Privacy Policy
Instituto Priorit
August 2026
1. Data Controller
Instituto Priorit, headquartered in Barra da Tijuca, Rio de Janeiro - RJ, is the controller of the personal data collected through this website.
General contact: acolhimento@institutopriorit.com.br
2. Data Protection Officer (DPO)
Instituto Priorit has appointed a Data Protection Officer (DPO) who can be contacted for any matter relating to the processing of your personal data or to the exercise of your rights.
DPO contact: dpo@institutopriorit.com.br
3. Personal Data Collected
Through the pre-registration form on this website, we collect:
- Full name of the patient and the parent/legal guardian
- Neighborhood/city of residence and age of the patient
- Relationship to the patient
- E-mail address and mobile phone number
- Therapies and activities of interest (health data — special category)
- How you heard about Instituto Priorit
Automatically collected data
- IP address and approximate geolocation data
- Browser type and operating system
- Pages visited and duration of the visit
- Cookies (as described in section 13)
4. Purpose of Processing
The personal data collected is used exclusively to:
- Keep the user informed about the services of Instituto Priorit
- Understand therapeutic needs for proper planning of services
- Ensure priority in scheduling assessments
- Send communications related to the services of Instituto Priorit
- Comply with applicable legal obligations
5. Legal Basis for Processing
The processing of your personal data is based on the following legal bases, under the terms of the LGPD (Law 13.709/2018):
- Consent of the data subject (LGPD, art. 7, I) — given when filling out the pre-registration form
- Specific and highlighted consent for sensitive health data (LGPD, art. 11, I) — for information about therapies of interest
- Legitimate interest of the controller (LGPD, art. 7, IX) — for the purposes of improving services and statistical analysis
- Compliance with a legal or regulatory obligation (LGPD, art. 7, II) — when applicable
6. Sharing and Forwarding of Data
This is the website of the Priorit network, not of one particular unit. In the forms where you indicate the unit you want — pre-registration, contact and work with us —, the data you fill in is forwarded to the Priorit unit you choose, and to that one only: no other unit in the network receives your submission.
Choosing the unit is up to you and is mandatory — without that choice, the form is not submitted. Alongside your data we also forward the record that the enquiry came through the network website, so that the unit knows how you reached us. The franchise enquiry form is the exception: it stays with Instituto Priorit and is not forwarded to any unit.
Your personal data may be shared with the following categories of recipients, strictly to the extent necessary for the stated purposes:
- The Priorit unit you choose in the form — which receives the data in order to contact you and plan your care
- Web hosting and technological infrastructure service providers (Cloudflare)
- Transactional e-mail service providers
- Instituto Priorit healthcare professionals involved in service planning
- Competent authorities, when required by law
Forwarding to the unit you choose
- Applies to the pre-registration, contact and work with us forms filled in on this website
- The destination is the unit you select in the form itself; without that selection, the submission is not completed
- Besides the form data, the indication that the enquiry came through the network website is also forwarded, and it is recorded in the unit's file
- The franchise enquiry form is not forwarded to any unit — it stays with Instituto Priorit
- To find out which unit your data was forwarded to, or to withdraw your consent, contact the Data Protection Officer
Safeguards applied
- All providers are selected based on adequate data protection safeguards
- Data processing agreements are entered into under the terms of the LGPD
- Data is never sold, transferred or used for third-party commercial purposes
7. International Data Transfers
Some service providers used by Instituto Priorit may store data outside Brazil. Such transfers are carried out with the following safeguards:
- Standard contractual clauses approved by the ANPD
- Transfer Impact Assessment (TIA)
- Additional technical and organizational measures to ensure data protection
- Compliance with the level of protection required by the LGPD (art. 33)
Transfers to service providers
- Cloudflare, Inc. (USA) — under standard contractual clauses
- Other providers are assessed case by case regarding data protection safeguards
8. Data Retention
Personal data is retained only for the period strictly necessary to fulfill the purposes for which it was collected:
- Pre-registration data: retained during the preparation period and for up to 24 months after collection, unless consent is renewed
- Contact data for communications: until the data subject withdraws consent or requests deletion
- Data for compliance with legal obligations: for the period required by applicable legislation
- Consent records: retained for 5 years for evidentiary purposes
After the indicated periods
- Data is deleted securely and irreversibly
- Or anonymized for exclusively statistical purposes
9. Rights of the Data Subject
Under the terms of the LGPD (art. 18), as the data subject, you have the following rights:
- Right to confirmation and access — obtain confirmation and a copy of the personal data processed (LGPD, art. 18, I and II)
- Right to rectification — correct inaccurate or incomplete data (LGPD, art. 18, III)
- Right to deletion — request the deletion of data processed with consent (LGPD, art. 18, VI)
- Right to object — object to processing based on legitimate interest (LGPD, art. 18, IV)
- Right to portability — receive the data in a structured, machine-readable format (LGPD, art. 18, V)
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing (LGPD, art. 18, IX)
- Right to information — be informed about with whom your data is shared (LGPD, art. 18, VII)
How to exercise your rights
- Send an e-mail to dpo@institutopriorit.com.br with the subject "Exercise of Rights"
- Include your full name and the right you wish to exercise
- We will respond within a maximum of 15 days (LGPD)
Right to lodge a complaint
- With the ANPD (National Data Protection Authority) — www.gov.br/anpd
10. Automated Decisions and Profiling
Instituto Priorit does not use solely automated decision-making processes, including profiling, that produce legal effects on the data subject or similarly significantly affect them.
The selection of therapies and services is always carried out by qualified healthcare professionals, based on an individual assessment.
11. Protection of Minors' Data
Since the services of Instituto Priorit are aimed at children and young people, we treat this matter with special care:
- Minors' data is always collected through the parent or legal guardian
- Consent for the processing of minors' data is given by the holder of parental responsibility
- Minors' health data is processed with enhanced security measures
- Access to minors' data is restricted to the strictly necessary professionals
- Legal guardians may exercise all rights provided for in the LGPD on behalf of the minor
Under applicable legislation
- LGPD (art. 14): the processing of data of children and adolescents must be carried out in their best interest, with specific consent from the legal guardian
12. Data Security
We adopt appropriate technical and organizational measures to ensure the security of personal data, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Access control based on the principle of least privilege
- Monitoring and logging of access to personal data
- Regular staff training on data protection
- Security incident response procedures
- Periodic security and vulnerability assessments
In the event of a data breach
- The ANPD will be notified within a reasonable time (LGPD, art. 48)
- Affected data subjects will be informed when the breach is likely to result in a significant risk to their rights
14. Changes to This Policy
Instituto Priorit reserves the right to update this Privacy Policy at any time, in particular to adapt it to legislative or regulatory changes.
In the event of significant changes, users will be informed through the website or by e-mail, if they have provided their e-mail address.
We recommend regularly reviewing this page to stay up to date on our data protection practices.
August 2026