Privacy and data processing

At ISOSTEL S.A.S. (MediTic IPS) we process personal data in accordance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other applicable rules. This policy explains how we process the data we receive in providing healthcare and through this website.

Last updated: October 2026.

ISOSTEL S.A.S. (MediTic IPS), tax ID 901.467.051-9, located at Calle 32EE #75C-65, Medellín, Antioquia, Colombia. Email: contacto@mediticips.com. You can also write to us through this website's contact form.

In healthcare: identification and contact data, health and medical record data, and data of children and adolescents, received through their legal representative.

On this website:

• What you enter in forms: name, contact channel (mobile or email), city, service and care option of interest, and your answers to each form.
• Conversations with the virtual assistant, if you choose to use it.
• Technical visit data, such as the page where you sent the request and, if you accept measurement cookies, how you reached the site.

The website forms don't ask for clinical information, and we ask you not to include it.

• Provide healthcare services in the specialties and care options we offer.
• Manage medical records and medical, administrative, billing, audit, quality, referral and counter-referral processes.
• Comply with the legal, contractual and administrative obligations of a healthcare provider.
• Handle your appointment, guidance or contact requests and coordinate them with you through the channel you choose (WhatsApp, phone call or email).
• Receive, process and answer requests, complaints, claims, suggestions and compliments.
• Assist professionals, providers and organizations interested in our solutions.
• Send you information about services and news, only if you authorize it expressly and separately. You can withdraw that permission at any time.
• Improve the site with aggregated information, if you accept measurement cookies.

Health data is sensitive data. Providing it, like the data of children and adolescents, is optional; however, it is necessary to provide adequate care. We process it with prior, express and informed authorization, only for the legitimate purposes of our corporate purpose and with restricted access.

The authorization to handle a request, the permission to receive marketing information and the consent for healthcare are separate records.

Vesu is an AI-powered guidance assistant. It doesn't diagnose or give medical advice. It only starts chatting after you authorize the processing of what you write. We process your messages with an artificial intelligence provider and keep the conversation to handle your request. You can revoke your authorization from the chat itself.

To run the site and handle your requests we work with providers acting as data processors: web hosting (Vercel), database (Supabase) and the assistant's artificial intelligence provider (OpenAI). Some of them may store or process data outside Colombia, with the safeguards the law requires. If you choose to continue a conversation on WhatsApp, that service applies its own terms.

To coordinate tests, we share with the partner laboratory or provider only what is necessary for your care. We don't sell or rent your personal data.

Images captured by the clinic's video surveillance systems are processed to:

• Collect video or photographic images of users and visitors.
• Maintain security measures to monitor incidents.
• Deter irregular conduct by third parties.
• Control the entry of users and staff to the facilities.
• Carry out disciplinary processes with staff, where applicable.
• Transmit data to third parties for surveillance purposes.

We apply technical, human and administrative measures to protect information against tampering, loss, unauthorized or fraudulent consultation, use or access: encrypted connections, access restricted to the staff who need it and separation between the site's public information and the requests we receive.

As the data subject you can:

• Access, update and correct your personal data.
• Request deletion of your data where appropriate.
• Revoke your authorization, unless a legal or contractual duty prevents it.
• Request proof of the authorization granted.
• Be informed about how your data has been used.
• File complaints with the Superintendence of Industry and Commerce for violations of the data protection law.

Email us at contacto@mediticips.com or use this website's contact form, including your name, your request and a way to reply to you. We answer queries within a maximum of ten (10) business days and claims within a maximum of fifteen (15) business days, under articles 14 and 15 of Law 1581 of 2012. If we cannot respond within that time, we will tell you why and give you a new date, within the terms of the law.

We keep data for as long as necessary for the purposes described and as required by applicable rules. Medical records are kept for the period set by health regulations.

We may modify this policy. We will publish any substantial change on this page, with its update date.