CISME · Legal

Website privacy policy

What data cismepr.com collects, what for, and what we do not do with it. Clinical information is also governed by the Notice of Privacy Practices. The TRICO Terpenes Finder app has its own policy.

Reviewed October 16, 2026 ✓ Approved October 16, 2026 Effective October 16, 2026

01Controller

Centro Interdisciplinario de Salud Mental, C.S.P., P.O. Box 2921, Mayagüez, Puerto Rico 00681. Privacy Officer: Dr. Carlos A. Lado-Cornejo, info@cismepr.com, WhatsApp 787-403-4259.

02What data we collect

WhereDataWhat for
Clinical service paymentsName, email, service and amountCharging the service and sending your receipt
Record of acceptanceDocuments accepted, version, date, time, IP and browserProving that you gave your consent
Email and phoneWhat you write to usAnswering you and arranging your appointment

On the website we do not ask for a diagnosis, clinical history, Social Security number or driver's licence. Please do not email us details about your health.

03Cookies and tracking

cismepr.com uses no cookies, advertising pixels or analytics tools, and shares no data with social networks or advertisers. That is why we show no cookie banner. On the home page your browser downloads two typefaces from Google Fonts, and the video on the technology page is served by YouTube in privacy-enhanced mode.

04Who we share data with

Only providers that serve us: Render (server), Supabase (database) and Stripe or PayPal (payments, once switched on; we never see or keep your card). Those handling health information sign a Business Associate Agreement under HIPAA. Also when the law requires it. We do not sell or rent your data.

05Security and breaches

All information travels encrypted (HTTPS). If a security breach affects your information, we will notify you as soon as possible, notify Puerto Rico's Department of Consumer Affairs (DACO) within 10 days under Law 111-2005, and the federal authorities when HIPAA requires it.

06Retention and your rights

Messages that do not lead to an appointment are deleted after 12 months. The record of acceptance is kept for at least 6 years. You may ask to access, correct or delete your website data by writing to info@cismepr.com; we answer within 30 days. Services are for adults: we do not knowingly collect data from minors.

Reviewed October 16, 2026 · Approved October 16, 2026 by Dr. Carlos A. Lado-Cornejo