Legal

Privacy policy

What we collect, why, and what this website keeps in your browser.

What you send us

The consultation form is the only place this website asks you for anything. It collects your name, email, country, phone number, the procedures you are interested in and whatever you choose to write in the message field. You decide how much to write; nothing beyond your name and email is required to reach us.

We use it for one thing: to answer you and to coordinate your care with Dr. Urzola. We do not sell it, we do not trade it, and we do not send it to advertisers.

Medical information

What you write about your symptoms and your history is medical information and is treated as confidential. This website does not ask you to upload photographs — the form has no file upload, and you should not send clinical images through it.

If you later share photographs directly with the team, by email or WhatsApp, they are stored privately and seen only by the people reviewing your case. Nothing of yours is ever published without your explicit consent, and consent for a consultation is not consent to publish.

Who inside the practice can see it

Access is limited by role. The administrator sees the full record. Staff working on follow-up see only what follow-up needs — name, email and phone — and lose access to a case once it closes. Every access and every change is logged.

Cookies and what this site stores in your browser

This website does not use advertising or analytics cookies. There is no Google Analytics, no Meta pixel and no third-party tracker on these pages, so nothing here follows you around the internet and there is nothing to consent to.

One thing is stored locally in your own browser: your confirmation that you are 18 or older, so the before-and-after gallery does not ask you again on every visit. Clearing your browser data removes it.

The symptom check stores nothing. Your answers stay on the screen while you are using it and are gone the moment you leave or reload the page. They are not saved in your browser, they are not put in the address bar, and they are never sent to us. If you want the team to know about a symptom, write it in the consultation form — that is the only way any of it reaches us.

Signed-in members of the clinic team also receive a session cookie, which is what keeps the admin panel locked; it is not set for visitors.

Other companies involved

The site is hosted by Vercel, its database and file storage are provided by Supabase, and email notifications are sent through an email provider. They process data on our instructions in order to run the service. Country flags in the booking form are images loaded from flagcdn.com. The map on the contact section is embedded from Google Maps, which is subject to Google’s own privacy policy.

Your choices

You can ask us what we hold about you, ask for it to be corrected, or ask us to delete it. Write to info@explantcostarica.com and we will respond. If you would rather not use the form at all, the phone numbers and the address on the contact section reach the same team.

Written in plain language and pending review by legal counsel in Costa Rica before go-live.