Fundación Lumenia, A.C.
Comprehensive privacy notice
Last updated: October 5, 2026
This English version is provided for your convenience. In case of any discrepancy, the Spanish version, which is the legally binding document, shall prevail. Spanish version
At Fundación Lumenia, A.C. we know that seeking help for an addiction, whether your own or a loved one’s, requires trust. That is why we handle your information confidentially and in accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties, the "Law"). This notice explains what data we collect through our website, our WhatsApp and telephone lines, and our donation and payment channels; what we use it for; and how you can exercise your rights.
1. Who is responsible for your data
Fundación Lumenia, A.C. ("Lumenia"), with its address at Miguel Hidalgo y Costilla 1142, Col. Mirador, C.P. 64070, Monterrey, Nuevo León, Mexico, is the data controller responsible for the processing of your personal data.
- Email for privacy matters: hola@lumenia.org
- Website: https://lumenia.org
- Phone / WhatsApp: +52 81 1805 4988
2. What personal data we collect
We collect only the data that is necessary, depending on how you contact us:
| When | Data |
|---|---|
| Contact form or assessment request form | Name, phone number, email address, city, relationship to the person you are inquiring about (if applicable), preferred contact time and the message you write to us. |
| WhatsApp and phone calls | Phone number, profile name, and the content of the messages, voice notes or files you share with us. |
| Online donations and payments | Name, email address, phone number, amount, date and purpose. If you request an invoice or a tax-deductible receipt: RFC (Mexican taxpayer ID), name or corporate name, tax regime, postal code and tax address. In the cases set forth by the law against transactions involving funds of illicit origin, also an official ID and additional information. |
| Browsing the website | IP address, device and browser type, pages visited, time spent on the site and data obtained through cookies (see section 8). |
Sensitive personal data. Given the nature of our services, when you contact us you may share information about substance use, physical or mental health, previous treatment or family circumstances, whether your own or another person’s. This data is considered sensitive. We will process it only with your express written consent, which you give by sending us, via WhatsApp, the message generated by our form or our tests, which includes your acceptance of this notice, or by confirming it in writing on WhatsApp. We ask that you share only what is necessary for us to guide you. Clinical details are collected later, in person, as part of the assessment process.
Financial data. Payment data requires your express consent, which you give by completing the payment. Lumenia does not receive or store your card numbers: they are processed directly by our payment provider, Banorte, under its own security standards.
Data about other people. If you share information about a family member or another person with us (for example, the person you would like to receive treatment), you represent that you are doing so in order to seek help for them and that you have their authorization or the legal authority to do so. We receive data about minors only from their mother, father or legal guardian.
3. What we use your data for
Primary purposes (without them we cannot assist you):
- To answer your questions and provide initial guidance about our services.
- To contact you to schedule a call, appointment or assessment.
- To assess whether our programs are suitable for the case or, if they are not, to refer you to another institution.
- To process donations and payments and to issue tax receipts.
- To comply with legal obligations: tax, health and anti–money laundering (prevention of transactions involving funds of illicit origin).
- To maintain the security of the website and prevent fraud.
Secondary purposes (not necessary, and you may refuse them):
- To send you blog content, newsletters and resources for families.
- To invite you to Lumenia workshops, groups or events.
- To conduct satisfaction surveys.
- To measure website usage and show you Lumenia ads on other platforms, only if you accept analytics or advertising cookies.
If you do not want us to use your data for these secondary purposes, leave the corresponding checkbox on the form unchecked, reject optional cookies or write to us at hola@lumenia.org at any time. Refusing does not affect the care we provide to you.
4. Who we share your data with
We do not sell or rent your data. We share it, without requiring your consent, only in the cases permitted by Article 36 of the Law:
| Recipient | Reason |
|---|---|
| Servicio de Administración Tributaria (SAT, Mexico’s Tax Administration Service) | Issuing tax receipts and complying with tax obligations. |
| Health authorities (Secretaría de Salud [Ministry of Health], CONASAMA [National Commission for Mental Health and Addictions], COFEPRIS [Federal Commission for the Protection against Sanitary Risks], Secretaría de Salud de Nuevo León [Nuevo León State Ministry of Health]) | When required by law or by a competent authority. |
| Health institutions or emergency services | When necessary for medical care, diagnosis or an emergency that endangers life or health. |
| Judicial or administrative authorities | Pursuant to a duly founded and reasoned order, or to comply with a legal obligation. |
We also use service providers that process data on Lumenia’s behalf and under its instructions, subject to confidentiality obligations: web hosting, email, WhatsApp Business (Meta), payment gateway (Banorte) and analytics tools. These providers may not use your data for their own purposes other than providing their services to us.
5. How to limit the use or disclosure of your data
- Ask us to add you to our internal exclusion list by writing to hola@lumenia.org, so that you do not receive additional communications.
- Unsubscribe using the link included in every email or newsletter, or reply "BAJA" (unsubscribe) on WhatsApp.
- Configure or reject optional cookies through the website banner or your browser.
- Register with Profeco’s Registro Público para Evitar Publicidad (REPEP, the Federal Consumer Protection Agency’s Public Registry to Avoid Advertising).
6. Your ARCO rights and revocation of consent
You have the right to Access your data, to Rectify it if it is inaccurate, to Cancel it when you consider that it is not required for any purpose, and to Oppose its use for specific purposes (ARCO rights: Access, Rectification, Cancellation and Opposition). You may also revoke the consent you gave us, without retroactive effect. Revocation does not apply where a legal obligation requires us to retain the data.
To exercise these rights, send a request to hola@lumenia.org with the subject line "Derechos ARCO" (ARCO rights), including:
- Your full name and a means for us to respond to you.
- A copy of an official ID and, if you are acting on behalf of another person, the document evidencing your authority to represent them.
- A clear description of the data and the right you wish to exercise.
- Any document that helps locate your data. If you are requesting a rectification, state the correction and attach the supporting document.
We will respond within a maximum of 20 days from receipt of your request. If the request is granted, we will give effect to it within the 15 days following our response. The procedure is free of charge; only shipping or copying costs may be charged.
If you believe your rights have not been respected, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the authority responsible for the protection of personal data held by private parties.
7. How long we keep your data
- Contact and guidance data that does not lead to a service: up to 12 months after the last contact. It is then deleted.
- Tax and donation data: for the period required by tax regulations (at least 5 years).
- If you enter one of our programs, your information becomes part of your clinical record, which is governed by NOM-004-SSA3-2012 (the Mexican Official Standard on clinical records) and by the patient privacy notice you will receive at that time.
8. Cookies and tracking technologies
Our website uses cookies, small files stored in your browser:
| Type | Purpose | Can it be rejected? |
|---|---|---|
| Necessary | Basic functionality, security and remembering your cookie preferences. | No, because the website does not work without them. |
| Analytics [Google Analytics] | Knowing, statistically, how many people visit the website and which pages they view. | Yes. They are only activated if you accept them. |
| Advertising [Meta Pixel / Google Ads] | Measuring our campaigns and showing Lumenia ads on other platforms. | Yes. They are only activated if you accept them. |
These technologies may collect your IP address, browser and device type, pages visited, time of visit and the website you came from. We do not send third parties the content of forms or any information revealing that you are seeking treatment. You can change your choice at any time through the "Cookie preferences" link in the website footer, or disable cookies in your browser settings.
9. How we protect your data
We apply administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use: encrypted connection (HTTPS), access restricted to the staff who need it, confidentiality and professional secrecy obligations, and contracts with our service providers. If a security breach occurs that significantly affects your rights, we will inform you without delay.
10. Changes to this notice
We may update this notice due to changes in the law, in our services or in our practices. The current version will always be available at https://lumenia.org/aviso-de-privacidad (English courtesy translation at https://lumenia.org/en/privacy-notice), with its last-updated date.
11. Consent
By sending us, via WhatsApp, the message generated by our form or our tests, which includes your acceptance of this notice, by making a donation or payment, or by confirming in writing on WhatsApp, you give your express consent to the processing of your data, including sensitive and financial data, in accordance with this notice.