Privacy Policy.

1. Who the controller is

The controller of the data processed on this site is BEST LABS MEDICINA DIAGNOSTICA LTDA, CNPJ 35.949.344/0001-26, headquartered at Av. Brasil, 1992, Jardim América, São Paulo, SP, ZIP 01430-001, which operates the WA Health Tech Club brand.

This policy applies to the website wahealthclub.com. The members' platform, at dash.wahealthclub.com, has its own policy.

2. What data we collect

In the contact form: name, email, WhatsApp, goal of interest (Body, Mind, Face or CorporateWA), optional message, the text of the consent you accepted and the date and time of submission.

For form security: a code derived from your IP address (which does not allow the IP to be reconstructed) and the browser identification, used only to limit automated submissions.

The site does not use tracking or advertising cookies. Strictly necessary technical cookies from the security check and hosting may exist.

3. What we use the data for

Contacting you by WhatsApp, email or phone to schedule and hold the diagnostic call or to answer your message.

Understanding your goal and preparing the commercial conversation.

Protecting the site against automated submissions and abuse.

4. Legal bases

Commercial contact and scheduling are based on your consent, given by ticking the box in the form (Brazilian Law 13,709/2018, art. 7, I). You can withdraw it at any time.

Protecting the site against abuse is based on the controller's legitimate interest (art. 7, IX), limited to the minimum necessary.

5. Who we share data with

We use processors that handle data on our behalf and under our instructions: Vercel (hosting of the site and of the function that receives the form), Supabase (storage of leads in a project exclusive to the site), Resend (sending the new-lead notice to the WA team), Cloudflare (form security check) and Google Calendar (scheduling of the call, when you pick a time).

When you use the WhatsApp button, the conversation is governed by WhatsApp's terms.

We do not sell personal data or share it for third-party advertising.

6. International transfer

Some processors may store or process data outside Brazil. In those cases the transfer follows art. 33 of Law 13,709/2018, with contractual safeguards and adequate security standards.

7. How long we keep it

Form data is kept for up to 24 months after the last contact, or until you ask for deletion, whichever comes first. After that it is deleted or anonymized, except where retention is required by law.

8. Your rights

You can request, at any time: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, and withdrawal of consent (art. 18 of Law 13,709/2018).

To exercise these rights, contact the WA team on WhatsApp +55 (11) 93210-2667 or through the channels on the Contact page. We reply within 15 days.

9. Security

Data travels encrypted and is stored in a database with access restricted to the site's application. Access keys are not in the site's public code.

10. Changes

This policy may be updated. The current version and its date are always on this page.