This policy explains what personal data we process, why, and with what safeguards when you use Doctor Matt's video medical-guidance service. It is governed by Colombia's Law 1581 of 2012 and Decree 1377 of 2013, and it also includes a dedicated Consumer Health Data Privacy section for residents of Washington and other U.S. states. In short: we use your data only to care for you, we never sell it, and we never use it for advertising.
1. Data controller
The controller of your personal data is Grupo Alivmed S.A.S., a company incorporated in Colombia, a healthcare provider institution (IPS) licensed by Colombia's Ministry of Health and Social Protection, and the owner of the Doctor Matt brand.
- Privacy contact (email): [email protected]
- WhatsApp: +57 300 646 7248
2. What data we process
We process only the data needed to provide the service:
- Identification and contact: name, phone number, and email address.
- Scheduling and payment: your appointment date and time and the payment confirmation. Payment is processed by the Bold payment platform; we do not store card numbers or financial credentials.
- Sensitive health data: the symptoms, medical history, and other clinical information you share during the video consultation, and the clinical record that results from it. This data is sensitive and receives heightened protection.
- Data about minors: processed only with the prior authorization of a parent or legal guardian, who must accompany the consultation.
3. How we use it (purposes)
- To provide the video medical guidance you booked.
- To create and keep your clinical record, a legal obligation for healthcare institutions in Colombia.
- To contact you about your own consultation: confirmations, reminders, instructions, and follow-up.
- To issue invoices for the service and manage payment.
- To comply with legal requirements and requests from competent authorities.
What we do NOT do: we do not sell your personal data, we do not use it for advertising, and we do not share it with advertising platforms or ad networks. This website does not install advertising pixels.
4. Legal basis
We process your data based on your prior, express, and informed authorization, as required by Law 1581 of 2012 and Decree 1377 of 2013. Health data is sensitive data: you are not obligated to provide it and doing so is voluntary; however, without that information the doctor cannot evaluate your case, and we therefore cannot provide the service. By booking and taking part in the video consultation, you authorize us to process the data described in this policy for the purposes in section 3.
5. Who we share it with
- The treating physicians of the IPS who see you in consultation and keep your clinical record.
- Technology providers that operate the platform — scheduling, video, and payment processing — acting under confidentiality obligations and only to provide those services to us.
- Authorities, administrative or judicial, when the law requires it.
International transfer: your data is processed in Colombia (and on our cloud providers' infrastructure). By using the service from the United States, you authorize the transmission of your information from your location to Colombia so the consultation can be provided.
6. How long we keep your data
Your clinical record is kept for the period required by the Colombian regulations that govern clinical records. Other data (contact, scheduling, billing) is kept while we have a relationship with you and for the applicable legal accounting and limitation periods; after that, it is deleted or anonymized.
7. Your rights (habeas data)
As the data subject, you have the right to:
- Know what data we hold about you and obtain a copy of it.
- Update and correct data that is inaccurate or incomplete.
- Delete your data where no legal duty to keep it applies (clinical records must be retained by law).
- Revoke the authorization you gave us, subject to the same legal limit.
- File complaints with Colombia's Superintendence of Industry and Commerce (SIC), the data protection authority.
To exercise these rights, write to [email protected]. We will respond within the timeframes set by Law 1581 of 2012.
8. Security
We apply reasonable technical and organizational measures to protect your information: encryption in transit, role-based access controls, and confidentiality obligations for our staff and providers. No system is 100% secure; if a security incident ever affects your personal data, we will notify you and report it to the appropriate authorities.
9. Cookies and similar technologies
This website uses technical local storage needed for it to work (for example, remembering your language or your payment status). We do not use advertising pixels or third-party trackers for marketing purposes.
10. Consumer Health Data Privacy Policy
This section applies to the consumer health data of people who use the service from the United States, including residents of the State of Washington, and supplements the rest of this policy.
What consumer health data we collect
The data described in section 2: identification and contact information linked to your care, scheduling and payment data, and the health information you share in the video consultation (symptoms, medical history, and clinical record).
How we use it
Exclusively for the purposes in section 3: to provide the medical guidance you requested, keep the clinical record, communicate with you about your consultation, bill for the service, and comply with the law.
Who we share it with
Only with the recipients in section 5: the treating physicians, the technology providers that operate the platform under confidentiality, and authorities when the law requires it.
What we do not do with your health data
We do not sell consumer health data, and we do not share it with third parties for advertising. Because we do not sell this data, no sale authorization is ever requested.
How to exercise your rights
You may request access to your health data, request its deletion (subject to the legal retention periods for clinical records), and withdraw your consent to future processing. The channel is the same as for the rest of this policy: [email protected]. If we deny your request, we will explain why, and you may ask us to reconsider the decision by writing to the same email with the subject line "Privacy appeal".
How to file a complaint
You can file a complaint through [email protected] or via WhatsApp +57 300 646 7248. Residents of the State of Washington may also contact their state's Attorney General office.
11. Minors
The service is intended for adults. A minor may only be seen with the authorization and accompaniment of a parent or legal guardian, who authorizes the processing of the minor's data under this policy and in respect of the minor's prevailing rights.
12. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on this page, with its version number and date. Current version: 1.0, July 24, 2026.