Privacy and LGPD
Privacy Policy
Last updated: October 2026
1. Who we are
This website is maintained by Healthangels Holding S.A. (“Health Angels”), headquartered in São Paulo, Brazil, the controller of the personal data processed here. In accordance with the Lei Geral de Proteção de Dados (LGPD, Brazilian General Data Protection Law, Law No. 13,709/2018), this policy explains what data we collect, why, and what your rights are.
2. Data we collect
- Identification form: name, email, WhatsApp, profile, job title, organization, interest and the message you write.
- Data Subject Channel: name, email, type of request and the description of the request.
- Angel virtual assistant: the messages you write in the chat while the conversation is open.
- Chat satisfaction survey: rating and optional comment.
- Browsing: preferences stored in your browser (cookies and local storage), according to your choices. Technical data such as IP address may be logged by hosting providers for security purposes.
3. How we use it
- To respond to your inquiry and route it to the right company or service in the ecosystem.
- To notify you when a “Coming soon” service launches, if you asked us to.
- To handle data subject requests.
- To improve our service and the website.
- To keep the website secure and comply with legal obligations.
4. Legal bases
We process data based on your consent (art. 7, I), our legitimate interest in responding to inquiries and improving our service (art. 7, IX), compliance with legal obligations (art. 7, II) and the regular exercise of rights (art. 7, VI). We do not request health data on this website; please do not send it through the forms or the chat.
5. Who we share it with
- Netlify (website hosting and form submissions).
- Anthropic (the Claude AI model, which generates the Angel assistant’s responses from the website content).
- Google Fonts (delivery of the website’s typefaces).
- VLibras (Brazilian Federal Government), only if you turn on translation into Libras.
- Health Angels ecosystem companies involved in handling your request, under confidentiality.
- Authorities, when required by law.
We do not sell personal data.
6. International transfers
Some providers (such as Netlify, Anthropic and Google) may process data outside Brazil. In these cases, we adopt the safeguards provided for in art. 33 of the LGPD, such as data protection contractual clauses.
7. How long we keep it
We keep data only for as long as necessary for the purposes above or for the period required by law. Chat messages are not stored by the website after the conversation ends. At the end of the retention period, data is deleted or anonymized.
8. Your rights
Under art. 18 of the LGPD, you may request: confirmation of and access to your data; correction; anonymization, blocking or deletion; portability; information about data sharing; review of automated decisions; and withdrawal of consent at any time. Submit your request through the Data Subject Channel.
9. Security
We use encrypted connections (HTTPS), role-based access control and providers with recognized security practices. No system is completely immune to incidents; if one occurs that poses a significant risk, we will notify data subjects and the ANPD (Brazilian Data Protection Authority), as required by law.
10. Data Protection Officer (DPO)
For questions or requests about your data, use the Data Subject Channel or write to contato@healthangels.com.br. The dedicated Data Protection Officer channel will be published here.
11. Changes
This policy may be updated. The date of the latest revision appears at the top of the page.