Privacy policy and personal data processing

John Orlas Blair

In compliance with the provisions of Law 1581 of 2012, Decree 1377 of 2013, Decree 1074 of 2015, and other regulations governing the protection of personal data in Colombia, Dr. John Orlas Blair adopts this Privacy and Personal Data Processing Policy in order to guarantee the proper management of personal information collected through his website, communication channels, and in the course of medical practice.

1. Data Controller

Controller: Dr. John Orlas Blair
Activity: Medical services specialized in aesthetic and reconstructive plastic surgery

Address: Calle 7 #39–107 Office 1415, El Poblado, Medellín, Colombia
Email: info@johnorlasblair.com
Phone: +57 313 718 2159

The data controller guarantees the protection, confidentiality, and security of the personal data provided by patients and users.

2. Definitions

For the purposes of this policy, the definitions established in Law 1581 of 2012 are adopted:

Personal data: any information linked to or that may be associated with an identified or identifiable natural person.

Sensitive data: information that affects the privacy of the data subject or whose misuse may lead to discrimination, including data related to health, medical history, or biometric characteristics.

Processing: any operation performed on personal data such as collection, storage, use, circulation, or deletion.

Data subject: the natural person whose personal data is subject to processing.

3. Personal Data That May Be Collected

Dr. John Orlas Blair may collect and process the following categories of information:

Identification data (name, age, identification document, marital status, occupation, educational level).
Contact data (telephone number, email address, address).
Demographic data.
Medical information necessary for evaluation or procedures.
Information related to consultations, medical appointments, or procedures.
Clinical images.

Data may be collected through:

Website forms
Appointment scheduling
In-person or virtual consultations
Communications via email, telephone, or messaging applications
Official social media channels

4. Purpose of Data Processing

The personal data collected will be used for the following purposes:

Managing information and contact requests.
Scheduling and confirming medical appointments.
Performing medical evaluations and surgical procedures.
Managing medical records in accordance with healthcare regulations.
Sending information related to medical services.
Providing patient follow-up before and after procedures.
Complying with legal, regulatory, and administrative obligations.
Improving the user experience on the website.

Under no circumstances will personal data be sold or used for purposes other than those authorized.

5. Authorization of the Data Subject

The processing of personal data will only be carried out with the prior, express, and informed authorization of the data subject, except in cases permitted by law.

Authorization may be obtained through physical or electronic means or through unequivocal conduct by the data subject that reasonably indicates consent.

6. Sensitive Data

When sensitive data is collected, especially information related to health, the data subject will be informed that they are not obligated to authorize its processing.

Such data will be processed with the highest standards of confidentiality and security in accordance with the applicable regulations in the healthcare sector.

7. Rights of the Data Subject

The data subject has the right to:

Know, update, and rectify their personal data.
Be informed about the use given to their data.
File complaints with the Superintendence of Industry and Commerce.
Revoke authorization or request deletion of the data when applicable.
Access their personal data free of charge.

8. Procedure for Inquiries and Complaints

Data subjects may submit inquiries or complaints related to their personal data through:

Email: info@johnorlasblair.com
Address: Calle 7 #39–107 Office 1415, El Poblado, Medellín

Inquiries will be addressed within a maximum period of ten (10) business days. Complaints will be resolved within fifteen (15) business days following their receipt.

9. Information Security

Dr. John Orlas Blair implements reasonable technical, administrative, and human measures to protect personal data against loss, unauthorized access, alteration, or misuse.

10. Policy Validity

This Privacy Policy becomes effective upon its publication on the website and will remain in force as long as necessary to fulfill the purposes described or while there is a legal obligation to retain the data.

11. Modifications

The controller reserves the right to modify this policy at any time. Any changes will be communicated through the official website.

12. Website terms and conditions

Access to and use of the website implies acceptance of the following terms:

Use of the Website

This website provides informational content about the medical services offered by Dr. John Orlas Blair.

The information published does not replace a personalized medical evaluation.

Use of Cookies

This website may use cookies to enhance the user’s browsing experience, analyze website traffic, and optimize the services offered.

Users may configure their browser to refuse the use of cookies if they wish.

By continuing to browse this website, the user accepts the use of cookies.

Intellectual Property

All content on the website including:

Texts
Images
Logos
Design
Audiovisual material

Is the property of Dr. John Orlas Blair and is protected by intellectual property laws.

Reproduction without authorization is not permitted.

Medical Information

The information published has educational and informational purposes.

Each patient requires an individual medical evaluation before any surgical procedure.

Surgical results may vary depending on the characteristics of each patient.

Limitation of Liability

The use of the information contained on this website is the responsibility of the user.

The website does not replace professional medical consultation.