Privacy Policy

1. Introduction

Lins e Lins Diagnostico, Tratamento e Reabilitacao Integral LTDA ("we", "our", or "us"), registered under CNPJ 48.284.034/0001-81, with its principal place of business at Av. Reitor Miguel Calmon, 1210 - Sala 208, Canela, Salvador - BA, 40110-100, is committed to protecting your privacy and personal data.

This Privacy Policy describes how we collect, use, store, and share your personal information in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018) and other applicable regulations. As a healthcare provider, we treat health-related personal data with the highest level of care and confidentiality.

2. Data We Collect

• Identification data: full name, CPF, RG, date of birth, gender
• Contact data: email address, phone number, physical address
• Health data: medical and dental history, allergies, medications, pre-existing conditions
• Clinical data: diagnostic images (X-rays, panoramic radiographs, intraoral photos), treatment plans, clinical notes, procedure records
• Rehabilitation data: prosthetic specifications, implant records, follow-up assessments, before-and-after documentation (with consent)
• Insurance data: dental plan information, coverage details, authorization numbers
• Payment data: billing information processed through secure payment systems
• Navigation data: IP address, browser type, cookies, access logs

3. How We Use Your Data

• Performing dental diagnosis, treatment, and rehabilitation services
• Creating and managing comprehensive treatment plans
• Maintaining clinical records as required by CRO and CFO regulations
• Processing dental insurance claims and authorizations
• Scheduling appointments and sending reminders
• Processing payments and issuing invoices
• Communicating about treatment progress, follow-up care, and preventive recommendations
• Complying with legal and regulatory obligations (including CRO, CFO, ANVISA, and health surveillance regulations)

4. Legal Basis for Processing

• Consent provided by the data subject, particularly for sensitive health data
• Protection of life or physical safety of the data subject or third party
• Performance of a contract or preliminary procedures related to a contract
• Compliance with legal or regulatory obligations
• Legitimate interests of the controller, provided fundamental rights are preserved

For sensitive health data, we primarily rely on explicit consent or the healthcare protection legal basis provided by the LGPD.

5. Data Sharing

• CRO, CFO, and dental regulatory authorities as required
• Health surveillance authorities (ANVISA, Vigilância Sanitária) when required
• Dental insurance companies for claims processing and authorization
• Specialized dental laboratories for prosthetics and rehabilitation devices
• Referring healthcare providers when clinically necessary (with patient consent)
• Payment processors for secure transaction handling
• Technology service providers for clinical software maintenance
• Government authorities when required by law

6. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Clinical dental records are retained for a minimum of 20 years as required by CFO Resolution No. 118/2012 and applicable health regulations. Diagnostic images and treatment records may be retained for extended periods for continuity of care and legal compliance. Upon expiration, your data will be securely deleted or anonymized.

7. Your Rights

Under the LGPD, you have the following rights:

• Confirmation of the existence of data processing
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of data to another service provider
• Deletion of data processed with your consent
• Information about entities with which your data has been shared
• Information about the possibility of denying consent and its consequences
• Revocation of consent

Please note that certain clinical records must be retained regardless of consent revocation due to regulatory requirements. To exercise any of these rights, please contact us using the information in Section 10.

8. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience. You may configure your browser to refuse cookies; however, some features may not function properly without them.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Health and clinical data receives encryption, role-based access controls, secure backup procedures, and additional security layers in compliance with healthcare data protection standards. Our clinical management systems maintain audit trails for all data access and modifications.

10. Contact Information

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last updated" date.