Privacy Policy

Effective date: October 1, 2026
Last updated: October 1, 2026
Website: https://transcendibogaine.com and https://transcendclinic.com (and related Transcend Clinic / Transcend Ibogaine pages)

Not for emergencies. Our website, forms, chat, LISA (our AI assistant), email and text messages are not monitored for emergencies and are not a substitute for medical care. If you are having a medical emergency, call 911 (in the United States or Mexico). If you are in crisis or thinking about harming yourself, call or text 988 (Suicide and Crisis Lifeline, United States).

1. Who we are

This Privacy Policy describes how TRANSCEND CLINIC CANCUN S DE RL DE CV, which operates the Transcend Ibogaine and Transcend Clinic website and clinic (“Transcend,” “we,” “us”), handles personal information collected through our website, inquiry and contact forms, our AI assistant LISA (web chat and phone), phone/WhatsApp, email, text messages, and related intake and marketing communications.

Data controller. TRANSCEND CLINIC CANCUN S DE RL DE CV, Calle Laureles, Mz 37, Lt 2-02, SM 311, Benito Juarez, Cancun, Quintana Roo 77560, Mexico, is the operator of the website and the data controller (in Mexico, the “responsable”) of your personal information under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, the “LFPDPPP”). A Spanish-language Aviso de Privacidad (privacy notice) will also be made available.

We operate a medically supervised ibogaine treatment program in Cancún, Mexico. This policy covers our website and inquiry / intake and marketing communications. Clinical records for admitted patients are also governed by the clinic’s medical and facility policies and by applicable law.

2. Information we collect

Depending on how you contact us, we may collect:

• Identity and contact data: name, email, phone, WhatsApp, city/country, postal address, preferred contact method
• Inquiry and health-related intake data you choose to share (substances used, medical history, medications, goals, family-contact details) so our team can assess whether a consultation or program may be appropriate
• Communications data: the content of your messages, web chats, emails and texts with us, and recordings and transcripts of calls and chats (see Section 2.2)
• Travel and logistics data if you move toward a reservation (flight timing, pickup needs, companion info)
• Payment-related data needed to process deposits or program fees (processed by our payment partners; we do not ask you to email full card numbers)
• Technical data: IP address, browser/device type, device and cookie identifiers, pages viewed, referring URL, and similar logs, cookies and pixels used to run, secure, measure and market the site (see Sections 2.3 and 2.4)
• Visitor identification data: for some US visitors, name, email address, postal address and related details that third-party data partners match to a website visit (see Section 2.4)
• Marketing preferences: your consent, unsubscribe and opt-out choices, and how you interact with our emails and texts

We do not require you to create a public account to browse the site.

2.1 Contact and inquiry forms

When you fill out a contact, inquiry, consultation or Prescreening form, we collect the information you enter, such as your first and last name, email address, phone number and your message, plus the date and time, the page you submitted from and your consent choices. We use it to respond to you, to schedule a consultation, and, as described in Section 3.1, to send you information about our programs. Please share only the health information needed for us to respond; our team will ask for more during intake if it is needed.

2.2 LISA, our AI assistant (web chat and phone)

LISA is an automated artificial intelligence (AI) assistant that answers questions on our website chat and on our phone line. LISA is not a person and does not give medical advice.

• What LISA collects. When you chat with or call LISA, we collect your name, email address and phone number when you provide them, your caller ID or phone number, the content of the conversation, and the date, time and duration.
• Recording and transcription. Calls and chats with LISA and with our staff may be recorded, monitored and transcribed. Recordings, transcripts and chat logs are stored with our service providers and in our CRM.
• How we use it. We use this information to answer your questions, route your inquiry to our team, follow up with you, keep records, train staff, improve LISA’s answers and our service, and send you information about our programs as described in Section 3.1.
• Service providers. LISA, our web chat and our phone system are operated by third-party service providers on our behalf, which may use AI to process the conversation.
• Your choice. If you do not want to be recorded or to talk with an AI assistant, you can end the chat or call and email us at support@transcendclinic.com instead, or ask to speak with a member of our team.

2.3 Cookies, pixels and device data

Like most websites, we and our service providers use cookies, pixels (also called tags or web beacons), scripts and similar technologies. A cookie is a small file stored by your browser. A pixel is a small piece of code on a web page that sends information to us or a provider when the page loads. These tools collect technical data such as IP address, device and browser type, screen size, cookie and device identifiers, pages and page titles viewed, time on page, referring URL, and the links you click.

We group these tools into categories:

• Strictly necessary: needed to run and secure the site and remember your cookie choices. These are always on.
• Analytics: help us understand how the site is used (for example Google Analytics and Google Tag Manager).
• Marketing and visitor identification: help us recognize returning visitors, identify US visitors (Section 2.4), and measure and deliver our marketing.

Analytics and marketing tools run only after you accept them in our cookie banner. This applies to all visitors. See Section 2.5.

2.4 Website visitor identification (US visitors)

We use Visual Visitor and may use similar third-party identity-resolution tools on our website. If you are in the United States and you accept marketing cookies, these tools use cookies, a pixel, your IP address, browser and device data, and identity-matching data from third-party data partners to try to match your visit to a person or household. When there is a match, we may receive information such as your name, email address, postal address, and in some cases a phone number and general demographic details, along with the pages you visited and when.

We use this information to understand who is interested in our programs, to add you to our CRM, and to market to you, for example by sending you emails about our programs. Visitor identification is limited to US visitors; these tools are not used to identify visitors in other countries.

• Phone numbers found this way are not used for texts or marketing calls. We text or make marketing calls only to people who have given us the separate consent described in Section 3.1.
• Health inferences. We do not use visitor identification to build profiles about your specific health condition, and we do not sell this information.
• How to opt out. You can reject or withdraw marketing cookies at any time through “Cookie Settings” or “Your Privacy Choices” in our website footer, by using a Global Privacy Control signal (Section 9.5), or by emailing support@transcendclinic.com and asking us to suppress your email address from visitor identification. Visual Visitor also takes consumer opt-out and deletion requests directly through its own privacy page.

2.5 Cookie consent banner

When you first visit our website, a cookie banner asks for your choice. You can Accept all, Reject all, or Manage preferences by category. Until you choose, only strictly necessary cookies run. You can change your choice at any time through the “Cookie Settings” link in the website footer. Rejecting cookies does not stop you from using the site or contacting us.

You can also block or delete cookies in your browser settings. If you do, some parts of the site may not work as intended.

3. How we use information

We use personal information to:

• Respond to inquiries and schedule consultations
• Evaluate medical suitability and prepare for possible admission (intake)
• Coordinate travel pickup, stay logistics, and aftercare planning when relevant
• Process payments and issue receipts
• Send you marketing and educational communications about our programs, as described in Section 3.1
• Identify US website visitors and measure our marketing, as described in Sections 2.3 and 2.4
• Record, transcribe and review calls and chats for quality, training and follow-up
• Operate, secure, and improve the website
• Comply with legal obligations and protect the rights and safety of patients, staff, and the clinic

We do not sell personal information, and we never sell health information.

3.1 Marketing communications

• Email. If you give us your email address through a form, LISA, a call, or another channel, or if your email address is matched to a website visit (Section 2.4), we may email you about your inquiry. We send marketing emails about our programs, educational content, events and offers only if you opt in, for example by ticking the optional email box on our forms. Every marketing email includes an unsubscribe link and our postal address. You can unsubscribe at any time (Section 9.1).
• Text messages (SMS). We send marketing text messages only if you have separately given your prior express written consent, for example by checking an unchecked SMS consent box that names Transcend and the number. Consent to texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time and HELP for help. See the Text Messages section of our Terms of Service.
• Calls. We may call you back at the number you give us about your inquiry. We do not make marketing calls using an autodialer, an artificial or prerecorded voice, or an AI-generated voice unless you have given the consent the law requires.
• Discreet messaging. We try to keep subject lines, sender names and message previews discreet and do not mention specific substances or conditions in them.
• Health information. We do not use the detailed health information you share during intake to target advertising to you on other websites or social media.

4. Confidentiality (as stated on our public site)

Our public FAQ and site state that:

• Inquiries are handled confidentially
• Transcend Clinic uses a HIPAA-compliant electronic medical record system
• We adhere to applicable national and international privacy regulations

Those public statements remain in force. This policy does not weaken them. The privacy laws and regulations we follow include the LFPDPPP and, for patients in our care, Mexican health-sector rules on clinical records.

4.1 Sensitive health information

Information about substance use, mental health, medications and medical history is sensitive. Visiting or contacting an addiction treatment provider can itself reveal health information. We handle it as follows:

• We collect it only when you choose to share it, and we use it to respond to you, assess suitability, plan care, and meet legal duties.
• Access is limited to staff and service providers who need it for those purposes.
• We do not sell it, and we do not share it for targeted advertising.
• Where a law such as the Washington My Health My Data Act requires your consent to collect or share consumer health data, we ask for that consent separately.
• Please do not send detailed medical information through the website chat, LISA, text messages or a public social media channel if you are not comfortable doing so; our intake team can collect it through a more secure channel.

5. Sharing

We share personal information only when needed to run the service, for the purposes in this policy, or when required by law, for example:

• Clinic clinical and intake staff involved in your inquiry or care
• Service providers under contract (hosting, email/SMS, CRM, payment processors, analytics) who may process data on our behalf, including:
• CRM, web chat, email and SMS: Vendasta
• Data automation between our tools: Zapier
• Website visitor identification: Visual Visitor
• Analytics and tag management: Google (Google Analytics, Google Tag Manager)
• AI assistant and phone: the providers that operate LISA and our phone line
• Website hosting and development: our web hosting and development providers
• Professional advisors (legal, accounting) under confidentiality
• Authorities when we are legally required to disclose
• A buyer or successor in a business transfer (Section 15)

Our service providers may use personal information only to provide services to us, under contracts that limit their use. We do not sell personal information and we do not sell health information.

We do not place open advertising networks on inquiry forms for the purpose of selling lead data.

6. International transfers

You may contact us from outside Mexico. Staff, systems, or vendors may process data in Mexico, the United States, or other countries where our providers operate. TRANSCEND CLINIC CANCUN S DE RL DE CV is the data controller for these transfers. Where required, we use appropriate safeguards for them, including contracts with our service providers.

Transfers to Mexico. Our clinic and clinical and intake staff are in Mexico. If you are in the United States or another country, the information you give us (including health information) will be transferred to, stored in and accessed from Mexico, and our US-based service providers store data in the United States. Privacy laws in Mexico may differ from, and may be less protective than, the laws where you live. In Mexico, personal data held by private parties is governed by the LFPDPPP, which gives you rights to access, rectify, cancel and object to processing of your data (“ARCO rights”; see Section 9.8). By using our website or contacting us, you understand your information will be transferred as described here.

7. Retention

We keep inquiry and patient-related records only as long as needed for the purposes above, for legitimate clinical/admin needs, and as required by applicable law. We use the following retention periods:

8. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of health-related and contact data. No method of transmission or storage is perfectly secure; please use the official channels listed above.

9. Your choices and rights

Subject to applicable law, you may ask to access, correct, update, or delete personal information we hold about you, or to withdraw consent where processing is consent-based. Contact us using the details in §11. We may need to verify your identity before acting on a request. Some clinical or legal retention duties may limit deletion.

9.1 Email unsubscribe (CAN-SPAM)

You can stop marketing emails at any time by clicking the “unsubscribe” link in any marketing email or by emailing support@transcendclinic.com with “Unsubscribe” in the subject line. We will process your request within 10 business days. We may still send you non-marketing messages about an inquiry, appointment or program you have with us.

9.2 Text messages: reply STOP (TCPA)

You can stop marketing texts at any time by replying STOP to any text from us. You may receive one final message confirming your opt-out. Reply HELP for help. You may also revoke consent by any other reasonable means, such as emailing support@transcendclinic.com, and we will honor it within 10 business days or sooner as the law requires. Consent to texts is never a condition of purchase.

9.3 Calls

You can ask us at any time to stop calling you, and we will add your number to our internal do-not-call list.

9.4 Cookies and visitor identification

You can reject or withdraw analytics and marketing cookies, including visitor identification, at any time through “Cookie Settings” or “Your Privacy Choices” in our website footer. You can also ask us to suppress your email address from visitor identification by emailing support@transcendclinic.com.

9.5 Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, our website does not respond to DNT signals. We do honor Global Privacy Control (GPC) signals as a request to opt out of analytics, marketing and visitor identification cookies for that browser, and as an opt-out of sale or sharing where state law requires.

9.6 US state privacy rights (US visitors)

If you are in the United States, depending on where you live, state law may give you some or all of the rights below. We will honor these rights where the law applies to us.

• Know and access: what personal information we collect, use and disclose, and a copy of it
• Correct inaccurate personal information
• Delete personal information, subject to legal exceptions
• Opt out of the sale of personal information, “sharing” for cross-context behavioral advertising, targeted advertising, and profiling
• Limit the use of sensitive personal information (including health information)
• Withdraw consent where we rely on consent
• Appeal a decision we make about your request
• Non-discrimination: we will not treat you differently for exercising your rights

California (CCPA/CPRA). California residents have the rights above. In the past 12 months we have collected the categories of personal information described in Section 2 (identifiers, contact details, internet and network activity, inferences, audio and electronic information such as call recordings, and sensitive personal information such as health information), from the sources described in Section 2, for the purposes in Section 3, and disclosed them to the service providers in Section 5. We do not sell personal information and do not use sensitive personal information for purposes that would require a “Limit the Use” link. California’s “Shine the Light” law lets California residents ask what personal information we shared with third parties for their direct marketing; we do not share personal information with third parties for their own direct marketing.

Washington (My Health My Data Act) and Nevada (SB 370). If you are a Washington or Nevada consumer, you have the right to confirm whether we collect, share or sell your consumer health data, to access it and a list of the third parties and affiliates we shared it with (and their contact information), to withdraw consent, and to have it deleted. We collect and share consumer health data only with your consent or as necessary to provide a service you requested, and we do not sell it.

Other states. Residents of states such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others with comprehensive privacy laws may have similar rights, including the right to appeal a denied request. If we deny your appeal, you may contact your state Attorney General.

9.7 How to make a request

Email support@transcendclinic.com with “Privacy Request” in the subject line, or call +1 (760) 621-6203. Tell us your name, the email or phone number you used with us, your state of residence, and the request. We will verify your identity by matching the information you give us to our records, and we will respond within the time the law requires (generally 45 days). You may use an authorized agent; we may ask for proof of the agent’s authority and ask you to verify your identity directly. To appeal a decision, reply to our response with “Appeal” in the subject line.

9.8 Your rights under Mexican law (ARCO rights)

Under the LFPDPPP, you may ask TRANSCEND CLINIC CANCUN S DE RL DE CV to:

• Access the personal information we hold about you and how we process it
• Rectify (correct) personal information that is inaccurate or incomplete
• Cancel (delete) your personal information from our records, subject to legal retention duties (for example clinical record rules)
• Oppose (object to) the processing of your personal information for specific purposes, such as marketing

You may also revoke your consent to processing and limit the use or disclosure of your personal information. To make an ARCO request, email support@transcendclinic.com with “ARCO Request” in the subject line, or write to us at Calle Laureles, Mz 37, Lt 2-02, SM 311, Benito Juarez, Cancun, Quintana Roo 77560, Mexico. Include your name and contact details for our response, a copy of an official ID (or your representative’s ID and proof of authority), a clear description of the information and the right you want to exercise, and any document that helps us locate your information. We will respond within the time limits set by the LFPDPPP.

10. Children

Our website and programs are directed to adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor’s data was submitted in error, contact us and we will delete it where appropriate.

11. Contact

Privacy / data requests
Email: support@transcendclinic.com
Phone / WhatsApp: +1 (760) 621-6203
Mail: Calle Laureles, Mz 37, Lt 2-02, SM 311, Benito Juarez, Cancun, Quintana Roo 77560, Mexico

Data controller and legal entity for notices: TRANSCEND CLINIC CANCUN S DE RL DE CV, Calle Laureles, Mz 37, Lt 2-02, SM 311, Benito Juarez, Cancun, Quintana Roo 77560, Mexico

12. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. If we make material changes, such as using your information for a new purpose, we will post a notice on the website and, where required, ask for your consent or notify you by email. Continued use of the website after an update means you have seen the revised policy.

13. Governing law

This Privacy Policy is governed by the federal laws of Mexico, including the LFPDPPP, and the laws of the State of Quintana Roo, Mexico. Any dispute about this Privacy Policy will be brought in the competent courts of Cancun, Quintana Roo, Mexico, consistent with our Terms of Service. This does not limit any rights you have under the privacy laws of the US state where you live, which apply to US visitors as described in Section 9.6, or any rights that cannot be waived under applicable law.

14. Links to other websites

Our website may contain links to third-party websites, services or resources (for example booking tools, maps and social media) that are not covered by this Policy or our Terms of Service. When you visit or use them, we recommend that you review their privacy policies and terms before providing your personal information.

15. Business transfers

If Transcend is acquired by or merged with another entity, or transfers all or part of its business or assets, we may transfer the personal information you provided to us to the new entity as part of that transaction, subject to this Policy and applicable law. In the event of bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, we may not be able to control how your personal information is processed.