Privacy Policy

The data collected on this website is processed by Dr. Hugo Leonardo Doria Netto and by his practice team, at Rua Teixeira da Silva, 54 — conjunto 73, Bela Vista, São Paulo — SP, CEP 04002-030, Brazil.

This policy covers the website and the forms published on it. It does not cover other services you may reach from here, such as WhatsApp, Google Maps or social media profiles, which have policies of their own.

The website has no sign-up and no login area. The data that reaches the team is what you write yourself in the contact form or in the second opinion request:

• Full name
• Phone or WhatsApp
• E-mail
• City and state
• Specialty or subject of the contact
• Whether you already have exams
• Whether you have been given a surgical recommendation
• How you heard about Dr. Hugo Doria
• The message you write — including whatever you choose to tell about your case

The website also records browsing data: pages visited, language, device and browser type and the source of the visit (for example, the utm_ parameters of a campaign link, kept only in the browser session). This data is handled in aggregate and is not cross-referenced with what you write in the form.

Do not send exams, reports or medical images through the forms on this website. They accept no attachments and are not the appropriate channel for clinical files: the team will guide you through a secure transfer in the conversation, after confirming receipt of your request.

• Replying to your contact and scheduling the appointment or the assessment of your case
• Understanding, before the appointment, the subject that led you to get in touch
• Organizing the schedule and the team's follow-up
• Measuring website use in aggregate, to improve navigation and content

The data is not used for advertising directed at you, and is not sold, rented or transferred to third parties.

Processing of the data submitted through the form relies on your consent — art. 7, I of Law 13.709/2018 (LGPD) — given when you tick the authorization box before sending.

Browsing data is processed on the basis of the legitimate interest (art. 7, IX) of maintaining and improving the website, always in aggregate form.

When the contact turns into care, health data starts to be processed under art. 11, II, “f” of the LGPD — protection of health, in a procedure carried out by a health professional.

The website does not store what you write. The form assembles a message with the fields you filled in and opens the conversation in the team's WhatsApp — from there, sending happens in your own app. No health data is stored in any database of this website.

The following have access to your data:

• The practice team, which receives and answers the message
• WhatsApp (Meta Platforms), as the app where the conversation takes place, subject to that service's own privacy policy
• The website's hosting provider and the audience measurement tool, which handle only technical browsing data

Beyond that, data is only shared to comply with a legal obligation or an order from a competent authority.

Since the website stores nothing, what exists is the WhatsApp conversation and the practice's own records.

Messages from people who do not go on to be seen are kept for as long as the contact lasts and can be deleted at any time at your request. Information that becomes part of a medical record follows the minimum retention period set out in Brazilian health legislation (Law 13.787/2018): 20 years from the last entry.

The website may use audience measurement (Google Analytics 4, via Google Tag Manager) to know, in aggregate, which pages are accessed and through which paths. When active, this measurement does not identify you individually and can be blocked in your browser settings, with no loss of functionality. Advertising and remarketing cookies are never used.

Art. 18 of the LGPD guarantees you, at any time and free of charge:

• To confirm that processing exists and to access what was submitted
• To correct incomplete, inaccurate or outdated data
• To request deletion of data processed on the basis of consent
• To know who the data has been shared with
• To withdraw consent, which stops contact from the team

Withdrawal does not undo processing already carried out, nor does it reach records that health legislation requires to be kept.

When the patient is under 18, the form must be filled in by the father, the mother or the legal guardian — it is they who authorize the contact and the processing of the data.

This policy may be updated to reflect changes to the website or to the law. The date of the latest update is always shown at the top of this page.