILE will respond within a maximum period of thirty (30) days. If additional information is required, you will be notified via email. If no response is received within ten (10) business days, the request will be deemed not submitted. Upon receipt of the requested information, SMILE will resolve the request within ten (10) business days.
We will use our professional judgment and our experience with common practices to make reasonable inferences of your best interest. We may deny your request under certain circumstances.
Security and Confidentiality
To guarantee the security and reliability of your personal data, SMILE implements administrative, technical, and physical security measures to safeguard and protect such data. For digital information, our primary infrastructure includes strict security requirements, such as access control and identity management, server- and client-level encryption, audit capabilities, identity theft protection, data backup and recovery systems, firewalls, and cybersecurity systems.
Modifications to the Privacy Notice
SMILE reserves the right to change or update this Notice of Privacy Practices at any time. Any changes will be communicated and published on our website: https://smiledentalnogales.com.
Acceptance of Terms
The use of Smile’s services at its offices, on its website, social networks, or any of its sites constitutes an agreement to accept this Notice of Privacy Practices, which means that you acknowledge that you have read and understood the terms and conditions thereof, as well as that you grant SMILE express consent for the use and disclosure of your personal data and personal sensitive data in accordance with the purposes described herein.
If the data subject does not agree with this Privacy Notice, they must refrain from providing personal information and from using SMILE’s services.
Date of last update: January 30, 2026
