Legal

Ingenes Privacy Policy

Last revised: September 15, 2026

THIS PRIVACY POLICY APPLIES TO RESIDENTS OF MEXICO OR ANY PERSON IN THE WORLD WHO WISHES TO CONTRACT A SERVICE AT INSTITUTO DE INFERTILIDAD Y GENÉTICA MÉXICO, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA MONTERREY, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA GUADALAJARA, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA QUERÉTARO, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA TIJUANA, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA MÉRIDA, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA PUEBLA, S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA CANCÚN S.C., INSTITUTO DE INFERTILIDAD Y GENÉTICA CHIHUAHUA S.C., INSTITUTO DE FERTILIDAD Y GENÉTICA HERMOSILLO S.C., OR INSTITUTO DE FERTILIDAD Y GENÉTICA MAZATLÁN S.C. (hereinafter and collectively, the “Clinics”).

Introduction

The purpose of this Privacy Policy is to describe the privacy procedures and policies that INSTITUTO DE INFERTILIDAD Y GENÉTICA MÉXICO, S.C. (hereinafter “INGENES”, “we”, “us” and “our”) employs in rendering medical and corporate services, and that it carries out in the course of its business and collaboration relationship with other Mexican companies of the group (the “Clinics”), for the purpose of rendering online and in-person medical services, through consultations and a secure communication system between physicians and patients.

This notice is the comprehensive privacy notice (aviso de privacidad integral) under Article 14 of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), published in the Official Gazette of the Federation (Diario Oficial de la Federación) on March 20, 2025 and in force since March 21, 2025 (hereinafter, “the Law”). Hereby, and pursuant to Article 15 of the Law, we inform you of the purposes of the processing of your personal data.

Read this notice carefully to understand what we do. If you do not understand any aspect of this Policy, contact us as described in the section “Area Responsible for Personal Data”.

You understand and acknowledge that each of the Clinics listed in this policy is individually liable and must be bound by the terms of this Policy and protect your personal information, in accordance with the principles of lawfulness, purpose, loyalty, consent, quality, proportionality, information and accountability set forth in Article 5 of the Law. The data controllers responsible for the processing of your personal data are:

INSTITUTO DE INFERTILIDAD Y GENÉTICA MÉXICO, S.C., with address at Carretera México Toluca No. 5420, Floor 6, Col. El Yaqui, Cuajimalpa, Zip Code 05320, Ciudad de México, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA MONTERREY, S.C., with address at Av. Revolución No. 2703 Floor 8, Col. Ladrillera, Zip Code 64830, Monterrey, Nuevo León, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA GUADALAJARA, S.C., with address at Calle Mar del Sur No. 2014, Int. 102 and 103, Col. Country Club, Zip Code 44610, Guadalajara, Jalisco, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA QUERÉTARO, S.C., with address at Avenida Paseo Monte Miranda No. 5, Floor 9, Fraccionamiento Piamonte, Zip Code 76240, El Marqués, Querétaro, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA MÉRIDA, S.C., with address at Calle 20 No. 235 Floor 8, Fracc. Altabrisa, Zip Code 97130, Mérida, Yucatán, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA TIJUANA, S.C., with address at Diego Rivera, No. 2311, Floor 10, Col. Río Tijuana, Zip Code 22010, Tijuana, Baja California, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA PUEBLA, S.C., with address at Vía Atlixcayotl (Lateral Sur) No. 6514, Office 300 Floor 3, Col. San Bernardino Tlaxcalancingo, Zip Code 72820, San Andrés Cholula, Puebla, Mexico, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA CANCÚN S.C., with address at Av. Bonampak, Manzana 1, Lote 4C Suites 306 and 307, Supermanzana 4A, Zip Code 77500, Cancún, Quintana Roo, email: contacto@ingenes.com
INSTITUTO DE INFERTILIDAD Y GENÉTICA CHIHUAHUA S.C., with address at Paseo Vistas del Sol 6801, Suite 903, Col. Villas del Sol, Floor 9, Zip Code 31124, Chihuahua, Chihuahua, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA HERMOSILLO S.C., with address at Blvd. Paseo Río Sonora Nte No. 70, Suites 221, 222, 223, Proyecto Rio Sonora, Zip Code 83270, Hermosillo, Sonora, email: contacto@ingenes.com
INSTITUTO DE FERTILIDAD Y GENÉTICA MAZATLÁN S.C., with address at Av. Reforma, No. 2007-B, Floor 10, Suite 10-A, Colonia Flamingos, Zip Code 82149, Mazatlán, Sinaloa, email: contacto@ingenes.com

Our Privacy Notice explains:

Information we collect.
Purposes of processing (primary and secondary).
Consent.
How we use and transmit your information to third parties.
Non-retroactivity.
Your rights (ARCO rights: Access, Rectification, Cancellation and Opposition).
Communications and marketing.
Digital collection.
Security of your information.
Area Responsible for Personal Data.
Changes to this notice.
Questions and contact.

I. Scope

This Policy applies to the personal data that INGENES and the Clinics collect, as applicable, through any legitimate channel of contact with you, including but not limited to: websites and landing pages; digital forms; online onboarding and scheduling; email; telephone; messaging; in-person service and consultations; physical forms; our internal systems; and any other point of contact that we legitimately use to provide our services to you. Our Site contains links to third-party sites that are not owned or controlled by INGENES; we are not responsible for the privacy practices of those sites. Use of our Site is also subject to the Terms and Conditions of Use of the website.

II. Information We Collect

We collect the information that you provide to us, for example, when you create or modify your account, register to use our Site, schedule an appointment, purchase products or services from us, request information from us or communicate with us. This information may include:

Full name, date of birth, marital status and address.
Your telephone numbers and, if applicable, those of your partner.
Payment information (credit or debit card number, expiration date and security code, solely for payment purposes).
If you require invoicing, your tax information in order to issue an invoice in accordance with applicable provisions.
Username and password.
Communications with Providers or physicians in the course of the Service.
How you heard about INGENES or the Clinics, where applicable.

We may also collect, as part of providing the Service: insurance information; and medical and health data (previous physicians or other healthcare providers you visited, reason for the visit, date, medical history and condition, medications, images or videos and other medical and health information that you share with us).

Classification of Personal Data

For purposes of this notice, we distinguish three categories, in accordance with Article 2, section VI of the Law:

(A) General personal data: name, address, telephone number, date of birth, marital status, payment information, tax information, username and password.
(B) Personal data that, by its nature or by the context in which we process it, may be sensitive: for example, your gender, age, weight, height or lifestyle, when this data is collected or associated with a health condition, a treatment or your reproductive situation. Outside that context, this data is treated as general data.
(C) Sensitive personal data, under Article 2, section VI of the Law: your present or future health status, your medical and clinical history, information about your reproductive life and, where applicable, your sex life when necessary for the requested service, information relating to assisted reproduction techniques and/or treatments (including preimplantation genetic diagnosis and gamete donation), your diagnoses and your genetic information.

The processing of category (C) data, and of category (B) data when it actually reveals sensitive information, is governed by Chapter IV “Consent” of this notice.

Information We Collect Automatically on Our Site

We use Google Analytics and first-party and third-party cookies to analyze use of the Site, remember preferences and, where applicable, display interest-based advertising. You may review how Google uses data at www.google.com/policies/privacy/partners/ and configure your browser to reject cookies, although some features of the Site might not operate properly without them.

No Information Accepted from Individuals Under 18 Years of Age

If you are under 18 years of age, do not attempt to register with us on this Site or provide us with personal information about yourself. If we learn that we have collected personal information from someone under 18 years of age, we will delete that information immediately. If you believe that we have collected personal information from someone under 18 years of age, contact us at contacto@ingenes.com.

III. Purposes of Processing

In accordance with Article 15, section III of the Law, we expressly distinguish the purposes that are necessary for the legal relationship with you (primary) from those that are additional and optional (secondary).

A) Primary Purposes (Necessary for the Service)

We use your personal data, including sensitive data where applicable, to: identify and contact you; register you and schedule your appointments; provide you with the medical, diagnostic, laboratory, pharmaceutical and regenerative medicine services that you request; provide follow-up care; compile and maintain your clinical record; invoice and collect payment; provide you with support; comply with applicable regulatory and health-related obligations; and send you operational communications related to the service (confirmations, appointment reminders, results). These purposes are essential: without them we cannot provide you with the service that you requested.

B) Secondary Purposes (Optional)

Where you consent under the terms of the “Consent” chapter, we may also use your data for: marketing and advertising of INGENES and the Clinics; promotions, contests and commercial surveys; educational and informational content on wellness and reproductive health; analysis of your interests and preferences and audience segmentation; marketing automation; and, only where the specific authorization described in the “Transmission of Information to Third Parties” chapter exists, commercial communications made by an independent third party.

These secondary purposes are optional. You may refuse them, or any of them individually, from the moment your data is collected and at any time thereafter, without affecting your medical care, the availability of your appointments or any other service that you have contracted with us.

IV. Consent

The processing of your personal data is subject to your consent, except for the exceptions provided in Article 9 of the Law (for example, when the data is essential to provide you with emergency medical care). We distinguish five scenarios:

General personal data, for the primary purposes: consent is tacit, unless you state otherwise, under Article 7 of the Law.
Sensitive personal data (category C, and category B when it reveals sensitive information): requires your express written consent, under Article 8 of the Law, by handwritten signature, electronic signature, or a valid electronic authentication and evidence mechanism. When consent is obtained electronically, the mechanism used must: (i) allow the data subject to be properly identified or authenticated; (ii) record an affirmative action by the data subject; (iii) retain evidence of the exact text that the data subject accepted, together with the date, time and version of the consent; and (iv) allow that consent to be demonstrated subsequently. An acceptance checkbox, by itself, satisfies this standard only when it meets the foregoing.
Secondary purposes (marketing, advertising, segmentation and the others described in subsection III.B): require specific consent, separate from the acceptance of this notice, which you may grant or deny without affecting your care.
Transfers to independent third parties for commercial purposes (subsection V.D): require your prior, express, informed and demonstrable consent, granted through an acceptance or rejection checkbox separate from the foregoing.
Necessary transfers (subsection V.B): do not require your consent, as they fall within one of the exhaustively listed cases of Article 36 of the Law.

You may revoke any of the foregoing consents at any time, without retroactive effect, by writing to the email address indicated in the section “Area Responsible for Personal Data”. The revocation of a secondary consent never affects the provision of medical services.

V. Transmission of Information to Third Parties

We precisely distinguish four categories, each with a different legal regime. A single company or provider may fall within only one of these categories with respect to a given processing activity.

A) Data Processors (Personas Encargadas)

These are providers that process your personal data solely on behalf of and under the instructions of INGENES (for example, system hosting providers, scheduling platforms or payment processors), without using it for their own purposes. We maintain agreements with these providers that impose on them the same confidentiality and security obligations that the Law imposes on us (Article 2, section XII and Article 20 of the Law). This is not a transfer in the strict sense and does not require your additional consent.

B) Necessary Transfers (Without Consent)

We may transfer your personal data, including sensitive data, without requiring your additional consent, only when the transfer falls within one of the cases of Article 36 of the Law, including:

To the Clinics and to physicians or Providers directly involved in your diagnosis and treatment, as it is necessary for the provision of the medical service that you requested.
To companies of the same INGENES corporate group that operate under the same internal data protection processes and policies.
Where there is a court order, a duly founded and reasoned resolution or mandate of a competent authority, or an applicable legal provision.
Where necessary for the recognition, exercise or defense of a right in judicial proceedings, or for the performance of the legal relationship between you and INGENES.

In each of these cases, we communicate to the recipient the content of this notice and the purposes to which you subjected your data, and the recipient assumes the same obligations that correspond to INGENES as data controller (Article 35 of the Law).

C) Independent Third Parties (Non-Commercial)

If you decide to log in to the Site or share your experience through social networks (for example, Facebook or Google), those third parties may collect information about you in accordance with their own privacy policies, for which we are not responsible. The same applies to the information that you decide to post in public areas of the Site.

D) Independent Third Parties for Commercial Purposes

In addition to the foregoing, and only when you grant the prior, express, informed and demonstrable consent referred to in Chapter IV, INGENES may transfer your personal data (including data related to your health, where applicable) to companies independent of INGENES, so that such companies, on their own behalf and as independent data controllers, may send you commercial, promotional or advertising information about their own products or services related to health, wellness or assisted reproduction.

This transfer is never necessary for the legal relationship with INGENES or for the provision of your medical services: if you do not grant your consent, or if you subsequently revoke it, this will have no consequence whatsoever on your care, the availability of your appointments or any other service.

When the Law requires precise identification of the specific recipient of a commercial transfer of this type, that level of detail is not satisfied by a generic category in this general notice: at the time that specific transfer is offered to you (for example, in a registration form or at a given point of contact), you will be presented with a specific consent that will identify the recipient by its corporate name and address, the exact purpose of the transfer, whether or not there is monetary consideration for INGENES, and the means to refuse or revoke your acceptance, under Article 35 of the Law. This general notice neither replaces that specific consent nor presupposes it.

VI. Non-Retroactivity

The publication of a new version of this privacy notice does not, by itself, validate new purposes or transfers with respect to personal data that we have previously obtained under a different notice. If in the future we intend to use previously obtained data for a new purpose, different from the one originally disclosed, we will obtain your additional consent before doing so, under Article 11 of the Law. No clause of this notice shall be construed to the contrary.

VII. Your Rights (ARCO Rights)

You have the right to Access your personal data and the conditions of its processing; to Rectify it when it is inaccurate, incomplete or out of date; to request its Cancellation; and to Oppose its processing for a legitimate reason or when it is subject to automated decisions that produce adverse legal effects for you (Articles 21 to 26 of the Law). The exercise of one ARCO right is not a prerequisite for exercising another.

To exercise them, submit a written or electronic request to the area responsible for Personal Data, indicating the specific right that you wish to exercise, accompanied by your official identification (Articles 27 and 28 of the Law). We will respond within 20 (twenty) days following receipt of your complete request, a period that we may extend only once for an equal period when justified by the circumstances; if your request is found to be valid, we will make it effective within 15 (fifteen) days thereafter (Article 31 of the Law). The exercise of ARCO rights is free of charge, except for any applicable reproduction, copying or shipping costs (Article 34 of the Law).

If you disagree with our response, or if you do not receive a response within the stated period, you may file a data protection request (solicitud de protección de datos) with the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the guarantor authority in this matter, within 15 (fifteen) days after the response has been communicated to you (Articles 38 to 40 of the Law).

Independently of the foregoing, you may register your telephone number in the Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad, REPEP), administered by the Federal Consumer Protection Agency (Procuraduría Federal del Consumidor, PROFECO), so as not to receive advertising or promotions by telephone from INGENES, the Clinics or third parties.

VIII. Legal Processing

Your personal information may be used and disclosed by our organization, our office staff and other outside persons who are involved in your care and treatment for the purpose of providing you with health care services, to support the operation of the organization and for any other use required by the Law.

We will share personal information with companies, organizations or individuals outside of INGENES if we believe, in good faith, that access, use, preservation or disclosure of the information is reasonably necessary to:

Comply with any applicable law, regulation, requirement, legal process or enforceable governmental request, whether administrative or judicial.
Enforce the applicable Terms of Use, including investigation of potential violations.
Detect, prevent or address fraud, security or technical issues.
Protect against harm to the rights, property or safety of INGENES, the Clinics, business partners, our users, customers or the public as required or permitted by the Law.

IX. Transfer of Information in the Event of a Change of Corporate Control

If the ownership of all or substantially all of our business changes or if we transfer assets related to our business or the Site to a third party, whether by merger, acquisition, insolvency proceedings (concurso mercantil), bankruptcy or otherwise, we may transfer or sell your personal information to the new owner. In such event, unless otherwise permitted by applicable law, your information will remain subject to the promises and conditions set forth in the applicable privacy policy, unless you state otherwise.

X. Communications and Marketing

We distinguish among four types of communication, each with its own regime:

Medical and care communications: relating to your diagnosis, treatment and clinical record. You may not unsubscribe from them, as they are essential for your care.
Transactional communications and service reminders: appointment confirmations, payment notices, security notifications. They form part of the primary purpose of the contracted service.
Marketing by INGENES and the Clinics: requires the consent referred to in subsection III.B; you may unsubscribe at any time without affecting your care.
Marketing by an independent third party: requires the specific consent of subsection V.D; it is governed by the same revocation rules.

Acceptance of medical care is never construed as automatic authorization for our own marketing or third-party marketing. To unsubscribe from marketing communications, you may use the “unsubscribe” link included in each electronic communication, write to the area responsible for Personal Data, or register in the PROFECO REPEP for telephone communications. We will process your unsubscribe request promptly and free of charge.

XI. Digital Collection

When you provide us with personal data by a means other than a printed form (web forms, landing pages, chat, online scheduling or digital onboarding), we will present to you, at the time of collection, a simplified privacy notice that will contain, at a minimum: our identity and address; the personal data that we will process, identifying the sensitive data; the purposes of processing, indicating which require your consent; and the site where you can consult this comprehensive notice (Article 16, section II of the Law). Your acceptance will be given through an affirmative action (for example, a checkbox that you actively tick); no consent checkbox will be pre-ticked.

When the information requested is sensitive personal data, or when you are offered any secondary purpose or a transfer to an independent third party, you will be presented with an additional and separate consent mechanism that meets what is described in Chapter IV for each case, with the same visual prominence for accepting and for rejecting.

XII. Security of Your Information

We use reasonable physical, technical and administrative security measures, consistent with the medical industry, to protect the confidentiality and security of your personal information (Article 18 of the Law). However, no means of transmission over the Internet is 100% secure; we recommend that you not communicate confidential information by unencrypted email. If a security breach occurs that significantly affects your rights, we will inform you immediately (Article 19 of the Law).

XIII. Area Responsible for Personal Data

INGENES has the area, person or department responsible for handling your requests regarding ARCO rights, consent and revocation, under Article 29 of the Law. You may contact it at avisodeprivacidadcdmx@ingenes.com or, for general matters, at contacto@ingenes.com, or in person at the Clinic where you receive care.

XIV. Changes to the Privacy Notice

This notice may change from time to time. When we adopt a change, we will post it on this page and update the last revision date. If the change results in a purpose or transfer different from those originally disclosed with respect to data already held in our databases, the provisions of Chapter VI “Non-Retroactivity” will apply.

XV. Questions and Contact

If you have any question, concern, complaint or suggestion regarding this notice, contact us at contacto@ingenes.com.