We are the technology company responsible for the website http://consultorio.me and also for the mobile device application called Consultorio.me (hereinafter, in both cases, “Consultorio.me” or “application”), available in the app stores of the Android and iOS operating systems.
Use of Collected Information
When you use Consultorio.me, we collect information essential to the use of our application (such as name and email, for example), as well as information about your clients (such as name, email, phone number, and gender).
We also automatically receive basic information about the Internet Protocol (IP address) of your computer or mobile device and your Internet Service Provider (ISP), as well as the operating system and browser used and pages visited, which may be used to help us improve the user experience of our application, making it as pleasant as possible.
With your permission, we may send you emails about our application, updates, and promotions.
We do not sell personal data of our users or their clients. We may share data with vendors and service providers only to the extent necessary for operations, security, support, storage, communication, analysis, compliance with legal obligations, or execution of the contracted services. After all, guaranteeing the confidentiality of our users' and their clients' personal data is very important to us.
It is worth highlighting that all personal information relating to our users or their clients is treated in accordance with the General Personal Data Protection Law (LGPD), in compliance with LAW 13,709/2018 of August 14, 2018.
We also comply with the European (and precursor) version of the LGPD, the GDPR (General Data Protection Regulation), established under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, in effect since May 25, 2018.
The use of the Consultorio.me application or its website implies acceptance of this Privacy Policy, which may be updated without prior notice. Therefore, we recommend that you consult our Privacy Policy regularly to stay up to date.
In accordance with Article 27 of Regulation (EU) 2016/679 (GDPR), Consultorio.me, established outside the European Union, has designated Caio Homem de Bittencourt Chagas as its representative in the European Union, email eu-representative@consultorio.me, located at Rua do Funchal, 1, 2 Frente, 1000-162 Lisbon, Portugal, to act as a point of contact for data protection authorities and data subjects located in the European Union.
Consultorio.me acts as the data controller for personal data related to user account creation and administration, authentication, security, support, billing, subscription, communication, direct relationships with its users, and overall platform operation. Regarding patient data, medical records, appointments, clinical documents, and other information entered, managed, or processed by the clinics using the platform, Consultorio.me generally acts as a data processor, handling such data in accordance with the instructions of the responsible clinic and applicable legislation.
If, after consenting to provide us with your data, you change your mind, you can withdraw your consent for us to contact you, for ongoing data collection, use, or disclosure of your information, at any time, by contacting us at help@consultorio.me.
Data Retention, Deletion, and Recovery
Consultorio.me retains personal data for as long as necessary to provide the services, comply with legal, regulatory, tax, and contractual obligations, and for security, auditing, fraud prevention, dispute resolution, and defense of rights.
Consultorio.me is a platform intended for healthcare professionals and clinics. The application is not intended for direct use by patients.
User account deletion
The user can request the deletion of their account through the application itself, by accessing:
Settings > More Settings > Security > Delete User Account
It is also possible to request deletion through the public page:
https://consultorio.me/en/data-deletion
On the deletion page, the user must provide the email linked to their account and, optionally, the reason for the request. To protect account security, Consultorio.me may verify the ownership of the request using a token sent to the provided email.
After confirming the request, access to the account will be immediately deactivated. The data associated with the account and the clinic managed by that user will be placed in a deletion queue and removed from the operational database within 180 to 360 days.
Immediate access deactivation is an initial security measure and does not replace the permanent deletion of data, which will follow the timeline and process described in this Policy.
User account recovery
During the period of up to 180 days, the user may request account recovery, when technically possible, by following the instructions sent by email.
Deletion of the clinic managed by the user
All users of Consultorio.me have their own clinic associated with their account. When a user requests the deletion of their data, only the data of the clinic under their administration will be included in the deletion process.
This may include registration data, patients, appointments, medical records, documents, attachments, settings, internal financial information, and other records linked to the clinic.
The deletion will be processed gradually, between 180 and 360 days, to preserve the stability, security, and performance of the systems.
Data created in third-party clinics
The deletion of the user account does not remove data that this user has entered, created, altered, or accessed as a member of a clinic administered by another person.
In these cases, the data remains linked to the responsible clinic and under the responsibility of the clinic's administrator, in accordance with applicable permissions, responsibilities, and legal and regulatory obligations.
Patient data
Requests for access, correction, export, or deletion made by patients should preferably be directed to the clinic responsible for care.
If a patient contacts Consultorio.me directly, the request may be forwarded to the responsible clinic or handled in conjunction with it, when applicable.
Inactive accounts
User accounts and clinics inactive for more than 180 days may be deactivated and placed in the deletion queue, as provided for in the Consultorio.me Terms of Use.
Backups and security copies
Even after a deletion request, certain data may remain temporarily in backups, offline security copies, and disaster recovery environments.
This data may be kept for up to 10 years, exclusively for security, service continuity, auditing, disaster recovery, compliance with legal obligations, or defense of rights.
Data kept in backups and offline copies are not used for the regular use of the service and will be eliminated in accordance with the applicable retention cycle.
Technical and security logs
Consultorio.me may keep technical and security logs for up to 10 years.
These logs are limited to technical information, containing no sensitive medical record content or clinical information.
Logs may be used for security, auditing, technical diagnosis, fraud prevention, incident investigation, service improvement, and defense of rights.
Payment and subscription data
Payment and subscription data associated with the account will be deleted along with the user account, except when retention is necessary to comply with legal, fiscal, or accounting obligations, or for security, auditing, fraud prevention, or defense of rights.
Email requests
In addition to the public deletion page, the user may also contact us through the following channels: help@consultorio.me and dpo@consultorio.me
For security purposes, Consultorio.me may request additional information or email confirmation before processing requests related to the account, personal data, export, or deletion.
Disclosure of Data
Your information may be disclosed in exceptional cases. For example, if we are required by law or if you violate our Terms of Use.
Third-Party Services
In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as messaging services (WhatsApp) and cloud hosting services (Google Drive), have their own privacy policies regarding the information we are required to provide to them.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by them. We are not responsible for the privacy policies or content of those third-party websites and providers.
Google Analytics
Google Analytics is a web analysis service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
The information generated by the cookies about your use of the website (including your IP address) will be directly transmitted to and stored by Google, without our interference. Google will use this information for the purpose of better understanding the use of the application/website, compiling reports on this activity, and providing other services relating to website activity and Internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
Data Protection Officer (DPO)
Consultorio.me has designated a Data Protection Officer (DPO), responsible for acting as a communication channel between the company, data subjects, and competent authorities, under applicable data protection legislation.
DPO Contact: dpo@consultorio.me
Privacy Policy Updates
We reserve the right to modify this Privacy Policy at any time, so please review it regularly. Changes and clarifications will take effect immediately upon their publication on our application and website.
Applicable Law
This document is governed by and should be interpreted in accordance with the laws of the Federative Republic of Brazil.
This document is governed by and construed in accordance with the laws of the Federative Republic of Brazil. The courts of the Judicial District of Santos, located in the state of São Paulo, shall have exclusive jurisdiction to resolve any disputes arising from this document, with the express waiver of any other venue, regardless of how privileged it may be.
Questions
Users with questions about this agreement or the privacy policy can contact Consultorio.me at help@consultorio.me.
