Privacy Policy

This policy explains how your personal data is handled when you use the brunorochaeu.com website and fill in the diagnosis, contact and enrollment forms, in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD).

1. Who the controller is

The data controller is Bruno Rocha. For any privacy matter, write to contato@brunorochaeu.com.

2. What data we collect

We collect only what you provide in the forms:

• name;
• WhatsApp number;
• Instagram profile;
• email;
• clinic details: name, segment, monthly revenue range and current biggest challenge;
• the day and time chosen for the diagnosis.

Technical browsing data (such as pages visited and device type) may also be collected in aggregate form, to understand how the site performs.

To measure visits, the site uses Umami Cloud, an analytics service that works without cookies and without collecting personal data.

With your consent, the site also uses Google Tag Manager, Google Analytics and Google Ads, which set cookies to measure visits and the results of our ads. When you send a form, your email and phone number may be shared with Google in encrypted (hashed) form to attribute the request to an ad. Without consent, these tools only receive anonymous signals, without cookies. You can change your choice at any time in "Cookie preferences", at the bottom of every page.

3. What we use your data for

• to schedule and hold the free diagnosis;
• to confirm the time and get in touch by WhatsApp or email;
• to send a proposal and commercial communications related to your request;
• to improve the site and our service.

4. Legal basis

Processing is based on your consent, given when you submit the form, and on the legitimate interest of responding to your request and keeping commercial contact consistent with it. You may withdraw your consent at any time.

5. Who we share it with

We do not sell your data. It may be accessed by providers who help us run the service (hosting, scheduling tools, email and messaging), always limited to what is necessary and under a duty of confidentiality. We may also share it if required by law or a court order.

6. How long we keep it

We keep the data for as long as needed to fulfill the purposes above and to meet legal obligations. After that, it is deleted or anonymized.

7. Your rights

Under the LGPD, you may request at any time:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in violation of the law;
• data portability;
• deletion of data processed on the basis of consent;
• information about whom the data has been shared with;
• withdrawal of consent.

To exercise any right, send an email to contato@brunorochaeu.com. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

8. Security

We adopt reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.

9. Changes

This policy may be updated. The date of the latest revision appears at the top of this page.