At Radiant Skin we look after your information with the same care we give your skin. This policy explains what personal data we collect, how we use it and how you can exercise your rights under Colombian Law 1581 of 2012 and Decree 1074 of 2015.
Last updated: October 15, 2026. The Spanish version prevails in case of discrepancy.
Data controller
The controller of your personal data is RADIANT SKIN MEDICINA ANTIENVEJECIMIENTO SAS, tax ID (NIT) 901963912-2 (“Radiant Skin”), located at Cl. 113 #7-21, Torre A, Of. 910, Teleport Business Park, Usaquén, Bogotá D.C., Colombia.
Personal data contact: WhatsApp and phone +57 314 240 7034, or in person at our clinic, Monday to Friday 8:00–17:00 and Saturday 8:00–15:00.
Data we collect
Depending on how you interact with us, we may process:
- Identity and contact data: name, mobile number, email and ID or passport number.
- Request details: treatment of interest, scheduling preferences and the messages you send us on WhatsApp or through the website forms.
- Health data (sensitive data): medical history, medical assessment, informed consents, clinical record and before-and-after clinical photos.
- Payment and billing data: deposits, payment methods and the details needed for the electronic invoice.
- Acceptance record: when you accept our terms and conditions we keep the acceptance code, date, time, document version and browser used.
- Browsing data: as described in our Cookie policy.
We never sell or rent your personal data.
Purposes
We use your data to:
- Answer your questions and book, confirm or reschedule your consultation and treatments.
- Provide the medical service: assessment, procedure, follow-up visits and monitoring of your results.
- Keep and safeguard your clinical record, as required by law.
- Manage deposits, payments, invoicing and the application of our terms and conditions.
- Send you appointment reminders and before- and after-care instructions.
- Send you information about treatments, campaigns and offers, only if you agree. You can ask us to stop at any time.
- Handle requests, complaints and claims, and comply with legal, accounting and tax obligations.
Sensitive and health data
Data about your health is sensitive data. Therefore:
- You are not required to answer questions about sensitive data; however, health information is necessary to assess whether a procedure is safe for you.
- We process it only with your express authorization and for medical and patient-safety purposes.
- Your clinical record is private and confidential: only the healthcare team treating you and persons or authorities permitted by law can access it.
- Your before-and-after photos are used for advertising or social media only with your express written authorization. You can revoke it at any time.
Our procedures are offered to adults. If, exceptionally, we process data of a minor, we do so with the authorization of their legal representative and in their best interest.
Your rights
As the data subject you have the right to:
- Access, update and correct your personal data.
- Request proof of the authorization you gave us.
- Be informed about how we have used your data.
- File complaints with the Superintendence of Industry and Commerce (SIC) after completing the request or claim process with Radiant Skin.
- Revoke your authorization or request deletion of your data when there is no legal or contractual duty to keep it (for example, clinical records must be kept for the period set by law).
- Access your personal data free of charge.
How to exercise your rights
Send your request by WhatsApp to +57 314 240 7034 or deliver it at our clinic, including your full name, ID number, a contact method and a description of your request. If you act on behalf of someone else, attach proof of authority.
- Inquiries: answered within ten (10) business days, extendable by five (5) more business days with notice.
- Claims (correction, update, deletion or breach): answered within fifteen (15) business days, extendable by eight (8) more business days with notice.
If a claim is incomplete, we will ask you to complete it within five (5) business days. If two (2) months pass without a reply, the claim will be deemed withdrawn.
Who we share your data with
We may share your data with providers who help us deliver the service and act as data processors under confidentiality and security agreements: web hosting (HostGator), messaging (WhatsApp, by Meta Platforms), Google tools and electronic invoicing and payment providers.
Some of these providers may store information outside Colombia. In those cases we require adequate levels of protection, as required by law. We will also disclose information to authorities when required by law or court order.
Security and retention
We apply reasonable technical, human and administrative measures to protect your data against loss, unauthorized access, use or consultation.
We keep your data for as long as needed for the purposes described and for the periods required by law. Clinical records are kept for the period set by current health regulations. Contact data used for marketing is kept until you ask us to delete it.
Authorization and validity
By messaging us, filling in a form, accepting our terms or signing the informed consent, you authorize us to process your data under this policy. For sensitive data we always ask for express authorization.
This policy is in force from October 15, 2026. If we make substantial changes, we will publish them on this page and, where applicable, ask for a new authorization.