Pachón Arrhythmia ServiceCardioneuroablation Program

Privacy Policy

Effective date: August 10, 2026

This Privacy Policy explains how we handle personal data collected through this website, pachoncardioneuroablation.com (the "Site"). It is written to meet the requirements of Brazil's General Data Protection Law (LGPD, Law No. 13.709/2018) and of United States privacy laws, including the California Consumer Privacy Act as amended by the CPRA. It covers only the website; it does not govern the separate clinical relationship or medical records that apply if you become a patient, which are protected under applicable medical-confidentiality rules.

Who we are (data controller)

The Site is operated by the Pachón Arrhythmia Service — Cardioneuroablation Program (SEMAP, Serviço de Eletrofisiologia, Marcapasso e Arritmias Dr. Pachón), based in São Paulo, Brazil. For the LGPD, we act as the controller of the personal data collected through this Site.

Contact for privacy matters: [email protected] · WhatsApp +55 11 92137-6068 · Rua Cubatão, 86, Suite 504, São Paulo, SP, Brazil, CEP 04013-000.

What we collect, and why

  1. Website usage data (analytics). Only with your consent, we use Google Analytics 4 to understand how visitors use the Site: for example, pages viewed, approximate region, device type, clicks on buttons such as "Request a Teleconsultation," and video plays. This is collected through cookies and used only in aggregate to improve the Site. We never send health information or personal identifiers (such as your name, email, or phone number) to Google Analytics. Legal basis under the LGPD: your consent.
  2. Information you send us. If you contact us by email or WhatsApp, we receive the information you choose to provide (such as your name, contact details, and the content of your message) so we can respond. Legal basis under the LGPD: to take steps at your request and our legitimate interest in replying. Please share only what you are comfortable sending, and avoid transmitting detailed health information through these channels unless necessary.
  3. Technical and security data. Our content-delivery and security provider (Cloudflare) and our server process limited technical data, such as IP address, browser type, and time of access, to deliver the Site securely and prevent abuse. Legal basis under the LGPD: legitimate interest and security.

Cookies and your choices

  • Before you consent, no analytics cookies are set. If you accept, Google Analytics sets first-party cookies (named _ga and _ga_<id>) to measure usage. If you decline, these cookies are not set.
  • We do not use advertising, remarketing, or cross-site tracking cookies. Google Signals and advertising features are turned off.
  • You can accept or decline using the banner shown on your first visit, and change your mind at any time by clearing this site's cookies and site data in your browser (which brings the banner back), by using your browser's cookie controls, or by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

Embedded videos (YouTube)

The video library uses a privacy-preserving embed: thumbnails are hosted by us, and a YouTube player (through youtube-nocookie.com) loads only if you click play. Until then, YouTube receives no information about your visit. If you play a video, Google/YouTube may process data under their own policy at policies.google.com/privacy.

Who we share data with

We do not sell your personal data and do not share it with data brokers or intermediaries. We use the following service providers, which process data on our behalf:

We may also disclose data if required by law or to protect our legal rights.

International data transfer

Because we use Google Analytics, some usage data may be transferred to and processed in the United States. We rely on the contractual safeguards provided by our processors. Google Analytics does not store individual IP addresses.

How long we keep data

Analytics data is retained for up to 14 months. Messages you send us are kept only as long as needed to handle your inquiry and to meet any legal obligations.

Your rights

Under the LGPD (Brazil), you may request: confirmation that we process your data; access to it; correction of incomplete or inaccurate data; anonymization, blocking, or deletion of unnecessary data; data portability; information about with whom we share your data; and deletion of data processed with your consent. You may withdraw your consent at any time, and you may file a complaint with the National Data Protection Authority (ANPD, gov.br/anpd).

Under United States state privacy laws (including the California CCPA/CPRA), you may have the right to know what personal information we collect, to access or delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

To exercise any right, email [email protected]. We will respond within the time required by applicable law.

Children

The Site is intended for adults seeking medical information and is not directed to children. We do not knowingly collect personal data from children.

Security

We take reasonable technical and organizational measures to protect personal data, including HTTPS encryption and access controls. No method of transmission over the internet is completely secure.

Changes to this policy

We may update this policy from time to time. The effective date above shows when it was last revised; material changes will be reflected on this page.

Contact

Questions or requests about this policy or your personal data: [email protected] · WhatsApp +55 11 92137-6068 · Rua Cubatão, 86, Suite 504, São Paulo, SP, Brazil.

Back to the Pachón Arrhythmia Service home page