Security and privacy policy

This policy explains how Renova Medical collects, uses, stores and protects the personal data of people who visit the website or contact us, in compliance with the Brazilian General Data Protection Law (LGPD, Law no. 13,709/2018).

Last updated: [publication date]

1. Who controls the data

The controller of the personal data processed on this website is Renova Medical Indústria e Comércio de Produtos Médicos Hospitalares Ltda., registered under CNPJ no. 31.047.312/0001-84, headquartered at R. Ângela Berbel Pagano, 336, Jardim Alvorada, Cravinhos, SP, 14140-000, Brazil.

2. What data we collect

We collect only the data needed to respond to those who contact us and to keep the website running securely.

  • Data you provide in the contact form: name, institution, email, phone or WhatsApp number, professional profile, subject and the content of your message.
  • Data you send by email, phone or WhatsApp: the information you choose to share when talking to our customer service and sales teams.
  • Browsing data: IP address, browser and device type, pages visited, date and time of access. These records are generated automatically by the hosting infrastructure.

We do not request sensitive personal data through the website. Please do not send patient health data through the form or by email.

3. How we use the data

  • To respond to requests, quotes and orders, based on preliminary procedures related to a contract and on your consent (art. 7, items I and V, of the LGPD).
  • To provide technical support and customer service, including sending instructions for use, based on the performance of a contract and on compliance with a legal or regulatory obligation (art. 7, items II and V).
  • To meet health regulatory obligations that apply to medical device manufacturers, such as recording and reporting technical complaints and adverse events to the competent authorities (art. 7, item II).
  • To keep the website secure and working, preventing fraud and unauthorized access, based on legitimate interest (art. 7, item IX).
  • To exercise rights in judicial, administrative or arbitration proceedings, when necessary (art. 7, item VI).

We do not sell personal data, and we do not use it for purposes other than those described here without informing you first.

4. Who we share data with

Data may be shared only when necessary for the purposes above:

  • Service providers that support us, such as website hosting, email and form delivery, which process the data according to our instructions and under confidentiality and security obligations.
  • Public authorities, such as ANVISA and the courts, when required by law, regulation or an order from a competent authority.
  • Authorized distributors and representatives of Renova Medical, when you request service or a quote in your region. [Keep only if Renova sells through distributors.]

5. International transfer

Some service providers, such as hosting and email providers, may store data on servers outside Brazil. In these cases, we adopt the safeguards set out in art. 33 of the LGPD, such as contracting providers that offer adequate data protection guarantees.

6. How long we keep data

We keep data for as long as needed to fulfill the purposes of this policy and the periods required by law or by health regulations. After that period, the data is deleted or anonymized, unless retention is required to comply with a legal obligation or for the regular exercise of rights.

7. How we protect data

We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration or improper disclosure, such as encrypted connections (HTTPS), access restricted to the people who need the data for their work, and providers with recognized security practices.

No system is completely immune to incidents. If a security incident occurs that may cause relevant risk or harm, we will notify the affected data subjects and the Brazilian National Data Protection Authority (ANPD), as required by law.

8. Cookies

This website uses only cookies and technologies that are strictly necessary for its operation and security, which do not require consent. We do not use advertising cookies. If we start using audience analytics or marketing tools, this policy will be updated and we will ask for your consent before enabling them.

You can block or delete cookies in your browser settings, bearing in mind that this may affect how some parts of the website work.

9. Your rights

Under art. 18 of the LGPD, you may request, at any time and free of charge:

  • confirmation that we process your data, and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
  • portability of the data to another provider, under ANPD regulations;
  • deletion of data processed based on your consent, except where retention is required by law;
  • information about the entities with which we share your data;
  • information about the possibility of not giving consent and its consequences;
  • withdrawal of consent.

You may also object to processing carried out under other legal bases when it does not comply with the law, and file a complaint with the Brazilian National Data Protection Authority (ANPD).

10. Data protection officer and contact

To exercise your rights or ask questions about this policy, contact our data protection officer:

Officer
[officer name]
Address
R. Ângela Berbel Pagano, 336, Jardim Alvorada, Cravinhos, SP, 14140-000, Brazil

We will respond within the periods set by law. To protect your data, we may ask for information to confirm your identity before handling the request.

11. Changes to this policy

This policy may be updated to reflect changes in legislation or in our practices. The current version will always be available on this page, with the date of the last update shown at the top.