Legal document
Privacy Policy
1. Data controller
Hanny García, psychologist, responsible for the practice Neurodiagnóstica — Cerebro y Bienestar, with professional address in Quevedo, province of Los Ríos, Ecuador.
- WhatsApp: +593 99 293 9951
- Email: contacto@neurodiagnosticaec.com
2. What data is collected and what is not
The contact form on this site asks for only two pieces of information:
- Your name (or what you'd like to be called).
- A general reason for contact, chosen from a fixed list.
You are not asked for, and should not enter, information about symptoms, diagnoses, medication, history or any other health data. That information belongs in the session, where it is protected by professional confidentiality.
3. Purpose and legal basis
The only purpose is to arrange an appointment. The legal basis is your free, specific and informed consent, which you give by ticking the box in the form. You can withdraw it at any time without affecting the lawfulness of prior processing.
4. How the data is transmitted
This is a static site: it has no server that processes forms and no database. When you press the send button, your browser builds a message locally and opens WhatsApp with that text already written. The message is not sent automatically: you can review, edit or discard it before pressing send in your own app.
From that moment on, the conversation is governed by the terms and privacy policy of WhatsApp (Meta Platforms, Inc.), which are outside this site and the data controller. If you prefer not to use WhatsApp, you can write directly to the email address in section 1.
5. Retention
This website does not keep form data, because it never stores it. Anonymous Google Analytics statistics (only if you accepted them) are kept for 2 months. Messages you send by WhatsApp or email are kept in the corresponding inbox for as long as needed to arrange the appointment and, afterwards, while applicable legal obligations remain. Any clinical record created after the first session is governed by Ecuadorian health regulations and professional confidentiality, not by this policy.
6. Cookies, analytics and third parties
Fonts, images and all other resources are hosted on this site's own server. Until you accept the statistics, browsing does not send requests to external servers and no cookies are set.
If you press "Accept" in the statistics notice, Google Analytics 4
(Google LLC) is loaded and sets the _ga and _ga_* cookies to count visits in
aggregate: pages viewed, device type, approximate city and how many people tap the WhatsApp button.
Your name, what you type in the form and health data are never sent. Google Analytics
does not store IP addresses; advertising and Google signals are turned off, and the data is used only
to improve this site. Google may process it on servers outside Ecuador under its
privacy policy.
If you press "Decline", Google Analytics is not loaded. You can change your choice at any time with the Cookie preferences link. Your choice is remembered in your own browser (local storage) and is not sent to any server.
Links to Facebook, Instagram, Google Maps and WhatsApp only activate if you click them, at which point you go to a third-party site with its own policies.
7. Your rights
Under Ecuador's Organic Law on Personal Data Protection (LOPDP), you can exercise at any time your rights of:
- Access: to know what data about you is being processed.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to ask for your data to be deleted.
- Objection: to object to a specific processing.
- Portability: to receive your data in a structured format.
- Suspension of processing, and not to be subject to automated decisions.
To exercise them, simply write to contacto@neurodiagnosticaec.com stating the right you wish to exercise. Requests are handled within the legal deadlines. If you believe your request was not handled properly, you can contact the Superintendencia de Protección de Datos Personales (Ecuador's data protection authority).
8. Minors
Appointments for minors must be requested by their father, mother or legal guardian, who gives the corresponding consent.
9. Security
The site is served only over an encrypted connection (HTTPS) and applies security headers that restrict where resources can be loaded from and prevent it from being embedded in third-party sites. Since no personal data is stored, the exposure is kept to a minimum. Statistics, if you accept them, contain only aggregated, anonymous data.
10. Changes to this policy
Any changes will be published on this page, updating the date at the top of the document.
This is a translation for convenience. The Spanish version is the official one.