Privacy Policy

This Privacy Policy describes how the dental practice of Dra. Maria Vitória Lima (Maria Vitória Lima Batista) collects, processes and protects personal data through the website dramariavitorialima.com.br. We comply with Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD) and with the Code of Ethics of the Federal Council of Dentistry (CFO).

1. Who is the data controller

For the purposes of Art. 5, VI of LGPD, the controller of personal data processed through this site is:

Maria Vitória Lima Batista
CRO/MG 75659
Av. Vinte e Cinco, c/ 22 - Numero 1467 - Centro
Ituiutaba-MG, postal code 38300-095, Brazil
Email: contato@dramariavitorialima.com.br
WhatsApp / Phone: +55 34 99296-0319

2. What data we collect

We collect the minimum amount of data needed to respond to your contact and arrange your visit. The categories collected through this site are:

• Identification data: name or nickname you provide in a contact form or via WhatsApp.
• Contact data: phone, WhatsApp and/or email when you choose to message us.
• Message content: information you voluntarily share (reason for contact, preferred time, treatment question).
• Browsing data: anonymous technical data such as device type, browser, pages visited and time on page, collected in aggregate form for statistical purposes.

We do not collect sensitive data (health, financial, biometric) through this site. Health data, when applicable, is only collected during in-clinic consultations, with informed consent, and stored in confidential dental records under Article 14 of the Code of Ethics.

3. Legal bases for processing

We process your personal data based on the legal grounds listed in Art. 7 of the LGPD:

• Consent (Art. 7, I): when you send a message through the form or WhatsApp asking us to contact you.
• Performance of a contract or pre-contract steps (Art. 7, V): when data is needed to schedule a visit or deliver the requested dental service.
• Compliance with legal or regulatory obligations (Art. 7, II): to meet the requirements of the Regional Council of Dentistry (CRO/MG), the Federal Council of Dentistry (CFO), and applicable tax law.
• Legitimate interest (Art. 7, IX): to ensure the security and proper functioning of the website (essential cookies and anonymous usage data).

4. How we use the data

Data collected is used exclusively to:

• Reply to your message and answer your questions;
• Schedule, reschedule or confirm appointments;
• Comply with legal, regulatory (CRO/MG, CFO) and tax obligations;
• Ensure the security and continuity of the website;
• Understand, in aggregate and anonymous form, how the site is used in order to improve the browsing experience.

We do not sell, rent or trade your personal data. We do not perform profiling or automated decision-making about you.

5. Sharing of data

Your data may be shared, only to the extent necessary, with:

• Infrastructure providers (website hosting, CDN, email and WhatsApp Business), acting as processors under LGPD, bound by contractual duties of confidentiality and security;
• Public authorities, when required by law, court order or by the Regional Council of Dentistry (CRO/MG);
• Dental insurance operators (Uniodonto, MetLife, Hapvida, and Prima Vida Dental), only when you choose to use your insurance plan and for the purposes of authorization and billing of the procedure.

Some of these providers may store data on servers located outside Brazil. In such cases, we require adequate safeguards as set out in Articles 33 to 36 of LGPD.

6. How long we keep your data

Data is kept only for as long as necessary for the purpose of the processing:

• Contact messages from the site or WhatsApp: up to 24 months after the last interaction, unless you request earlier deletion;
• Patient data (dental records): for a minimum of 20 years from the last visit, per Article 16 of the Code of Ethics and other CFO resolutions;
• Tax and accounting data: for the period required by applicable tax law (generally 5 years).

After these periods, data is securely deleted or anonymized.

7. Cookies and similar technologies

This site uses essential cookies (needed for basic site functionality, such as remembering language preference) and may use analytical cookies to collect anonymous, aggregated usage statistics.

You can block or delete cookies at any time through your browser settings. Disabling essential cookies may affect site functionality.

8. Data subject rights

As a data subject, you have the rights set out in Art. 18 of LGPD:

• Confirm the existence of processing of your personal data;
• Access your data;
• Correct incomplete, inaccurate or outdated data;
• Request anonymization, blocking or deletion of unnecessary or excessive data, or data processed in violation of LGPD;
• Request data portability to another provider;
• Request deletion of data processed based on your consent;
• Obtain information about the public and private entities with whom the controller has shared your data;
• Be informed of the option not to give consent and the consequences of refusal;
• Withdraw your consent.

9. How to exercise your rights

To exercise any of these rights, contact the controller by email at contato@dramariavitorialima.com.br or WhatsApp +55 34 99296-0319, identifying yourself and describing your request.

We will respond as soon as possible, within the statutory deadlines. For your protection, we may request additional information to confirm your identity before fulfilling the request.

10. Information security

We adopt reasonable technical and administrative measures to protect your data against unauthorized access, loss, alteration or destruction, including access controls, encrypted connections (HTTPS) and physical records stored in a restricted area.

No system, however, is completely free from incidents. In the event of a personal data breach that may cause significant risk or harm to data subjects, we will notify affected subjects and the Brazilian Data Protection Authority (ANPD), as required by Article 48 of LGPD.

11. Changes to this policy

This Privacy Policy may be updated periodically to reflect legal, regulatory or operational changes. The date of the most recent update appears at the top of this page. We recommend reviewing this document whenever you return to the site.

12. Contact and data controller

For questions about this policy, our processing of your personal data or to exercise your rights as a data subject, contact the controller, who also acts as point of contact with data subjects and with the ANPD:

Maria Vitória Lima Batista
Email: contato@dramariavitorialima.com.br
WhatsApp / Phone: +55 34 99296-0319
Av. Vinte e Cinco, c/ 22 - Numero 1467 - Centro
Ituiutaba-MG, postal code 38300-095, Brazil