
Hygealink Website Privacy Notice
Draft under legal review
Last updated: [DATE TO BE CONFIRMED]
1. Who we are
This website (www.hygealink.com) is operated by [LEGAL ENTITY NAME], CNPJ [CNPJ TO BE CONFIRMED], based at [ADDRESS TO BE CONFIRMED] ("Hygealink"), which is the controller of the data processed through it. For privacy questions: privacy@hygealink.com. Data protection officer: [NAME TO BE CONFIRMED], privacy@hygealink.com.
2. Scope
This notice covers personal data processed through this website. The Hygealink app has its own terms and privacy policy, presented in the official app stores and in the app itself: [PRIVACY POLICY URL FOR THE APP].
3. What we collect
- Contact form: name, email, subject, and message.
- Technical browsing data (such as IP address, date and time of access, and browser or device type), recorded by the server and used for aggregated audience statistics gathered without cookies, using [ANALYTICS TOOL TO BE CONFIRMED].
- This website does not use tracking or advertising cookies. [CONFIRM AT IMPLEMENTATION]
4. What we don't ask for
We don't ask for health information, diagnoses, test results, prescriptions, or other people's personal data. Please don't send them. If you send some by mistake, contact us so we can handle it.
5. How we use it
- To reply to messages sent through the contact form.
- To keep the site secure and working, including preventing spam and abuse.
- To meet legal obligations, such as keeping access logs.
- We don't use your data to send newsletters, advertising, or other marketing communications.
6. Legal basis
Our legitimate interest or pre-contractual steps, to respond to your inquiries; compliance with a legal obligation, to keep access logs; [OTHER BASES TO BE CONFIRMED WITH COUNSEL].
7. Who we share it with
Only with service providers who help us run the site, receive emails, and protect the form from spam: [LIST/CATEGORIES OF PROVIDERS TO BE CONFIRMED]. We do not sell your data. We may share information when required by law or a court order.
8. International transfers
Your data may be processed in other countries, depending on the providers we use: [LOCATIONS TO BE CONFIRMED]. When that happens, we will apply the safeguards required by Brazil's data protection law (LGPD).
9. How long we keep it
Contact form messages: up to 12 months after we close your request. Access logs: 6 months, as required by law. After that, data is deleted or anonymized. [RETENTION PERIODS TO BE VALIDATED WITH COUNSEL]
10. Your rights
Under Brazil's LGPD, and under other data protection laws that may apply depending on where you live, you may have the right to ask for confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and to withdraw consent where consent is the basis, and to object to certain processing. Write to privacy@hygealink.com. We will reply within 15 days.
11. Social media and app stores
This site links to Instagram, YouTube, Google Play, and the App Store, which handle data under their own policies.
12. Children
This site is not directed at anyone under 18.
13. Security
We use reasonable measures to protect information sent through this site. No system is completely free of risk.
14. Changes
We may update this notice. The last-updated date will always be at the top.
15. Complaints
You may also contact Brazil's data protection authority (ANPD) or the data protection authority in your country.

