# Privacy Policy

> How Raphael Gracindo Clinic handles personal data on this website and in patient care, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).

This policy describes how Raphael Gracindo Clinic handles personal data, both on this website and in patient care, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). The data controller is Clínica Raphael Gracindo, at Rua Conde Afonso Celso, 103 — Jardim Botânico, Rio de Janeiro — RJ, 22460-150. Questions and requests about personal data should be sent to atendimento@raphaelgracindo.com.

## Data handled on this website

- Audience metrics (Vercel Analytics): loaded only if you accept the cookie notice. The metrics are aggregated and use no identifying cookies.
- Performance metrics (Vercel Speed Insights): measure page load times for technical diagnostics, without identifying the visitor.
- Browser local storage: two preferences are kept on your own device — the language you selected and your answer to the cookie notice. They are never sent to the clinic and can be removed by clearing site data in your browser.
- Contact form: your name, e-mail, phone (if given) and the message you write. These are sent to the clinic by e-mail through Resend, the delivery provider, and are not stored on the website. Your e-mail address is used as the reply address so we can answer you.
- Server logs: the site is hosted on Vercel, which records request data such as IP address and browser for infrastructure operation and security. Submitting the form also records your IP address for one minute, solely to limit repeated submissions.
- Web fonts: typefaces are loaded from Google Fonts, which exposes your IP address to Google when the page loads.

You choose what to write in the form: share only what we need in order to reply, and avoid sensitive clinical detail through that channel. For health matters, prefer a consultation or the direct channels. Messages we receive stay in the atendimento@raphaelgracindo.com mailbox for as long as your request is being handled.

## Patient data

Clinical and administrative data collected during care are handled under medical confidentiality and recorded in an electronic health record. Access is restricted to the professionals involved in the patient care and occurs only when necessary to provide it. We do not sell personal data and do not use it for advertising.

## Legal bases

- Protection of health, for data handled during care by health professionals (LGPD art. 11, II, “f”).
- Compliance with legal and regulatory obligations, including the medical record retention required by the Brazilian Federal Council of Medicine.
- Consent, for the website audience metrics, which load only after you accept.
- Preliminary procedures at your request, for data sent through the contact form: we process what you write in order to reply to you.
- Legitimate interest, for security, operation, and technical diagnostics of the website infrastructure.

## Sharing

We share data only where necessary: with website infrastructure providers (Vercel, which hosts the application and supplies the audience and performance metrics; Resend, which delivers the contact form messages; Google, when fonts are loaded), with professionals and services involved in the patient care, and with authorities where legally required. These providers may process data outside Brazil.

## Retention

Medical records are kept for the minimum period required by the Brazilian Federal Council of Medicine, currently 20 years from the last entry. Contact details are kept for the duration of the care relationship. Preferences stored in your browser remain until you clear them.

## Your rights

- Confirm that processing exists and access your data.
- Correct incomplete, inaccurate, or outdated data.
- Request anonymisation, blocking, or deletion of unnecessary data or data processed unlawfully.
- Request data portability to another service provider.
- Withdraw consent for audience metrics at any time by clearing site data in your browser.
- Be told with whom your data has been shared.

To exercise any of these rights, write to atendimento@raphaelgracindo.com or call (21) 2236 2696. We reply within the period set by the LGPD. Deleting medical record data is limited by the statutory retention periods described above.

## Changes

This policy may be updated to reflect changes to the website or to the law. The date of the last revision appears at the foot of this page.

_Last reviewed: 2026-09-12_

---

Other pages: [Home](/index.md) · [About](/about.md) · [Contact](/contact.md) · [Privacy](/privacy.md)

Agent guide: https://www.raphaelgracindo.com/llms.txt · Sitemap: https://www.raphaelgracindo.com/sitemap.xml