Data Processing Policy

PALMED Health Group S.A.S. ("PALMED") is responsible for processing the personal data, including sensitive health data, of its patients and users, under Colombian Law 1581 of 2012, Decree 1377 of 2013, and any rules that amend or replace them.

1. What data do we collect?

Name, ID type and number, contact details (phone, email, address), demographic data (date of birth, sex, municipality), and the health data necessary for medical care (reason for visit, history, diagnoses, treatments, vital signs).

2. What do we use your data for?

• Managing care requests and scheduling appointments.
• Providing the medical service (home, virtual or in-office) and building your clinical record.
• Contacting you to confirm, remind, or follow up on your care.
• Meeting legal health-reporting obligations (e.g., RIPS reporting to the relevant Colombian authorities).
• Billing for services rendered.

We do not share your data with third parties unrelated to your medical care, except where legally required or with your explicit authorization.

3. Sensitive health data

Since this is sensitive data, your authorization is required and voluntary. You are not obligated to authorize its processing, but without it we will not be able to provide the requested medical service.

4. Your rights as the data owner

• Know, update, and correct your data.
• Request proof of the authorization granted.
• Be informed about how your data is used.
• File complaints with Colombia's Superintendencia de Industria y Comercio for violations of the law.
• Revoke authorization and/or request deletion of your data, where no legal or contractual duty requires us to keep it (for example, clinical records must be kept for the legally required period, currently at least 15 years).

5. How to exercise your rights

Write to info@palmedhealth.com or WhatsApp +57 323 357 3211, including your name, ID, and specific request. We will respond within the applicable legal terms.

6. Data retention

Clinical records are kept for the minimum term required by current Colombian health regulations (Resolution 1995 of 1999 and its amendments). Other data is kept for as long as necessary for the purpose it was collected for, or as long as there is a legal duty to retain it.

7. Security

PALMED implements reasonable technical, human, and administrative measures to protect your data against loss, misuse, unauthorized access, or alteration.

8. Changes to this policy

This policy may be updated. The current version will always be available at this same address.