Updated October 22, 2026. This policy explains what personal data is collected on this website, at the office and in the internal tool THE GRID, what it is used for and what rights you have over it. It is governed by Ley 1581 de 2012 (Colombia's personal data protection law), Decreto 1377 de 2013 (its implementing regulation) and Colombian regulations on medical records. This English version is a translation provided for convenience; if it differs from the Spanish version, the Spanish version prevails.
1. Data controller
Luis Alberto Parra, physician, with an office at Calle 85 # 50 – 159, Quantum Tower, oficina 1405, Barranquilla, Colombia. Email for personal data matters: contacto@drluisalbertoparra.com.
2. What data is collected and where
On this website. The consultation request form collects your name, phone number and email address, along with the page from which you sent it and the date. The reason for your visit and the message are optional: they are only enabled and sent if you expressly authorize sharing health information. You can request a consultation without providing that information. The newsletter form collects your email address with a separate authorization for that subscription. The authorizations you choose are included in the request with their date and version. This data goes to an automation tool managed by the office team and is used only to contact you. The site does not use user accounts or profiles.
At the office. If you are a patient, your medical record (identification, contact and health data, and clinical photographs) is collected during the consultation, with your informed consent, and kept in accordance with Resolución 1995 de 1999 and Ley 2015 de 2020. The medical record is confidential: only the treating physician and authorized staff can see it, and it is released to third parties only in the cases permitted by law.
In THE GRID. THE GRID is a private program that runs on the doctor's computer and connects, in read-only mode, to Google accounts whose owner expressly authorizes it on Google's consent screen. With that authorization it reads Gmail messages, Google Drive files and Google Calendar events from that account. More details in section 4.
3. What it is used for
To respond to your appointment request and coordinate the consultation; to provide medical care and keep the medical record; to send you the newsletter if you subscribed; to comply with legal, accounting and health obligations; and, in the case of THE GRID, to organize the correspondence, documents and schedule of the office, of the doctor's teaching and of the scientific society he chairs. The data is not used for third-party advertising and is not sold.
4. Data obtained from Google
The use and transfer to any other app of information that THE GRID receives from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Google data is used only for the functions described on the THE GRID page: finding and organizing emails, documents and appointments from the authorized account.
- It is stored only on the doctor's computer, in private folders that are not published or uploaded to third-party services.
- It is not transferred to anyone, unless required by law.
- It is not used to serve advertising or to assess creditworthiness, and it is not sold to data brokers.
- Only the doctor, as owner of the tool, reads it. No one else has access.
The tool requests read-only permissions only. It cannot send emails, or delete, move or modify messages, files or events. You can revoke the permission at any time at myaccount.google.com/permissions; once you revoke it, the tool immediately loses the ability to read the account, and any data already copied is deleted if you request it at the email address in section 1.
5. How long it is kept
Contact data from the form: for as long as our relationship with you lasts and up to five years after the last communication. The medical record: for the period set by Ley 2015 de 2020 and Resolución 1995 de 1999. Google data read by THE GRID: for as long as the account owner maintains the authorization and the information remains useful to the office; it is deleted at the owner's request.
6. Who it is shared with
With office staff who need to contact you or care for you. With providers that deliver technical services and process the data only on the office's behalf: the hosting of this website, the automation tool that receives the forms and, in the case of THE GRID and of the site analytics described in section 10, Google. With authorities, when required by law. With no one else.
7. Your rights
You can access, update, correct and delete your data, request proof of the authorization you gave, revoke it and file complaints with the Superintendencia de Industria y Comercio (Colombia's data protection authority). Write to contacto@drluisalbertoparra.com with your name, your request and a way to contact you; you will receive a response within the time limits of Ley 1581 de 2012 (ten business days for inquiries and fifteen for claims). Deletion does not apply to the medical record while the law requires it to be kept.
8. Security
Data is protected with passwords, encryption in transit and restricted access. The computer on which THE GRID runs is encrypted and password-protected, and its backups are also encrypted.
9. Minors
This site is not directed at minors. A minor's data is processed only at the office, with the authorization of their legal representative.
10. Cookies and analytics
This website uses Google Analytics, a Google service, to understand how the site is used: which pages are visited and how people navigate them, clicks on the WhatsApp button and on the phone number, and the submission of a form, with its type (appointment request or newsletter). The content of the forms, such as your name, phone number or reason for consultation, is not sent to Google.
Google Analytics loads only if you click "Accept" in the cookie notice. If you click "Decline" or do not respond, it does not load and no analytics cookies are set. Your choice is stored in your own browser, not on a server. When Google Analytics loads, Google is asked to anonymize your IP address.
You can change your choice at any time with the "Cookie preferences" link at the bottom of the site's pages, which shows the notice again. You can also clear this site's data in your browser settings.
11. Changes
If this policy changes, the new version will be published here with its effective date. If the change affects how data obtained from Google is used, the owner of the authorized account will also be notified.