Privacy Policy — Corradi Medical

Last updated: March 15, 2026

Controller: Corradi Medical, a brand operated by CLÍNICA GUILHERME CORRADI LTDA, registered under CNPJ 24.057.878/0001-21, with address at Av. Rebouças, 3551 - Pinheiros, São Paulo - SP, 05401-400, Brazil.

Privacy contact: [email protected] and/or /contact/.

Corradi Medical respects your privacy and is committed to protecting your personal data, including sensitive personal data related to health, in accordance with Brazilian Law No. 13,709/2018 (the Brazilian General Data Protection Law - LGPD) and other applicable regulations.

This Privacy Policy explains, in a clear and transparent way, how we process personal data collected through corradi.med.br, forms, contact channels, WhatsApp, scheduling interactions, content, campaigns, events and other interactions with Corradi Medical.

1.1 Terms and definitions

For the purposes of this Policy, the following definitions apply:

• ANPD: Brazilian National Data Protection Authority.
• Controller: the legal entity responsible for decisions regarding the processing of personal data. For purposes of this Policy, the Controller is CLÍNICA GUILHERME CORRADI LTDA, responsible for the Corradi Medical brand.
• Processor: a natural or legal person that processes personal data on behalf of the Controller.
• Data Subject: the natural person to whom the personal data relates.
• Personal Data: information related to an identified or identifiable natural person.
• Sensitive Personal Data: personal data regarding racial or ethnic origin, religious belief, political opinion, union or religious/philosophical/political organization membership, health or sex life data, genetic data or biometric data, when linked to a natural person.
• Processing: any operation performed on personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation, control, modification, communication, transfer, dissemination or extraction.
• Consent: a free, informed and unambiguous indication by which the data subject agrees to the processing of personal data for a given purpose, when consent is the applicable legal basis.
• Cookies: files and similar technologies used for website operation, analysis, personalization and experience improvement.
• Logs: automatic records of access, browsing and use of the website and its features.
• DPO / Data Protection Officer: the person designated to act as a communication channel between the Controller, data subjects and the ANPD.

1.2 Scope and applicability

This Policy applies to personal data processed by Corradi Medical when you:

• access and browse corradi.med.br;
• fill out forms, including contact, screening, pre-consultation or anamnesis forms;
• request information about appointments, treatments, protocols, content or events;
• contact us via WhatsApp, email, telephone or other official channels;
• subscribe to receive content, institutional communications or informational materials;
• participate in campaigns, events, surveys, waiting lists or promotional actions carried out by Corradi Medical.

This Policy does not apply to third-party websites, apps, platforms or services accessed through external links. We recommend reviewing the privacy policies of such third parties before sharing personal data with them.

1.3 Personal data we may collect

Corradi Medical may collect the following categories of personal data, depending on the context of your interaction:

1.3.1 Registration and contact data

• first and last name;
• email address;
• phone number and WhatsApp;
• city, state or other information entered in forms;
• contact and scheduling preferences.

1.3.2 Health, wellness and performance data

In screening, pre-consultation, anamnesis or care-related forms, we may process data related to:

• age;
• declared biological sex;
• height, approximate weight and stated goals;
• physical activity routine;
• eating habits;
• sleep quality, stress and lifestyle;
• history voluntarily informed by the data subject;
• other health, wellness or performance information voluntarily provided by the data subject.

Such data may qualify as sensitive personal data, especially when related to health, and will be processed with a level of protection compatible with their nature.

1.3.3 Automatically collected data

When you access the website, we may automatically collect:

• IP address;
• date and time of access;
• browser and device type;
• operating system;
• pages visited and browsing duration;
• traffic source;
• cookie identifiers and technical session records.

1.3.4 Data obtained from third parties or integrations

In specific situations, we may receive data from technology partners, analytics platforms, media tools, service systems, hosting providers, security providers, CRM, calendar or automation tools, always subject to the applicable legal bases and legal limits.

1.4 Purposes of processing

Corradi Medical processes personal data for legitimate, specific and informed purposes, including:

• responding to requests, questions and contacts sent through the website or other channels;
• enabling screening, pre-consultation, anamnesis and appointment-related processes;
• organizing care and improving the experience of patients, leads and visitors;
• personalizing institutional and commercial communications, when permitted by law;
• sending content, updates, invitations, materials and communications related to Corradi Medical, when there is an appropriate legal basis;
• complying with legal, regulatory and ethical obligations applicable to the clinic's activities;
• ensuring security, fraud prevention and protection of the website and systems;
• carrying out statistical analyses, usage metrics, and continuous improvement of the website, campaigns and digital experience;
• keeping records for the regular exercise of rights in judicial, administrative or arbitration proceedings;
• responding to ANPD requests, public authorities or court orders, when applicable.

1.5 Legal bases

Depending on the context, Corradi Medical may process personal data based on one or more of the legal bases provided by the LGPD, including:

• consent of the data subject;
• compliance with legal or regulatory obligations;
• regular exercise of rights in judicial, administrative or arbitration proceedings;
• performance of a contract or preliminary procedures related to a contract;
• protection of life or physical safety of the data subject or a third party;
• protection of health, when applicable, by health professionals, health services or health authorities;
• legitimate interest, subject to the rights and legitimate expectations of the data subject.

Where processing depends on consent, consent may be revoked at any time, in accordance with applicable law.

1.6 Cookies, analytics and Microsoft Clarity

The website may use cookies and similar technologies for:

• technical operation and security;
• remembering preferences and language;
• audience measurement and performance analysis;
• understanding browsing behavior;
• improving content, usability and conversion.

Corradi Medical currently uses Microsoft Clarity to understand how users interact with the website, including through behavioral metrics, heatmaps and session replays, in order to improve services, content and digital experience.

You may, depending on the tools available on the website and in your browser, manage, block or delete cookies. However, disabling certain cookies may affect website functionality.

1.7 Sharing of personal data

Corradi Medical may share personal data, when necessary and within legal limits, with:

• vendors and processors supporting website operation, hosting, security, analytics, CRM, customer service, scheduling, automation, marketing and technological infrastructure;
• service providers involved in administrative, operational or communication processes;
• authorized internal teams and professionals, to the extent necessary for the performance of their duties;
• public authorities, regulatory bodies, supervisory entities or courts, when there is a legal, regulatory or judicial obligation;
• third parties in the context of corporate reorganization, merger, acquisition, spin-off or similar transactions, subject to appropriate safeguards.

Corradi Medical does not sell personal data.

1.8 International data transfers

Some technology, hosting, analytics, communication or cloud storage providers may be located outside Brazil or may process data in international infrastructure.

Whenever international transfers of personal data occur, Corradi Medical will adopt appropriate measures to ensure that processing complies with the LGPD and reasonable standards of security and governance.

1.9 Retention and deletion

Personal data will be stored for as long as necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, protect Corradi Medical's rights and observe applicable limitation or retention periods.

Where appropriate and technically feasible, data will be deleted, anonymized or securely retained once the need for processing has ended, subject to the legal grounds for retention.

1.10 Information security

Corradi Medical adopts technical, administrative and organizational measures compatible with the nature of the data processed and the risks involved, seeking to protect personal data against unauthorized access, loss, destruction, alteration, leakage or any unlawful or improper processing.

Despite our security efforts, no environment is entirely risk-free. For this reason, you should also adopt good security practices when using devices, passwords and digital channels.

1.11 Data subject rights

Under the LGPD, the data subject may request, subject to legal and regulatory limits:

• confirmation of the existence of processing;
• access to personal data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• portability, when applicable;
• deletion of data processed based on consent, when applicable;
• information about data sharing;
• information about the possibility of denying consent and the consequences of such denial;
• withdrawal of consent, when consent is the legal basis;
• review of decisions taken solely on the basis of automated processing, when applicable.

To exercise your rights, please contact [email protected] or use /contact/.

Corradi Medical may request additional information to confirm your identity and ensure the security of the request handling process.

1.12 Children and adolescents

Corradi Medical's website and services are not specifically directed to children. If personal data of children or adolescents is processed, such processing must comply with applicable law and, where required, the best interests of the minor and the specific, highlighted consent of at least one parent or legal guardian.

1.13 Changes to this Policy

Corradi Medical may update this Privacy Policy at any time to reflect legal, regulatory, operational or technological changes. The current version will always be the version published on the website, indicating its update date.

1.14 Contact

If you have questions, requests or complaints related to this Policy or the processing of personal data, please contact Corradi Medical through the channels below:

• General contact: /contact/
• Privacy / DPO email: [email protected]
• Address: Av. Rebouças, 3551 - Pinheiros, São Paulo - SP, 05401-400, Brazil

1.15 Final note

This document was drafted to reflect Corradi Medical's digital operation, including the institutional website, contact and pre-consultation forms, content, communication channels and analytics tools.