Last Updated: June 2026

​

1. The Provider

This website is operated by Dr. Beatriz Rodríguez, PhD, a Clinical Embryologist and Fertility Scientist, an individual operating in her personal and independent professional capacity (the "Provider"). The Data Controller is Dr. Beatriz Rodríguez, PhD, operating in her personal professional capacity, or any corporate successor or affiliate entity designated by her to assume business operations. Contact: beatriz@drbeatrizrodriguez.com

2. Information the Provider Collects

• Identity & Contact Data: Name and email address provided via contact or booking forms.

• Health & Clinical Data: Sensitive fertility-related information, medical history, and laboratory results provided voluntarily in intake forms for case review. This is "special category" data under Article 9 GDPR.

• Transaction Data: Payment details (processed securely via third-party encryption; the Provider does not store full credit card details).

• Technical Data: IP address and website usage data collected through cookies.

3. How the Provider Uses Your Information

• Deliver the Dual-Expert Case Review and related scientific advisory services.

• Manage bookings, send confirmations, and facilitate secure video consultations.

• Ensure technical website optimization.

• Comply with the Provider's professional and legal obligations.

4. Legal Basis for Processing (GDPR)

• Contractual Necessity: To perform the services you have booked.

• Explicit Consent: Specifically for the processing of special category (health) data and for any marketing communications. Health data is never processed without your separate, explicit, opt-in consent given at the point of submission.

• Legitimate Interests: For essential business communications and service improvements.

4.1 Withdrawing Consent for Health Data

You may withdraw your consent to the processing of your health data, or to marketing, at any time and without giving a reason, by emailing beatriz@drbeatrizrodriguez.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. On withdrawal, the Provider will stop processing the relevant data and, where no overriding legal retention obligation applies (see Section 6), securely delete it.

5. Data Sharing & Security

The Provider does not sell or trade your personal data. To provide a seamless service, the Provider shares data only with the following vetted parties, each bound by data-protection terms:

• Wix.com (Hosting & Booking Platform) and Wix Payments (Payment Processing) — for the website and its booking and checkout.

• Stan (Storefront and Checkout) and Stripe (Payment Processing) — for bookings and purchases made through the store at stan.store/DrBeatrizRodriguez.

• Zoom — secure consultation delivery.

• Google Workspace — encrypted communication.

• Kit (ConvertKit, Inc., USA) — email marketing and list management. Stores your name and email to deliver requested resources and the educational and marketing communications you have consented to.

• Clinical Partner: Data is shared securely with the Provider's clinical lead, Dr. Diana Valbuena (MD/PhD), acting as an independent or joint data controller exclusively to perform the joint scientific and educational case review.

5.1 AI Tooling Disclosure

The Provider may use secure AI-assisted tools to support the organization and analysis of de-identified clinical and scientific data only. All personally identifiable information is removed before any data is processed through these tools. All scientific interpretations, case reviews, conclusions, and recommendations are conducted, verified, and delivered exclusively by the Provider and her human experts. No AI-generated output is shared with you without expert review and validation.

6. Scope of Service & Clinical Disclaimer

⚠ PLEASE READ — IMPORTANT

The Provider's services are scientific, educational, and advisory only. They do not constitute medical advice, diagnosis, or treatment, and they do not create a doctor–patient relationship. Health information you share is treated with the highest level of confidentiality and is used exclusively for scientific analysis. It is never shared with third parties for marketing purposes. All medical decisions remain between you and your treating physician.

Data retention: Case records and submitted intake health documentation are retained for a strict period of three (3) years following your last active consultation, after which they are permanently deleted or fully anonymized, unless a longer retention period is required to comply with statutory legal obligations or professional indemnity insurance mandates.

7. Your Rights

Under the GDPR and comparable global data-protection regimes (including, where applicable, the UK GDPR, Switzerland's FADP, Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, and India's DPDP Act), you have the right to access, correct, or request the erasure of your personal data. You may also object to processing, restrict processing, withdraw consent (Section 4.1), or request data portability. To exercise these rights, contact beatriz@drbeatrizrodriguez.com. You also have the right to lodge a complaint with your local data protection authority.

8. International Data Transfers

As a global consultancy serving clients worldwide, your personal and health data may be transferred to, stored, and processed in jurisdictions outside your home country (including the United States and the European Economic Area). The Provider ensures that all such cross-border transfers comply with applicable data-protection law by enforcing strict data-security protocols and relying on approved safeguards — such as standard contractual clauses or equivalent legal mechanisms — with the underlying platform providers.

9. Updates & Contact

The Provider reserves the right to update this policy to reflect changes in practice or legal requirements. Inquiries: beatriz@drbeatrizrodriguez.com