Published in compliance with Articles 15, 16, 17 and 18 of the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — "LFPDPPP") and its Regulations. This English version is provided for the convenience of English-speaking users; a Spanish version is available on request and governs in case of conflict.
The data controller (responsable del tratamiento) is Corp 001 (RFC CUN1905221K7), with domicile at Carretera Libre Tijuana–Ensenada 3009, Local 2, Colonia Playa Encantada, Playas de Rosarito, Baja California, C.P. 22713, México (hereinafter "we," "us," or "Corp 001"). This notice covers personal data collected through the website norditropin.mx.
Corp 001 collects the following categories of personal data through this website:
Sensitive personal data. This website does not collect sensitive personal data within the meaning of Article 3, section VI of the LFPDPPP. Specifically, this website does not collect health, biometric, genetic, sexual orientation, religious, political, racial, or financial data. Such data is only collected — where strictly necessary and with your express consent — by our affiliated pharmacy at hghmexico.mx, which publishes its own separate privacy notice.
We do not process your personal data for secondary purposes such as marketing, profiling, behavioral advertising, or commercial communications unrelated to a direct inquiry from you. Should we wish to process data for a new purpose in the future, we will update this notice and, where required by law, obtain your consent.
Corp 001 does not sell your personal data. We may transmit limited technical data to the following categories of service providers, each bound by confidentiality and contractual data-protection obligations consistent with Articles 36 and 37 of the LFPDPPP:
These transfers do not require your consent under Article 37 of the LFPDPPP because they are either necessary for the maintenance of the legal relationship between you and Corp 001 or required by law.
Under Articles 22–26 of the LFPDPPP, you have the right to:
To exercise these rights, send a written request by email to [email protected] (or by post to the domicile above, marked for the attention of the Data Protection Officer). Your request must include:
We will respond within the statutory periods (twenty business days to communicate our determination; a further fifteen business days to make the change effective). If you are not satisfied with our response, you have the right to file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) — home.inai.org.mx.
Where processing is based on your consent, you may revoke that consent at any time by the same means described in Section 5. Revocation does not affect the lawfulness of processing prior to the revocation, and it does not preclude ongoing processing for purposes that do not require consent under the LFPDPPP (e.g., legal compliance).
You may request that we limit the use or disclosure of your personal data by writing to the same address. We maintain an internal register of personal data for which use has been limited; data subject to limitation will not be used for promotional communications.
This website uses only strictly necessary cookies and similar technologies required for the site to function (for example, a session identifier during your visit). We do not set third-party advertising cookies, tracking pixels, analytics cookies, social-network embeds, or profiling technologies. You may configure your browser to refuse or delete cookies; doing so should not impair the essential functions of this website.
We do not subject you to decisions based solely on automated processing that produce legal effects concerning you.
Server connection logs are retained for no more than 90 days for security and diagnostic purposes, after which they are deleted or irreversibly anonymized. Contact inquiries are retained only for as long as needed to respond and for a reasonable period thereafter for record-keeping.
We may update this Aviso de Privacidad to reflect changes in our practices or applicable law. The most recent version will always be published at norditropin.mx/privacy, with the "Last updated" date at the bottom of this page. For material changes, we will post a prominent notice on the home page for a reasonable period.
Data Protection Officer (Responsable de Protección de Datos Personales)
Corp 001
Email: [email protected]
Postal: Carretera Libre Tijuana–Ensenada 3009, Local 2, Playa Encantada, Playas de Rosarito, B.C., 22713, México
Last updated: 2026-04-23 · Governing language: Spanish. In case of discrepancy between the Spanish original and this English translation, the Spanish version prevails.