Privacy Policy

Hub Dental ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website and services. We comply with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados - LGPD) and international privacy standards.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

We use your personal information for the following purposes:

• Service Delivery: Coordinate your dental tourism experience, including treatment planning, clinic appointments, accommodation bookings, and ground services
• Communication: Respond to inquiries, send booking confirmations, provide treatment updates, and deliver customer support
• Medical Coordination: Share relevant medical information with our partner clinics to ensure appropriate treatment planning and care
• Payment Processing: Process deposits, payments, and refunds in accordance with our payment policies
• Marketing: Send promotional emails about our services, special offers, and dental tourism tips (you can opt-out anytime)
• Website Improvement: Analyze usage patterns to improve our website functionality, user experience, and content
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Security: Detect, prevent, and address fraud, security issues, and technical problems

We do not sell your personal information. We share your information only in the following circumstances:

Under the Brazilian General Data Protection Law (LGPD), you have the following rights regarding your personal data:

• Right to Access: Request confirmation of whether we process your personal data and obtain a copy of your data
• Right to Correction: Request correction of incomplete, inaccurate, or outdated personal data
• Right to Deletion: Request deletion of your personal data in certain circumstances
• Right to Portability: Request transfer of your data to another service provider in a structured, commonly used format
• Right to Anonymization or Blocking: Request anonymization or blocking of unnecessary or excessive data
• Right to Information: Request information about public and private entities with which we share your data
• Right to Revoke Consent: Withdraw your consent for data processing at any time (where processing is based on consent)
• Right to Object: Object to processing of your data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 15 days as required by LGPD.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our site.

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage of sensitive information with encryption at rest
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data on a need-to-know basis
• Staff training on data protection and privacy best practices

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to maintain industry-standard security practices.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on the type of information:

• Medical Records: Retained for 20 years as required by Brazilian medical record regulations
• Financial Records: Retained for 5 years as required by Brazilian tax and accounting laws
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Anonymized after 26 months

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policy and applicable laws.

Your personal information may be transferred to and processed in countries other than Brazil, including countries that may not have the same data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by Brazilian data protection authorities
• Transfers to countries with adequate data protection levels recognized by Brazil
• Your explicit consent for specific transfers

By using our services, you acknowledge and agree to the transfer of your information as described in this policy.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected], and we will delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.