Derechos ARCO | PhysioPro

Qué son los derechos ARCO

What Are ARCO Rights.

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) grants every individual the right to exercise four types of privacy rights over their personal data, collectively known as ARCO rights:

A — Acceso (Access): You have the right to know what personal data PhysioPro holds about you, how it was obtained, and how it is being used. You can request a copy of your data.
R — Rectificación (Rectification): You have the right to request correction of any personal data that is inaccurate, incomplete, outdated, or otherwise incorrect.
C — Cancelación (Cancellation): You have the right to request deletion of your personal data when it is no longer necessary for the purpose it was collected, when you withdraw consent, or when applicable law requires deletion. Cancellation is subject to legal retention periods — for example, records that must be kept for tax or regulatory purposes cannot be deleted before the required retention period expires.
O — Oposición (Objection): You have the right to object to the processing of your personal data for specific purposes, particularly for secondary purposes such as marketing communications. Objection to primary purposes required to deliver the service (e.g., scheduling your appointment) is equivalent to withdrawing from the service.

You also have the right to revoke consent for processing activities that are based on your consent (LFPDPPP Article 8). Revocation will not be retroactive and does not affect lawfulness of processing prior to revocation.

Cómo ejercerlos

How to Submit a Request.

To exercise any ARCO right, or to revoke consent, submit a written request containing the following information:

Your full name.
A copy of a valid government-issued ID (for identity verification).
A clear description of the personal data affected and the specific right you wish to exercise.
Any additional information that helps PhysioPro locate your data (e.g., the phone number or email you used to contact us, approximate date of contact).

Where to send your request

By email: [PENDING LEONARDO CONFIRMATION: provide the dedicated privacy/ARCO email address. This may be lft.leonardo.machado@gmail.com or a separate address. It must be a monitored inbox.]

By post: Jose Maria Velazco 2632, Zona Urbana Rio Tijuana, 22010, Tijuana, Baja California, Mexico
Attention: Privacy Rights Request / Derechos ARCO

Requests submitted by post must include the same information listed above in writing. Photocopies of ID are acceptable — you do not need to send original documents.

Plazos de respuesta

Response Timelines.

PhysioPro will acknowledge receipt of your request and respond within the timelines required by LFPDPPP Article 32:

Acknowledgment: Within 5 business days of receiving a complete request.
Response to Access request: Within 20 business days of receiving a complete request. Data will be provided in a commonly readable electronic format or hard copy, at your option.
Response to Rectification, Cancellation, or Objection: Within 20 business days of receiving a complete request. If granted, changes will be implemented within 15 additional business days.
Response to Consent Revocation: Within 15 business days. Revocation affects future processing — it does not retroactively invalidate prior processing.

If your request is incomplete, PhysioPro will notify you within 5 business days of the missing information and pause the response clock until a complete request is received.

Excepciones

Limitations and Exceptions.

ARCO rights are not absolute. Requests may be denied or limited in the following circumstances (LFPDPPP Article 34):

The requestor's identity cannot be verified.
The requested data is not held by PhysioPro.
Granting the request would harm the rights of a third party.
Legal, regulatory, or contractual obligations require retaining the data beyond the requested deletion date (e.g., tax records required by law for a specified number of years).
The data is being processed pursuant to a legal obligation that overrides the individual request.

Where a request is denied, PhysioPro will provide a reasoned explanation in writing.

Escalamiento

If You Are Not Satisfied.

If PhysioPro does not respond to your ARCO request within the required timeframe, or if you are not satisfied with the response, you have the right to file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), the Mexican data protection authority.

INAI website: www.inai.org.mx
INAI complaint portal: Ventanilla Única de Trámites INAI
INAI phone: 800 835 4324 (toll-free within Mexico)

Complaints to INAI must generally be submitted within 15 business days of receiving an unsatisfactory response, or within 45 business days of not receiving any response. Refer to INAI's current procedures for exact timelines.

Last updated: [PENDING: insert effective date] · Version: DRAFT — not yet operative.

Related: Aviso de Privacidad · Aviso Médico · Cookies