1. Who we are
Andes Aesthetic Concierge ("Andes," "we," "us" or "our") provides non-medical concierge and coordination services for people exploring aesthetic surgery in Colombia. Andes is not a medical provider and does not diagnose, recommend treatment or make medical decisions.
For privacy questions or requests, contact neil@andesconcierge.com or text/WhatsApp (917) 417-1202.
2. Information we collect
Depending on how you interact with Andes, we may collect:
- Contact information, such as your name, email address, telephone or WhatsApp number and country of residence.
- Inquiry information, such as the procedure you are considering, preferred timing and the services you want help coordinating.
- Health-related information, photographs, medical history or documents that you later choose to provide through an authorized intake or evaluation process. Health information is treated as sensitive information.
- Communications, including emails, messages, call notes and records of permissions or requests.
- Technical information, such as IP address, browser type, device information and basic server logs used to operate and protect the website.
The initial free quote form is not intended for medical records or detailed sensitive medical information.
3. How we use information
We use personal information to:
- respond to an inquiry and provide the requested information;
- send or administer an intake and authorization process;
- facilitate physician matching, evaluation and physician-provided quotes;
- coordinate appointments, recovery arrangements, communication, translation and confirmed local logistics;
- maintain appropriate business and consent records;
- protect the website, prevent misuse and comply with legal obligations; and
- improve our services using aggregated or de-identified information where practical.
We do not use health information for targeted advertising.
4. Sensitive information and authorization
Information concerning health, medical history, photographs used for an evaluation and procedure interests may be sensitive personal information. Providing sensitive information is voluntary, although a physician may be unable to evaluate a request without information reasonably necessary for that evaluation.
Before Andes sends health-related or other intake information to a participating physician, clinic, recovery provider or other recipient, we will seek the authorization appropriate to the requested service. The authorization should identify the purpose of the disclosure and the types of recipients involved. You may withdraw authorization for future use, subject to information already shared or processing otherwise permitted or required by law.
5. When we disclose information
We may disclose information to:
- independent physicians and clinics for evaluation, consultation, quotation, scheduling and related communication;
- recovery centers and confirmed local providers when needed to arrange services you request;
- service providers that support website hosting, email, forms, cloud storage, security and business administration, subject to appropriate confidentiality and data-processing terms;
- professional advisers and authorities when reasonably necessary to obtain advice, protect rights, investigate misuse or comply with law; and
- a successor organization as part of a merger, financing, reorganization or transfer of the business, subject to applicable privacy requirements.
Participating physicians, clinics and recovery centers are independent businesses and may provide their own privacy notices describing how they handle information under their control.
6. International data transfers
Andes serves clients in the United States and coordinates with providers in Colombia. Information may therefore be stored, accessed or transmitted between the United States and Colombia, where privacy laws may differ. We use information only for the purposes described in this notice and take reasonable steps to use appropriate authorization, confidentiality, security and service-provider arrangements for cross-border processing.
7. Data retention and security
We retain personal information only for as long as reasonably necessary for the purposes described here, including providing requested services, maintaining consent and business records, resolving disputes, protecting users and meeting legal obligations. Retention periods vary based on the type of information and the reason it was collected.
We use reasonable administrative, technical and organizational safeguards designed to protect personal information. No email, website, storage system or transmission method can be guaranteed completely secure. Please do not send medical records or detailed health information through the public quote form or ordinary direct messages.
8. Your privacy choices
Subject to applicable law and appropriate identity verification, you may ask to:
- know whether we hold personal information about you and request access;
- correct inaccurate or incomplete information;
- delete information or revoke consent for future processing;
- receive information about how your data has been used or disclosed;
- object to or limit certain uses of sensitive information; and
- receive equal service without discrimination for exercising a privacy right.
Send requests to neil@andesconcierge.com with the subject “Privacy Request.” We may request limited information to verify your identity. Some requests may be restricted by legal obligations, security needs or information already provided to an independent recipient.
9. California residents
California law may provide rights to know, delete and correct personal information, to limit certain uses of sensitive personal information, to opt out of the sale or sharing of personal information and to receive non-discriminatory treatment. Andes does not sell personal information or share it for cross-context behavioral advertising.
The California Consumer Privacy Act applies only to businesses meeting statutory thresholds. Whether or not a particular California privacy law applies to Andes, we will make reasonable efforts to honor the privacy requests described above. California residents may use the contact method in Section 8.
10. Colombia data-protection rights
Where Colombia’s Law 1581 of 2012 and its implementing rules apply, data subjects may have rights to know, update, correct and access personal data; request proof of authorization; learn how information has been used; submit complaints; and revoke authorization or request deletion when legally permitted.
Health information is sensitive data under Colombian law. When such information is collected or processed, we will explain that authorization is voluntary, identify the sensitive information and its purpose, and request express consent where required. Requests should first be sent to Andes using the contact information in Section 8. A person may also have the right to contact Colombia’s Superintendence of Industry and Commerce after completing any required internal complaint process.
11. U.S. health privacy
Andes is a non-medical concierge and is not automatically a healthcare provider or health plan covered by HIPAA. Information submitted to Andes may therefore not receive the same HIPAA protections that apply when information is held by a covered healthcare provider. Independent physicians and clinics may be subject to different health-privacy rules.
Other federal or state consumer-health and breach-notification laws may apply depending on the information, service and location. Andes will evaluate and respond to a suspected breach in accordance with applicable notification requirements.
12. Cookies, analytics and external links
The website may use essential cookies or server logs needed for security and normal operation. At the effective date of this notice, Andes does not load advertising pixels or behavioral analytics on the public website. If analytics or advertising technology is added, this notice and any required consent choices will be updated before that technology is used.
Our website may link to independent websites and social platforms. Their privacy practices are governed by their own notices.
13. Adults only
Andes services are intended for adults age 18 and older. We do not knowingly collect personal information from children through the website. If you believe a child has submitted information, contact us so we can review and delete it where appropriate.
14. Changes to this notice
We may update this Privacy Policy when our services, providers or legal obligations change. The effective date at the top will show when the latest version became effective. When required, we will provide additional notice or request renewed authorization before using information for a materially different purpose.
15. Contact us
Andes Aesthetic Concierge
Email: neil@andesconcierge.com
Text/WhatsApp: (917) 417-1202
Website: andesconcierge.com