Effective Date: September 21, 2026
This privacy policy applies to the personal website of Dr. Roberto García García, orthopedic and trauma surgeon based in Oaxaca, Mexico. We are committed to respecting your privacy and protecting your personal data when you visit https://drgarciagarcia.com.
Who We Are
This site is managed by Dr. Roberto García García for educational and professional purposes. The website address is https://drgarciagarcia.com.
The data controller (responsable) under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) is:
Dr. Roberto García García
Rayón 503, Centro
68000 Oaxaca de Juárez, Oaxaca
What Data We Collect and Why
- Your name, your email address or phone number, and your message (if you use the contact form)
- Your IP address and browser type (used for spam protection and performance analytics)
- Location and device data (to enhance website delivery)
- Your email address (if you subscribe to the blog)
This data supports communication, appointment inquiries, comment moderation, and technical optimization. We do not ask for health data on this site, and we ask you not to send it through the contact form: email is not a secure channel. If you do write something of that kind, we treat it with the same confidentiality as any clinical record.
Comments
If you comment on a blog post, we collect the data shown in the form, as well as your IP address and browser information. This helps prevent spam. Your Gravatar profile photo may appear publicly if enabled. View Gravatar Privacy Policy.
Media Uploads
If you upload media (images or documents), avoid including location data (EXIF GPS), which can be extracted by visitors.
Contact Form
The contact form collects your name, the email address or phone number you give us so we can reply, and the message you write. We keep these messages indefinitely and do not use them for marketing or share them with third parties for that purpose. You can ask us to delete yours at any time.
Cookies
This site uses cookies to:
- Store visitor preferences and interface settings
- Support login and session functionality
- Collect anonymized traffic data
Visitors can manage cookie preferences in their browser settings.
Embedded Content
Some articles may include videos, social media embeds, or images from external sites. These sites may collect data, use cookies, or track interactions if you’re logged into their platforms.
Analytics
We use Google Analytics and Site Kit by Google to understand visitor behavior and improve content delivery. Read Google’s Privacy Policy.
Who We Share Data With
We may share limited data with trusted providers:
- Wordfence Security (site protection)
- LiteSpeed Cache and QUIC.cloud (site performance)
- WooCommerce and Mercado Pago (if store features are used)
- Google (through Site Kit integration)
- Automattic Inc. (United States), which operates Jetpack and WordPress.com, and delivers the blog subscription emails
Data Retention
- Comment data is stored indefinitely
- Contact form submissions are kept indefinitely
- Analytics data is stored for up to 12 months
- Purchase data, if applicable, may be stored for up to 10 years for tax or compliance
Your Rights
You have the right to access your personal data, to have it corrected when it is inaccurate, to have it deleted, and to object to its processing. These are the ARCO rights recognized by Mexico’s LFPDPPP, and you may also withdraw your consent at any time. To exercise any of them, write to us from the contact page.
International Data Transfers
Data collected on this site may be processed by third-party providers outside your country. These providers follow internationally recognized data protection standards.
If you subscribe to the blog, your email address is stored and processed on Automattic Inc. servers in the United States. You can unsubscribe at any time using the link included in every email.
How We Protect Your Data
- SSL encryption for secure connections
- Regular malware scanning via Wordfence
- Limited access to backend and admin features
Data Breach Response
In the event of a data breach, we will take immediate steps to secure the site and notify affected users within 72 hours, if necessary.
Automated Decision-Making
This website does not use AI-based profiling, scoring, or automated decision-making tools.
Third-Party Plugins
This site uses WordPress plugins that may interact with user data:
- All in One SEO
- Contact Form 7 + Flamingo
- Jetpack
- LiteSpeed Cache
- WooCommerce + Mercado Pago
- Site Kit by Google
- Wordfence Security
- WPCode Lite
- Polylang (for multilingual support)
Legal and Regulatory Compliance
Dr. Roberto García García’s website adheres to the data protection regulations applicable in Mexico.
Questions?
For any questions about this privacy policy, visit our contact page.
This policy is reviewed and updated periodically for compliance and accuracy.
Last updated: September 21, 2026