1. What Are Cookies and Other Tracking Technologies?
Cookies are small text files that websites store on your device (computer, tablet, or mobile) when you visit them. QuHealthy also uses similar technologies — such as local storage — to make sure the platform works correctly, understand how you interact with it, and, where you've given consent, improve your experience.
This Cookie Policy works alongside our Privacy Notice (Aviso de Privacidad), which explains in full how we collect, use, store, and protect your personal data — including health-related data. Where the two documents overlap, the Privacy Notice governs.
2. Legal Frameworks We Comply With
Because QuHealthy serves healthcare professionals and patients across Mexico, with expansion planned across Latin America and the United States, this policy is built to apply the strictest relevant standard wherever frameworks differ — in practice, that means treating health-related data with heightened protection no matter where you're located.
Mexico. We comply with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), republished in the Diario Oficial de la Federación on March 20, 2025, and supervised by the Secretaría Anticorrupción y Buen Gobierno (Dirección General de Datos Personales en el Sector Privado), following the dissolution of INAI. Under this law, health-related information is datos personales sensibles (sensitive personal data), which requires your express, written consent before we process it — not just a passive cookie banner. You have ARCO rights (Acceso, Rectificación, Cancelación, Oposición), described in Section 6.
United States. Where applicable, we comply with the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) and comparable state comprehensive privacy laws, as well as state laws that specifically govern "consumer health data" (such as Washington's My Health My Data Act). We follow FTC guidance under the Health Breach Notification Rule, which restricts sharing health information with third parties — including via tracking pixels — without proper authorization.
Latin America. As we expand, we intend to comply with each country's applicable data protection law (e.g., Brazil's LGPD, Colombia's Ley 1581, Argentina's Ley 25.326, and others as relevant). This policy reflects general best practices shared across these frameworks; country-specific addenda will be published as we launch in each market.
This section is a good-faith summary for transparency, not legal advice. It should be reviewed by local counsel before being relied on for compliance purposes.
3. Types of Cookies We Use
Essential Cookies (Strictly Necessary)
Vital for the platform to function: keeping you securely logged in, routing, load balancing, and fraud prevention. These can't be disabled — under every framework above, they don't require consent because the service can't function without them.
Functional / Preference Cookies
Remember choices you've made, like language or display settings, so you don't have to reset them on every visit. These are optional and only activate with your consent.
Analytics Cookies
Help us understand how people navigate QuHealthy, which pages get used, and where errors occur, so we can improve the product. We use Google Analytics with IP anonymization enabled. We don't use analytics data to make inferences about anyone's health status, and we configure our analytics tooling to avoid capturing data from clinical or appointment-related screens wherever feasible.
Marketing / Advertising Cookies
QuHealthy does not currently use third-party advertising or remarketing pixels — including Meta Pixel — anywhere on the platform, including on public marketing pages. We made this decision deliberately: tools like this have been the subject of major regulatory action and litigation in the health sector for transmitting health-related browsing behavior to ad networks without proper authorization, and we'd rather not take that risk with your data.
If we introduce any conversion-tracking or remarketing tool in the future, it will be:
- Limited strictly to public, non-clinical marketing pages — never search, booking, or account areas
- Activated only with your separate, explicit opt-in consent
- Covered by a written data processing agreement prohibiting the vendor from using or inferring health information
4. Cookie Duration and Categories
We'll keep this table current as our tooling changes. For a full, itemized list of cookies currently active on the platform, contact us using the details in Section 11.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| Session / auth cookie | Essential | Keeps you securely logged in | Session (until logout) |
| CSRF / security token | Essential | Prevents cross-site request forgery | Session |
| Consent preferences | Functional | Remembers your cookie choices | 12 months |
| Language / display settings | Functional | Remembers your preferences | 12 months |
| _ga, _ga_* (Google Analytics) | Analytics | Distinguishes users, measures usage | Up to 13 months |
5. Sensitive Data and Health Information
Some information QuHealthy processes — such as health conditions, the specialties you search for, or appointment details — is treated as sensitive personal data under Mexican law and under equivalent "consumer health data" categories in U.S. state law. For this category of data, regardless of where you're located:
- We obtain your express, affirmative consent before processing it for anything beyond delivering the service you requested.
- We do not sell this information, and we do not share it with advertisers or data brokers.
- We apply additional internal access controls, separate from general account access.
Full details live in our Privacy Notice / Aviso de Privacidad — this Cookie Policy only covers the tracking-technology slice of that broader commitment.
6. Your Privacy Rights
If you're in Mexico or elsewhere in Latin America (ARCO rights): You can request to Access the personal data we hold about you, Rectify it if inaccurate, request Cancellation (deletion) when there's no legal reason to keep it, and Oppose certain uses. Email us using the contact details in Section 11 — we'll verify your identity and respond within the timeframe required by applicable law.
If you're in the United States (CCPA/CPRA and similar state laws): You have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not currently sell or share personal information as those terms are defined under CCPA. We honor Global Privacy Control (GPC) signals where your browser supports them.
Everyone: You can withdraw consent for any non-essential cookie at any time using the preference manager described below, without affecting the lawfulness of processing carried out before your withdrawal.
7. Managing Your Consent
When you first visit QuHealthy, you'll see a cookie banner letting you accept or reject each non-essential category individually — we don't bundle marketing consent together with analytics, or analytics with functional cookies. You can change your choices at any time using the Manage Cookie Preferences button at the bottom of this page.
You can also control cookies directly through your browser settings (to block, delete, or get warned about cookies), though doing so may affect platform functionality. Most browsers explain how under "Privacy" or "Security" in their help documentation.
8. Third-Party Providers and International Transfers
Some third-party services we work with may set their own cookies or process data on our behalf, including:
- Stripe — payment processing
- Google Analytics — usage analytics, IP-anonymized
These providers are bound by contract to protect your data and use it only for purposes we've authorized. Some of them may process data outside Mexico or Latin America (for example, in the United States). Where that happens, we work to put appropriate contractual safeguards in place.
We do not currently work with any advertising network or data broker, and none of our third-party providers receive health information for advertising purposes.
9. Children's Privacy
QuHealthy is not directed at, and we do not knowingly collect personal information from, individuals under 18. If you're a parent or guardian booking care for a minor, you do so through your own account, under your own consent.
10. Changes to This Policy
We'll update this policy as our practices, the law, or our footprint across Mexico, the U.S., and Latin America evolve. We'll note the date of the last update at the top of this page, and for material changes, we'll provide more prominent notice (such as a banner or email).
11. Contact Us
If you have questions about this Cookie Policy, want to exercise your privacy rights (ARCO, CCPA, or otherwise), or want a full list of cookies currently active on the platform, reach our privacy team: