Personal Data
Processing Policy
In compliance with Ley 1581 de 2012, Decreto 1377 de 2013 and other applicable personal data protection regulations of the Republic of Colombia (Habeas Data), Jan Frank Lío Carrillo, of legal age, physician, identified with Colombian national ID (cédula de ciudadanía) No. 1.042.433.401 (which is also his medical registration number in Colombia), domiciled in Pereira, Risaralda (hereinafter, "Dr. Jan Lío"), adopts this Policy governing the processing of the personal data of his patients, users and contacts.
1. Data controller
- Controller: Jan Frank Lío Carrillo (physician)
- Identification: C.C. 1.042.433.401 — which is also his medical registration number in Colombia
- Address: Pereira, Risaralda, Colombia
- Email: drjanliolongevity@gmail.com
- Phone / WhatsApp: +57 310 518 1386
2. Definitions
- Personal data: any information linked to, or that can be associated with, an identified or identifiable natural person.
- Sensitive data: data that affects the privacy of the data subject or whose misuse may lead to discrimination, such as data relating to health.
- Data subject: the natural person whose data is being processed.
- Processing: any operation performed on personal data (collection, storage, use, circulation or deletion).
- Processor: the person or entity that processes the data on behalf of the Controller.
3. Data we collect
- Identification and contact data: name, email address, phone/WhatsApp number.
- Demographic data: age and sex (optional).
- Sensitive health data (voluntary): answers to symptom questionnaires, weight, height and any other information the data subject chooses to share through the assessment tools or during the program.
Regarding health data: this is sensitive data. Providing it is entirely voluntary; the data subject is under no obligation to supply it and may refuse to do so. It is processed only with prior, express and informed authorization, and under reinforced protection measures.
4. Purposes of processing
Personal data is processed for the following purposes:
- To contact the data subject and schedule the evaluation call or the delivery of services.
- To provide functional medicine, nutrition and longevity support services.
- To produce and deliver the self-assessment report requested by the data subject.
- To carry out clinical and administrative follow-up of the process.
- To send informational, educational and commercial communications related to the services (the data subject may opt out at any time).
- To comply with legal and contractual obligations.
5. Authorization by the data subject
By completing and submitting any of our forms, or by ticking the corresponding authorization box, the data subject grants prior, express and informed authorization for the processing of their data in accordance with this Policy, including — where applicable — the processing of their sensitive health data. This authorization may be revoked at any time.
6. Rights of the data subject (Habeas Data)
As the subject of your personal data, you have the right to:
- Access, update and correct your personal data.
- Request proof of the authorization you granted.
- Be informed about how your data has been used.
- File complaints with the Superintendencia de Industria y Comercio (SIC) for breaches of the law.
- Revoke your authorization and/or request deletion of the data where no legal or contractual duty to retain it exists.
- Access your personal data being processed, free of charge.
7. Procedure for inquiries and complaints
The data subject may exercise these rights by sending a request to the email address drjanliolongevity@gmail.com, stating their name, contact details and the specific request. Inquiries will be answered within a maximum of ten (10) business days and complaints within a maximum of fifteen (15) business days, extendable as permitted by law.
8. Processors and third parties
The Controller is supported by SYGNAL S.A.S., NIT 901.540.138-2, domiciled in Pereira (Cra. 17 # 9-70, Camellando Coworking), acting as Processor for technology and marketing support (website management, forms, communications and associated tools), processing the data on behalf of and under the instructions of the Controller.
In addition, we use third-party technology providers that also act as Processors (web hosting, online forms, spreadsheets, email and scheduling tools). Some of these providers may store information on servers located outside Colombia, which constitutes an international transfer or transmission of data, carried out under adequate security and confidentiality standards. We do not sell or trade personal data.
9. Security measures
We adopt reasonable technical, human and administrative measures to protect the data and prevent its alteration, loss, or unauthorized consultation, use or access.
10. Minors
Our services and tools are intended for adults. We do not knowingly collect data from minors; where this occurs, it will be handled in their best interest and with the authorization of their legal representatives.
11. Effective period
This Policy takes effect upon publication. Personal data will be retained for as long as necessary to fulfil the purposes described and any applicable legal obligations. Any material change will be communicated through this same channel.
Notice: this tool and its reports are educational and informational; they do not constitute medical diagnosis or treatment and do not replace professional consultation.