Privacy Policy
Instituto Priorit - Rio Verde, GO
May 2026
1. Data Controller
Instituto Priorit, with a unit in the Centro neighborhood, Rio Verde - GO, is the controller of the personal data collected through this website.
General contact: acolhimento@institutopriorit.com.br
2. Data Protection Officer (DPO)
Instituto Priorit has appointed a Data Protection Officer (DPO) who can be contacted for any matter relating to the processing of your personal data or to the exercise of your rights.
DPO contact: dpo@institutopriorit.com.br
3. Personal Data Collected
Through the pre-registration form on this website, we collect:
- Full name of the patient and the legal guardian
- Neighborhood/city of residence and age of the patient
- Relationship to the patient
- E-mail address and mobile phone number
- Therapies and activities of interest (health data — special category)
- How you heard about Instituto Priorit
Automatically collected data
- IP address and approximate geolocation data
- Browser type and operating system
- Pages visited and duration of the visit
- Cookies (as described in section 13)
4. Purpose of Processing
The personal data collected is used exclusively to:
- Keep the user informed about the opening and services of Instituto Priorit in Rio Verde
- Understand therapeutic needs for proper planning of services
- Ensure priority in scheduling assessments after the clinic opens
- Send communications related to the services of Instituto Priorit
- Comply with applicable legal obligations
5. Legal Basis for Processing
The processing of your personal data is based on the following legal bases, under the terms of the LGPD (Law 13.709/2018):
- Consent of the data subject (LGPD, art. 7, I) — given when filling out the pre-registration form
- Specific and highlighted consent for sensitive health data (LGPD, art. 11, I) — for information about therapies of interest
- Legitimate interest of the controller (LGPD, art. 7, IX) — for the purposes of improving services and statistical analysis
- Compliance with a legal or regulatory obligation (LGPD, art. 7, II) — when applicable
6. Sharing Data with Third Parties
Your personal data may be shared with the following categories of recipients, strictly to the extent necessary for the stated purposes:
- Web hosting and technological infrastructure service providers (Cloudflare)
- Transactional e-mail service providers
- Instituto Priorit healthcare professionals involved in service planning
- Competent authorities, when required by law
Safeguards applied
- All providers are selected based on adequate data protection safeguards
- Data processing agreements are entered into under the terms of the LGPD
- Data is never sold, transferred or used for third-party commercial purposes
7. International Data Transfers
Some service providers used by Instituto Priorit may store data outside Brazil. Such transfers are carried out with the following safeguards:
- Standard contractual clauses approved by the ANPD
- Transfer Impact Assessment (TIA)
- Additional technical and organizational measures to ensure data protection
- Compliance with the level of protection required by the LGPD (art. 33)
Transfers to service providers
- Cloudflare, Inc. (USA) — under standard contractual clauses
- Other providers are assessed case by case regarding data protection safeguards
8. Data Retention
Personal data is retained only for the period strictly necessary to fulfill the purposes for which it was collected:
- Pre-registration data: retained during the preparation period and for up to 24 months after the opening, unless consent is renewed
- Contact data for communications: until the data subject withdraws consent or requests deletion
- Data for compliance with legal obligations: for the period required by applicable legislation
- Consent records: retained for 5 years for evidentiary purposes
After the indicated periods
- Data is deleted securely and irreversibly
- Or anonymized for exclusively statistical purposes
9. Rights of the Data Subject
Under the terms of the LGPD (art. 18), as the data subject, you have the following rights:
- Right to confirmation and access — obtain confirmation and a copy of the personal data processed (LGPD, art. 18, I and II)
- Right to rectification — correct inaccurate or incomplete data (LGPD, art. 18, III)
- Right to deletion — request the deletion of data processed with consent (LGPD, art. 18, VI)
- Right to object — object to processing based on legitimate interest (LGPD, art. 18, IV)
- Right to portability — receive the data in a structured, machine-readable format (LGPD, art. 18, V)
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing (LGPD, art. 18, IX)
- Right to information — be informed about with whom your data is shared (LGPD, art. 18, VII)
How to exercise your rights
- Send an e-mail to dpo@institutopriorit.com.br with the subject "Exercise of Rights"
- Include your full name and the right you wish to exercise
- We will respond within a maximum of 15 days (LGPD)
Right to complain
- With the ANPD (Brazilian National Data Protection Authority) — www.gov.br/anpd
10. Automated Decisions and Profiling
Instituto Priorit does not use solely automated decision-making processes, including profiling, that produce legal effects on the data subject or similarly significantly affect them.
The selection of therapies and services is always carried out by qualified healthcare professionals, based on an individual assessment.
11. Protection of Minors' Data
Since the services of Instituto Priorit are aimed at children and young people, we treat this matter with special care:
- Minors' data is always collected through the parent or legal guardian
- Consent for the processing of minors' data is given by the holder of parental responsibility
- Minors' health data is processed with enhanced security measures
- Access to minors' data is restricted to the strictly necessary professionals
- Legal guardians may exercise all rights provided for in the LGPD on behalf of the minor
Under applicable legislation
- LGPD (art. 14): the processing of data of children and adolescents must be carried out in their best interest, with specific consent from the legal guardian
12. Data Security
We adopt appropriate technical and organizational measures to ensure the security of personal data, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Access control based on the principle of least privilege
- Monitoring and logging of access to personal data
- Regular staff training on data protection
- Security incident response procedures
- Periodic security and vulnerability assessments
In the event of a data breach
- The ANPD will be notified within a reasonable time (LGPD, art. 48)
- Affected data subjects will be informed when the breach is likely to result in a significant risk to their rights
14. Changes to This Policy
Instituto Priorit reserves the right to update this Privacy Policy at any time, in particular to adapt it to legislative or regulatory changes.
In the event of significant changes, users will be informed through the website or by e-mail, if they have provided their electronic address.
We recommend regularly reviewing this page to stay up to date on our data protection practices.
May 2026