Privacy notice

Last updated: October 23, 2026

Irma R. de la Mora (hereinafter, "the Controller") is committed to protecting the privacy and personal data of those who visit this website and of her patients, in accordance with applicable Mexican law and international data protection best practices.

1. Controller of your personal data

Irma Guadalupe Rodríguez de la Mora, professionally known as Irma R. de la Mora, a psychotherapist with a practice in Mexico City, is responsible for the use and protection of your personal data. You can reach her at irma@irmardelamora.com.

2. Applicable legal framework

In Mexico, the processing of your personal data by private parties is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations, which apply nationwide, including Mexico City, and by any provisions that may replace or supplement them. Following the 2025 administrative reform, certain powers previously exercised by INAI were reassigned to the competent federal authority; this notice will be updated as the regulatory framework evolves.

If you are located outside Mexico, you may also have additional rights under the data protection laws of your country or region (for example, the General Data Protection Regulation —GDPR— in the European Union, or equivalent laws elsewhere). Although the primary legal framework governing this website and the clinical practice is Mexican law, we seek to align our practices with international data protection standards and will address in good faith any reasonable request regarding your data, wherever you are located.

3. Personal data we collect

Depending on how you contact us, we may collect: your name, email address, phone or WhatsApp number, and the content of your messages. If you become a patient, we may also collect data related to your therapeutic process, including information about your emotional and psychological health.

4. Sensitive personal data

Information about your physical and mental health generated during the therapeutic process is considered sensitive personal data under Mexican law. This data receives a higher level of protection: it is collected only with your express consent (verbal or written, depending on the medium), is limited to what is necessary for the therapeutic work, and is kept under strict confidentiality and professional secrecy.

5. Purposes of processing

We use your data to: (a) respond to your contact or information request; (b) schedule, confirm and follow up on sessions; (c) provide psychotherapy services, in person or online; (d) keep the minimum necessary record of the therapeutic process; and (e) comply with applicable legal or tax obligations. We do not use your data for marketing purposes without your additional consent, and we do not sell it or share it with third parties for commercial purposes.

6. Confidentiality and professional secrecy

Everything shared during the therapeutic process is treated with strict confidentiality, in accordance with the ethical code of psychotherapy. Confidentiality may only yield to the exceptions provided by law: serious and imminent risk to your life or to that of others, an order from a competent authority, or other legally established causes.

7. Transfers and processors

We do not transfer your personal data to third parties for purposes other than those described here. To operate the website and the scheduling process we use technology providers that act as data processors, who process your data only according to our instructions and their own privacy policies:

Web3Forms, a form-delivery service: when you use the contact form, your name, email address and message are transmitted through this service so that they can be delivered to the Controller by email.
DreamHost, the website hosting provider, and Bunny.net, a content delivery network (CDN) that serves the website's images: as part of the normal technical operation of any website, they may record technical connection data, such as your IP address.
Where applicable, secure video-call platforms for online therapy.

Some of these providers may process data on servers located outside Mexico, for example in the United States. By using the contact form you accept this transmission, which is necessary to attend to your request.

8. Security measures

We implement reasonable administrative, technical and physical measures to protect your personal data against damage, loss, alteration, and unauthorized access or use, including the use of an encrypted connection (HTTPS) on this website.

9. ARCO rights and withdrawal of consent

You have the right to Access, Rectify and Cancel your personal data, to Object to its use for specific purposes (ARCO rights), and to withdraw at any time the consent you have given. To exercise these rights, write to irma@irmardelamora.com stating your request; we will reply within a reasonable time, as the nature of the request allows.

10. Data retention

We keep your data only for as long as necessary to fulfil the purposes described in this notice and the applicable legal obligations, after which it will be securely deleted or anonymized.

11. Cookies and tracking technologies

As of this update, this website does not use third-party analytics or advertising cookies, and its fonts are served from the site itself. If an analytics or measurement tool is added in the future, this notice will be updated and, where the law requires, your prior consent will be requested.

12. Minors

The services described on this website are intended for adults. Where care is provided to minors, it is done only with the knowledge and express consent of a parent or legal guardian.

13. Changes to this notice

This privacy notice may be updated to reflect changes in our practices or in applicable law. The current version will always be available on this page, with the date of its last update.

14. Contact

If you have questions about this privacy notice or the processing of your personal data, write to us at irma@irmardelamora.com.