Privacy Policy

1. Who is responsible for your data

Data processing is carried out by Laura Morais (Morais Gestão em Saúde), the physician responsible for this website and the consultations (Brazilian licence CRM SP 210578), acting as data controller.

Data protection officer (DPO) and channel to exercise your rights: dralauramoorais@gmail.com.

2. What data we collect

We collect only what is needed to book and confirm your consultation:

• •Full name
• •Email
• •CPF (Brazilian tax ID, required by the payment processor to issue the charge)
• •Phone/WhatsApp (optional, for contact)
• •The time slot you choose

3. Health data stays off this website

This website does NOT collect or store clinical information (symptoms, diagnoses, history or prescriptions). Such data — considered sensitive under the LGPD — is handled only during the consultation, in a certified electronic health record with proper medical confidentiality and security — not on this website.

4. Why we use your data and on what legal basis

We use your data to: (a) reserve and confirm your consultation slot; (b) process payment; (c) send confirmation and the video call link.

The legal bases are the performance of a contract and pre-contractual steps at your request (the booking), and compliance with legal and regulatory obligations (retention of payment records).

5. Who we share with

We do not sell your data. We share the minimum necessary with providers that operate parts of the service (processors), each handling only what it needs:

• •Asaas (payment institution): name, email and CPF, to generate and process the Pix charge.
• •Cal.com (scheduling): name and email, to create and confirm the booking.
• •Google (Google Meet): name and email, for the video call room.
• •Vercel (hosting): technical data needed for the site to work.

6. International transfer

Some processors above handle data outside Brazil (for example, servers in the European Union or the United States). These providers apply data-protection safeguards, and transfers occur within the limits allowed by the LGPD, restricted to delivering the service.

7. How long we keep it

Payment-related data is kept for 5 years to meet tax and legal obligations. Booking data is kept for the duration of the relationship and applicable legal periods, then deleted or anonymized.

8. Your rights

The LGPD grants you, at any time, the right to confirm whether processing exists, access your data, correct incomplete or outdated data, request anonymization or deletion, obtain information about sharing, and withdraw consent.

To exercise any of these rights, write to dralauramoorais@gmail.com. We will respond within the periods set by law.

9. Cookies

This website uses no tracking cookies and no advertising tools that build profiles about you. We use only the technical resources strictly necessary for the pages to function.

10. Security

We apply technical and organizational measures to protect your data: encrypted connection (HTTPS), minimized collection, separation of clinical data into a certified system, and restricted access to service credentials.

11. Changes to this policy

We may update this policy to reflect changes in the service or the law. The update date at the top indicates the current version.