Legal
Privacy Policy
How INDESA collects, uses, protects and shares the personal data of patients, physicians and site visitors.
Last updated: June 2026
1. Data controller
INDESA — Institute of Advanced Densitometry is responsible for processing the personal data collected through this site and in the provision of its services. Controller contact: [email protected].
2. Data we collect
- Identification and contact data (name, email, phone, city) that you provide voluntarily through the forms.
- Data relating to the request or provision of clinical services, including sensitive health data, processed with reinforced security measures.
- Technical browsing data strictly necessary for the operation of the site.
3. Purposes of processing
- To handle information requests and study scheduling.
- To provide, bill and follow up on contracted clinical services.
- To comply with legal, accounting and regulatory obligations.
- To send service-related communications where you authorize them.
4. Legal basis and authorization
Data processing is carried out with your prior, express and informed authorization, based on Colombian Law 1581 of 2012 and its implementing decrees, as well as the regulations applicable in the Miami jurisdiction.
Sensitive health data is processed only for the authorized clinical purposes and with your explicit consent.
5. Health data and HIPAA
For services provided in Miami, protected health information is processed in accordance with HIPAA (Health Insurance Portability and Accountability Act). See our HIPAA Notice of Privacy Practices for more details.
6. Processors and transfers
INDESA may rely on data processors (for example, cloud infrastructure, messaging and email providers) acting under INDESA instructions and subject to confidentiality and security obligations.
Where international data transfer occurs, the safeguards required by applicable law will be adopted.
7. Retention
Data is retained for as long as necessary to fulfill the described purposes and applicable legal obligations (including those relating to medical records), after which it is securely deleted or anonymized.
8. Security
INDESA adopts reasonable technical, human and administrative measures to protect data against unauthorized access, loss, alteration or disclosure, including encryption in transit and access control over clinical information.
9. Your rights
You may know, update, rectify and request deletion of your data, as well as revoke the authorization granted, by writing to [email protected]. The procedure is described in our Habeas Data Policy.
10. Changes to this policy
This policy may be updated to reflect regulatory or process changes. The version in force is the one published on this site with its update date.