Privacy Policy

Last updated: May 16, 2026

CMC Pharmacy Cabo (“CMC”, “we”, “our”, “us”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use it, and what choices you have. We comply with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and applicable international standards including the EU GDPR for visitors from the European Economic Area.

1. Information we collect

We collect information you provide directly to us when you place an order, request a doctor consultation, contact our concierge service, or communicate with us via WhatsApp, phone, or email. This may include: your full name, billing address, delivery address (typically a hotel or villa), email, phone number, payment details (processed by our payment provider — we do not store full card numbers on our servers), purchase history, prescription images you choose to share with us, and any health information you voluntarily disclose to our pharmacist or affiliated doctor.

We also collect limited technical data automatically when you visit our website: IP address, browser type, pages viewed, and similar log data through cookies and analytics tools.

2. How we use your information

• To process and deliver your orders.
• To coordinate doctor consultations and prescription fulfillment.
• To respond to your inquiries and provide bilingual customer support.
• To send order confirmations, delivery updates, and (only with your consent) marketing communications.
• To comply with Mexican health-sector regulations (NOM-073-SSA1, COFEPRIS requirements) and applicable tax law.
• To improve our website and services.

3. Health information & prescriptions

Health information and prescription images you share with us are treated as sensitive personal data. We use them only to verify and dispense your medication, to provide medical advice through our affiliated doctors, and to maintain pharmacy records as required by Mexican law. We do not sell, rent, or share this information with third parties for marketing purposes.

4. Sharing with third parties

We share data only with: licensed Mexican doctors and pharmacists involved in your care, payment processors (Stripe, bank transfer providers), logistics couriers fulfilling your delivery, our hosting provider, and government authorities when legally required. All vendors are contractually bound to protect your data.

5. Cookies

We use cookies and similar technologies for essential site functionality, analytics, and (with your consent) personalization. You can disable cookies in your browser settings; some site features may not function correctly without them.

6. Your rights (ARCO)

Under LFPDPPP you have the right to access, rectify, cancel, or oppose (ARCO) the processing of your personal data, as well as to revoke any consent you have previously given. To exercise these rights, contact us using the details below. We will respond within the timeframes required by law.

7. Data retention & security

We retain your data only as long as necessary to fulfill the purposes described above and to comply with legal obligations (e.g., pharmacy and tax records). We use industry-standard technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure.

8. International transfers

Some of our service providers may be located outside Mexico. When data is transferred internationally, we ensure appropriate safeguards consistent with LFPDPPP and applicable foreign laws.

9. Children

Our services are not directed to children under 18. We do not knowingly collect data from minors; pediatric orders must be placed by a parent or legal guardian.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with an updated date at the top.

11. Contact us

For privacy questions, ARCO rights requests, or any concern about how we handle your data, please contact us via WhatsApp +52 624 409 5065 or through our contact page. A formal privacy contact email and the appointed data-protection officer will be published here once finalized.