Privacy policy

Controller and contact

H Code LLC. EIN: 98-1930647. Address: 1209 Mountain Rd Pl NE, Ste R, Albuquerque, NM 87110, United States. Privacy and rights contact: info@healthcode.es.

Before launch, H Code LLC must determine whether an EU representative must be appointed or identified under GDPR Article 27 and document that decision.

Contact form

We process your full name, email, phone number and message to handle and answer your enquiry. Depending on the request, processing is based on steps taken at your request before a contract or on the legitimate interest in answering general enquiries.

Do not include medical or genetic information. Submitting the form does not subscribe you to marketing communications.

Appointment bookings

H Code LLC is the controller of booking data. Cal.com provides the booking tool and processes full name, email, phone number, appointment date and time, and technical data needed to manage the booking and related communications. The booking is synchronised with Google Calendar and may use Cal Video.

Do not submit symptoms, results, genetic information or other health data in booking questions. The processing agreement, subprocessors and international-transfer safeguards must be verified before bookings are enabled.

Purchases, payments and account

WooCommerce manages the cart, checkout, orders and customer account. A purchase involves identity, contact, billing, address, order and other information needed for tax, fraud prevention, support and legal compliance.

The payment gateway processes data needed to authorise and confirm payment. The observed integration uses Stripe; Health Code must confirm the final gateway, applicable agreement and data received before launch. The website must not log or store full card numbers.

Communications and providers

The contact form uses Resend to deliver messages to info@healthcode.es. Web hosting, email, WooCommerce, the payment gateway, Cal.com, Google Calendar and Cal Video may process data to provide their functions.

H Code LLC must keep an updated record of providers, subprocessors, processing locations and transfer mechanisms. Providers publish privacy and data-processing information, but Health Code's specific contractual setup must be verified before launch.

Retention

Enquiries and bookings are kept while needed to handle the request, manage the appointment and resolve directly related issues. They are then deleted or, where required, kept with restricted access for legal obligations or potential claims.

Orders, invoices, payments and any clinical documentation follow their own legal periods. H Code LLC must approve and operate the review and deletion procedure before bookings open.

Your rights

You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to info@healthcode.es. You may also complain to the Spanish Data Protection Agency at aepd.es.