Privacy Policy
Last updated: 13 August 2026
This policy explains how we collect, use, store and protect your personal data when you use mydoctorinbrazil.com or book a consultation with us. We follow the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and, for patients located in the European Union, the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The controller of your personal data is Dreisbach Serviços Médicos Ltda, registered under CNPJ 51.971.709/0001-75, based at Rua Rio Grande do Norte, 23, Santa Efigênia, Belo Horizonte — MG, 30130-130, Brazil. Care is provided by Dr. Björn Dreisbach (CRM-MG 72953) and Dr. Gabriela Gonçalves Dreisbach (CRM-MG 74266).
For any question or request about your data, write to [email protected].
2. What we collect
| Category | Examples | When |
|---|---|---|
| Identification and contact | Name, e-mail, phone number, passport or ID number, country of origin | When you book a consultation or message us |
| Health data | Symptoms, medical history, examination findings and clinical notes | During and after your consultation |
| Payment data | Confirmation that payment was made, amount, method | When you pay for a consultation. Card numbers are processed by our booking provider and never reach us |
| Technical and usage data | IP address, browser and device type, pages visited, approximate location, referral source | Automatically, when you browse the site |
Health data receives special protection. Under the LGPD it is "sensitive personal data" and under the GDPR a "special category" of data. We only process it to provide you with medical care, and it is protected by medical confidentiality under Brazilian law and the Code of Medical Ethics.
3. Why we use your data, and on what legal basis
- To provide medical care — evaluating you and following up on your care. Legal basis: protection of health, performed by health professionals (LGPD Art. 11, II, "f"; GDPR Art. 9(2)(h)).
- To manage your appointment and payment — scheduling, confirmation, invoicing. Legal basis: performance of a contract (LGPD Art. 7, V; GDPR Art. 6(1)(b)).
- To keep medical records — as required of physicians in Brazil. Legal basis: compliance with a legal obligation (LGPD Art. 7, II; GDPR Art. 6(1)(c)).
- To understand and improve the website — measuring traffic and which pages are useful. Legal basis: consent for non-essential cookies, and legitimate interest for basic security and functioning (LGPD Art. 7, IX; GDPR Art. 6(1)(a) and (f)).
4. Who we share it with
We do not sell your data and we never share your health information for advertising. We share only what is necessary with:
- SimplyBook.me — our appointment and payment provider, which processes your booking details and card payment on its own platform.
- Google (Analytics, Tag Manager, Ads) — anonymous or pseudonymous website usage data. These tools do not receive your health information.
- WhatsApp (Meta) — if you choose to contact us through WhatsApp, your message is delivered through their service under their own privacy terms.
- Other healthcare providers — only when you ask us to coordinate your care with them.
- Public authorities — when required by law or court order.
5. International transfers
Some of the providers above store data outside Brazil, including in the United States and the European Union. When your data is transferred internationally, it is done under the safeguards those providers offer for LGPD and GDPR compliance, such as standard contractual clauses.
6. How long we keep it
Medical records are kept for at least 20 years after your last consultation, as required of physicians practising in Brazil. Booking, payment and invoicing records are kept for the periods required by tax and civil law. Website analytics data is kept for up to 14 months. After these periods, data is deleted or anonymised.
7. Cookies and analytics
We use cookies that are strictly necessary for the site to work, and analytics cookies (Google Analytics, loaded through Google Tag Manager) that help us understand how visitors use the page. Our booking provider may set its own cookies inside the scheduling area. You can block or delete cookies in your browser settings at any time; essential functions may stop working if you do.
8. Your rights
You may, at any time and free of charge, ask us to:
- Confirm whether we hold data about you, and receive a copy of it;
- Correct data that is incomplete, inaccurate or out of date;
- Delete data processed with your consent, or restrict its use — noting that medical records must be retained for the legal period described above;
- Receive your data in a portable format, or have it transferred to another provider;
- Withdraw consent for analytics or marketing cookies;
- Object to processing based on legitimate interest;
- Lodge a complaint with the Brazilian data protection authority (ANPD) or, in the EU, your national supervisory authority.
Write to [email protected] and we will respond within the legal deadline. We may need to confirm your identity before releasing health information.
9. Security
Consultations are held over an encrypted video connection and access to medical records is restricted to the treating physicians. No system is completely immune to incidents; if a data breach occurs that presents a relevant risk to you, we will notify you and the competent authority as the law requires.
10. Children
Minors are treated only with the consent and participation of a parent or legal guardian, who must provide the data and accompany the consultation.
11. Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes affecting how we use your data will be communicated directly whenever possible.
Not an emergency service. In a medical emergency in Brazil, call 192 (SAMU) immediately.