Legal document

Privacy notice

Last updated: 24 August 2026

This notice explains what personal data I collect, what I use it for, who I share it with, and how you can control it. It is written in line with Mexico's Federal Law on Protection of Personal Data Held by Private Parties, which governs this practice.

1 · Who is responsible for your data

Carlos Zamora, sports physical therapist and personal training specialist, trading as Mr. Wellness, is the controller of your personal data.

Address

Gobernador Fagoaga 85, Col. San Miguel Chapultepec, Miguel Hidalgo, C.P. 11850, Mexico City, Mexico.

Email

carlos__zamora@hotmail.com

Phone

+52 55 5272 8166

WhatsApp

+52 55 6962 9713

You can use any of these channels for matters relating to this notice, including exercising your rights.

2 · What personal data I collect

This website has no forms and collects nothing on its own. The data I hold is what you choose to give me when you contact me through one of these channels:

By WhatsApp

Your phone number, your name or alias, your profile photo if public, and the content of the messages you send.

When booking on Calendly

Your name, email address, the time zone you book from, and anything you write in the comments field.

During a consultation or programme

Age, weight, height, injury history, relevant medical conditions, medication if you mention it, activity level, goals, and any videos of your technique you send me.

If you join the community

Your profile details on the messaging platform and whatever you post in the groups.

I do not collect data from minors. If you are under 18, I need consent from your parent or guardian before working with you.

3 · Health data: express consent

Information about your health, injuries, pain and medical conditions is classed under Mexican law as sensitive personal data. That means it gets reinforced protection and I may only process it with your express consent.

I will ask for that consent in writing before starting any assessment or programme. You can refuse or withdraw it at any time; if you do, I will not be able to design a plan adapted to your condition, because doing so without knowing your history would be reckless.

This data is never shared for commercial, advertising or marketing purposes, and never sold to anyone, under any circumstances.

4 · What I use your data for

Necessary purposes, without which I cannot provide the service:

• Assessing your situation and designing a programme suited to your body and your history.
• Tracking your progress and adjusting training load.
• Contacting you to schedule, confirm or change sessions.
• Issuing receipts and keeping administrative records of payments.
• Meeting legal obligations that apply to me.

Additional purposes, which you can decline without affecting the service:

• Sending you the community's monthly newsletter.
• Telling you about new courses or programmes.
• Using your testimonial or images in promotional material — only with your separate, express authorisation, never by default.

To decline any additional purpose, just tell me on WhatsApp. No explanation needed.

5 · Who I share your data with

I do not sell, rent or trade your personal data. I use these services to operate, and they process data on my behalf:

WhatsApp

Messaging. Messages are end-to-end encrypted. Meta Platforms processes metadata under its own policy.

Calendly

Video consultation scheduling. Receives your name, email and time zone.

Google

Calendar for scheduling, Meet for video calls, and Drive to host plans and materials.

GitHub Pages and Cloudflare

Hosting and delivery of this site. They log IP address and technical connection data for security and statistics.

Payment processor

Handles membership charges. I never see or store your card details.

Some of these providers are outside Mexico, so your data may be transferred abroad. By engaging the service or joining the community you accept that transfer, which is limited to what is needed to operate.

I may also disclose data if a competent authority legally requires it, or if it were essential to deal with a medical emergency threatening your life or health.

6 · Your rights: Access, Rectification, Cancellation and Objection

At any time you can ask me to:

• Access. Tell you what data of yours I hold and what I have done with it.
• Rectify. Correct anything wrong or incomplete.
• Cancel. Delete what is no longer needed.
• Object. Stop using it for a specific purpose.

You may also withdraw your consent at any time.

To exercise any of these rights, email me at carlos__zamora@hotmail.com or message me on WhatsApp at +52 55 6962 9713, stating your name, which right you want to exercise and over which data. I will reply within a maximum of 20 business days, and where applicable will act on it within the following 15 business days.

Note that some data I must keep by legal obligation — tax records, for example — even if you ask me to delete it. In that case I will explain which data and for how long.

If you believe your request was not handled properly, you may bring the matter before the Secretaría Anticorrupción y Buen Gobierno, which under the 2025 law is Mexico.s authority for personal data held by private parties, replacing the former INAI.

7 · How I protect your data and how long I keep it

I apply reasonable measures to protect your information: access restricted to me alone, accounts secured with passwords and two-step verification, and encryption in transit on the site and in messaging.

I keep your data for as long as our professional relationship lasts, and afterwards for the period required by tax and professional liability obligations. After that, I delete it.

No system is infallible. Should a breach occur that significantly affects your data, I will tell you without delay so you can take action.

8 · Cookies and tracking

This site sets no advertising, tracking or profiling cookies. There are no social media pixels and no advertising analytics tools.

The network provider (Cloudflare) may set strictly technical cookies needed for site security and operation. Your browser also stores your language preference in your own device's local storage; that never leaves your device and never reaches me.

External services I link to — WhatsApp, Calendly, YouTube — have their own cookie policies, which apply once you leave this site.

9 · Changes to this notice

I may update this notice when my services, providers or applicable law change. The version in force is always the one published on this page, with its update date shown at the top. If a change is substantial, I will announce it in the community.