Privacy Notice

The party responsible for processing your personal data is SAYO CENTRO DE INVESTIGACIÓN CLÍNICA S.A. de C.V. ("Sayo Clinics"), with address at Blvd. Antonio Ortiz Mena L23, Fracc. Quintas del Sol, C.P. 31214, Chihuahua, Chih., Mexico.

The data we collect depends on the form you use.

If you fill out the form for patients or potential participants

We collect only:

• Your name.
• Your phone number.
• Your email address.
• Your city and state.
• Your age range.
• How you heard about Sayo, if you choose to share it.

At this stage we do not ask you for information about your health or any sensitive personal data. If you later take part in a study, that information is handled separately, in person, within the information and informed-consent process of each protocol, with its own explanation and protection.

For now, the form for patients or potential participants is intended only for people aged 18 or older.

If you fill out the form for sponsors, CROs, or institutional contact

We collect only:

• The name of the organization you represent.
• Your name.
• Your email address.
• The general information you choose to share in the message or description field, for example the therapeutic area, study phase, type of collaboration, or institutional need.

We ask that you not include in this form any personal data of patients, participants, third parties, or minors; sensitive medical information; clinical records; laboratory results; official identification documents; confidential protocol information; or documents subject to confidentiality, unless there is an agreement or a channel authorized by Sayo Clinics for that purpose.

We use your data for necessary purposes related to the request you send us.

For patients or potential participants

We use your data to:

• Contact you to discuss your interest in receiving information about clinical research studies.
• Confirm your interest, answer your questions, and, where applicable, explain to you in general terms whether there are open studies or future information processes.
• Keep a record of your interest and let you know when there is general information about research studies that may be of interest to you, without this implying any medical evaluation, eligibility, enrollment, or participation in a study.

For sponsors, CROs, or institutional contact

We use your data to:

• Receive and address your institutional contact request.
• Communicate with you regarding possible collaborations, site capabilities, general feasibility, operational information, or follow-up on a request related to clinical research.
• Route your message internally to the authorized Sayo Clinics personnel who can address the request.
• Keep a record of the communication for operational, administrative, or legal follow-up.

Additional purpose, only if you authorize it

If we enable a specific option for this and you authorize it, we may send you educational or institutional information about clinical research and Sayo Clinics activities.

This purpose is not necessary to address your main request. You can decline now or cancel it later, without this affecting how we handle your contact request.

Your data is processed by Sayo Clinics and by the authorized personnel involved in handling information requests, institutional contact, operational follow-up, or the management of possible clinical research processes.

We do not sell your personal data, nor do we share it with sponsors, CROs, external physicians, or other third parties for their own use without your consent or an applicable legal basis.

When you communicate on behalf of an organization, we may use your contact data to handle the institutional communication related to that organization and to follow up on the request you sent us.

To operate our website and attend to your request, we use technology providers that may take part in processing your data on Sayo Clinics' behalf, including services for website hosting, form processing, email delivery, and the receipt and storage of messages in institutional email.

These providers act as data processors and must handle the data solely in accordance with Sayo Clinics' instructions, under obligations of confidentiality and security. Some of these services may process or store information on servers located outside Mexico. In those cases, Sayo Clinics retains responsibility for the processing of your data and takes care that such providers maintain adequate protection measures.

If you take part in a specific study in the future, any exchange of information with physicians, sponsors, CROs, ethics committees, regulatory authorities, or other third parties will be explained to you separately within the corresponding process, including the informed consent of the applicable protocol.

You can ask us at any time to limit the use or disclosure of your data, or to cancel the sending of additional educational or institutional information, by writing to us at privacidad@sayoclinics.com.

Under the LFPDPPP (Mexico's Federal Law on the Protection of Personal Data Held by Private Parties), you have the right to Access your data, Rectify it if it is inaccurate, Cancel it when you consider it is no longer needed, and Oppose its use — the ARCO rights (Access, Rectification, Cancellation, Opposition). You may also withdraw, at any time, the consent you have given us.

To exercise these rights or withdraw your consent, write to us at privacidad@sayoclinics.com. We will respond to your request within a maximum of 20 business days from the date we receive it. If the request is well founded, we will give effect to the right within the following 15 business days.

We keep your data for as long as the purpose for which you shared it with us remains in effect, or until you ask us to cancel it, unless there is a legal, administrative, contractual, or liability obligation that justifies keeping it for longer.

In the case of patients or potential participants, if there is no contact and no applicable study for you for 12 months, we review and purge your information.

In the case of sponsors, CROs, or institutional contacts, we keep the communication for as long as necessary to follow up on the request, evaluate the possible institutional relationship, comply with applicable obligations, or document the corresponding operational management. If there is no active follow-up for 12 months, we review and purge the information, unless there is a legal, contractual, or administrative reason to keep it for longer.

Our site uses only cookies or technologies strictly necessary for its functioning, security, and operation. We do not use advertising cookies, commercial tracking, or analytics tools to profile your browsing.

For technical and security reasons, the site or its technology providers may generate basic technical records, such as IP address, browser type, date and time of access, technical errors, or security events. These records are used solely to maintain the functioning, security, and integrity of the site.

If we incorporate analytics, advertising, tracking, or similar technologies in the future, we will update this privacy notice before using them.

If we change this notice, we will publish the updated version on our website and indicate the date of the change.

What you are agreeing to

By checking that box, you agree to be contacted by the Sayo Clinics team to follow up on your interest in receiving information about clinical research studies.

Who contacts you and how

We may contact you by phone, email, or message — directly through our team or through operational communication tools used by Sayo Clinics. The purpose is to confirm your interest, answer general questions, and, where applicable, share general information with you about current or future studies.

What it does NOT mean

Agreeing to be contacted does not enroll you in a study, is not a medical evaluation, does not confirm eligibility, and does not imply any commitment to take part. It may also be the case that, at this time, there is no information about studies related to your interest.

If the possibility of taking part in a specific study should arise later on, the corresponding process will be explained to you separately, in person and through the informed consent of the applicable protocol. Taking part, if the time comes, will always be your decision.

It is voluntary and you can withdraw it

You give this consent freely, and you may withdraw it whenever you wish, without consequences, by writing to us at privacidad@sayoclinics.com. If you withdraw it, we will stop contacting you for these purposes.

Your data

The use and protection of your data for this contact are governed by this Sayo Clinics Privacy Notice.