Privacy Notice
Protection of Personal and Sensitive Data (Law 8968 - Republic of Costa Rica)
Last updated: June 29, 2026
1. Data Controller Identity
For the purposes of the Law on the Protection of Individuals regarding the processing of their personal data (Law N° 8968), the data controller of the automated database is North Pacific Clinic (Dr. Diego Vernava), with legal domicile at Royal Palms Plaza, Tamarindo, Guanacaste, Costa Rica. For any inquiries or clarifications regarding the privacy of your clinical information and the safeguarding of your medical records, you may communicate directly with our institutional email: info@northpacificdental.com.
2. Categories of Collected Data
In the execution of our advanced dental practice and integrative biological medicine, we collect and process the following categories of data:
-
✓
Personal and Contact Data: Full name, identification number (cédula/passport), phone number, country of residence, and email address, processed strictly for administrative, billing, and logistical scheduling purposes.
-
✓
Sensitive Health Data (Clinical Record): Systemic medical history, pathological diagnoses, computer-guided X-rays, 3D cone-beam tomographies, intraoral photographic records, and reconstructive treatment plans. These data points are managed under the strictest professional secrecy and medical guild confidentiality.
3. Purpose of Data Processing
We process the information provided by patients exclusively for the following legitimate purposes:
- Developing high-precision clinical diagnoses, digital smile designs, and executing maxillofacial restorative surgeries.
- Optimizing the appointment schedule, managing automated control reminders, and processing accounting and service billing.
- Ensuring strict compliance with current sanitary regulations and audits dictated by the Ministry of Health of Costa Rica.
4. Security, Encryption, and Data Transfer
North Pacific Clinic does not sell, rent, or share your medical data with third parties unrelated to your treatment under any circumstances. The partial transfer of medical information will be carried out solely and exclusively when strictly necessary for: high-precision dental laboratories (manufacturing of prostheses and zirconia crowns), associated consulting medical specialists, or government regulatory bodies under legal mandate. All information is stored on cloud servers encrypted under rigorous IT security layers that comply with global data protection standards.
5. ARCO Rights
As the legitimate owner of your information, you possess the inalienable right to control the use of your personal data by exercising your constitutional rights of:
To exercise any of these legal prerogatives, please direct a formal, signed digital request to our customer care email address.