This section applies to residents of Mexico and is provided pursuant to the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), as comprehensively reformed effective 21 March 2025.
This is our privacy notice (aviso de privacidad); changes are published on this page.
Access — request confirmation that we process your personal data and obtain a copy of it.
Correction — request correction of inaccurate, incomplete, or outdated personal data.
Deletion — request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal exceptions.
Objection — object to the processing of your personal data or request that we cease processing it for specific purposes.
Portability — request that we transmit your personal data to another service or product provider in a structured, machine-readable format where technically feasible.
Withdrawal of Consent — withdraw consent to our processing of your personal data at any time. Withdrawal does not affect the lawfulness of prior processing but may affect our ability to provide trial matching services.
Breach Notification — if we experience a breach of your personal data that may affect your rights, we will notify you as required by applicable law.
Health information is sensitive personal data under Mexican law and requires your express written consent before we collect or process it, given by ticking the sensitive data consent box when you create your profile.
HealthMatch United States, Inc., 33 Arch Street, Boston, MA 02110, USA (HM US) is the controller and stores your data in the United States. We collect your contact and account details, date of birth, location, usage data, and the health data you report, including screening answers, eligibility outcomes, referral status and medical records retrieved with your authorisation.
Necessary purposes: matching you with trials, referring you to trials you apply to, operating the platform and communicating with you about trials. Voluntary purposes: telling you about other trials and improving the platform using de-identified data; opt out in your profile or at privacy@healthmatch.io.
HM US transfers your data to HealthMatch Pty Ltd, Australia, a group company that accesses it from Australia as processor to operate the platform and support matching, referrals and patients; to the sites, sponsors and CROs of a trial you agree to be referred to, in Mexico or elsewhere; and to service providers under written contracts. If you do not want your data transferred to a trial's site, sponsor or CRO, do not tick that trial's consent box; without it we cannot refer you.
Our data protection contact is Tate Stubbs, contactable at tate@healthmatch.io.
Email tate@healthmatch.io or privacy@healthmatch.io with the subject line "ARCO Request." We will respond within 20 business days of receiving a verified request.
If you are not satisfied with our response, you may lodge a complaint with the Secretaría Anticorrupción y Buen Gobierno, which assumed enforcement responsibilities under the 2025 law reform.