Privacy Policy

Controller: Caldonazo Advocacia, a law firm, CNPJ 41.239.239/0001-04, headquartered in Campinas, SP, Brazil.

The Medical and Health Law practice area is coordinated by Dr. Alessandro Caldonazo, OAB/SP 373.229.

Data protection officer: João Victor Santos Caldonazo, dados@caldonazo.com. Write to this address for any request about your data.

• When you browse the site: IP address, date and time of access, browser type and pages visited. These are technical server records, used to keep the site running and secure.
• Access statistics: how many people visit each page, from which region and by which path they arrived, always in aggregate, without identifying you. They are collected only if you consent in the cookie notice.
• Ad measurement: if you consent in the cookie notice, the site records the visit in order to measure the reach of the firm’s ads on Meta networks (Instagram and Facebook). Without consent, nothing is sent.
• When you contact us by WhatsApp, by email or through the contact form on the Portuguese site: name, phone number, email, your role (physician, dentist, clinic or hospital) and whatever you write. These data are used to reply and to schedule the consultation. The form also records the date, time and IP address of the submission.
• Biweekly newsletter: if you tick the box “I want to receive institutional updates by email” on the form or ask the team, your name and email are added to the firm’s newsletter list, with the date and the way you asked. Clients of the firm may also receive it. Every message includes a link to unsubscribe.
• In the first contact, do not send medical records, exams or patient data. Such documents are processed only after you hire the firm, when they are needed for the defense, with restricted access and under professional confidentiality.

The data of those who become clients are also governed by the legal services contract and by the professional confidentiality of the legal profession.

• Website access logs: compliance with a legal obligation. The Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet) requires these records to be kept.
• Access statistics and ad measurement: your consent, given in the cookie notice.
• Contact and scheduling: preliminary procedures related to a contract, at your request.
• Newsletter: your consent, when you ask to receive it; for clients, the firm’s legitimate interest in keeping them informed, always with one-click unsubscribe.
• Record of the form submission (date, time and IP): necessary for the firm to prove the request.
• Patients’ health data needed for the defense of the professional or the institution: regular exercise of rights, including in contracts and in judicial, administrative or professional-ethics proceedings.

Where the basis is consent, you may withdraw it at any time, free of charge, through the “Cookie preferences” link in the footer. Withdrawal does not affect what was done before it.

We do not sell, rent or hand over your data for third-party marketing purposes.

For the site and the service to work, some providers process data on behalf of the firm and follow its instructions:

• Hostinger: hosting of the site and of the contact form.
• Google: the firm’s email and, with your consent, access statistics.
• Brevo: sending the newsletter by email and recording who asked for or cancelled it.
• Meta: with your consent, ad measurement; and, when you choose to contact us by WhatsApp, the conversation is also subject to WhatsApp’s own privacy rules.

Data may also be disclosed to authorities when the law or a court order requires it.

Some of these providers may store data on servers outside Brazil. In such cases, the transfer follows the safeguards provided for in the LGPD.

• Website access logs: 6 months, the period set by the Marco Civil da Internet.
• Access statistics: up to 14 months, the period configured in the tool.
• Contact that did not become an engagement: up to 6 months after the last message. After that, the conversation is deleted.
• Newsletter: as long as you wish to receive it. When you cancel, the email leaves the mailing list and only the record of the cancellation remains, so that you do not receive it again.
• Clients: for the duration of the contract and, afterwards, for the legal periods, including for the defense of the firm and of the client in proceedings.

Cookies are small files that the site stores in your browser.

• Essential: make the site work and remember your choice in the cookie notice. They do not depend on consent.
• Statistics: measure the use of the site in aggregate (Google Analytics). They are activated only if you consent.
• Ad measurement: record the visit to measure the firm’s ads (Meta pixel). They are activated only if you consent.

You may change your choice at any time through the “Cookie preferences” link in the footer, and you may also delete or block cookies in your browser settings.

At any time, you may ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of the data to another provider;
• deletion of the data processed on the basis of your consent;
• information about whom we share your data with;
• information about the possibility of refusing consent and what happens in that case;
• withdrawal of consent.

To do so, write to the data protection officer at dados@caldonazo.com. We reply within 15 days. If some data must be kept because of a legal obligation or for the defense of rights, we explain the reason in the reply.

You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

The site uses an encrypted connection (HTTPS). Access to the data is restricted to the people at the firm who need it to serve you, with individual passwords. If a security incident occurs that may cause relevant risk or harm, you and the ANPD will be notified, as the law requires.

This policy may be updated to follow changes in the law or in the site. The version in force is always on this page, with the date of the last update.

Last updated: October 19, 2026 · Portuguese version 2. English translation dated November 4, 2026.

Caldonazo Advocacia · Medical and Health Law practice area · Campinas, SP, Brazil · CNPJ 41.239.239/0001-04

Data protection officer: João Victor Santos Caldonazo · dados@caldonazo.com

Phone and WhatsApp of the Medical Law team: +55 19 97104-4779