Privacy policy
In short: we use the data you send through the website only to talk to you about the diagnostic call and a possible proposal. We don't sell it or share it for advertising. You can ask to see, correct or delete your data at any time by emailing contato@nessosistemas.com.
Who we are
NESSO is a technology company based in São Paulo, Brazil, that builds and implements management and customer service systems. For the data sent through this website, NESSO is the data controller under Brazil's General Data Protection Law (Law 13,709/2018, LGPD). Data protection officer: contato@nessosistemas.com.
What data we collect
- In the form and booking: your name, the name of the clinic or company, WhatsApp, email (when requested), specialties, number of professionals, what weighs the most in your routine and the time chosen for the diagnostic call.
- About the visit: the page the form was sent from and, when you arrive through an ad, the campaign parameters (utm_source, utm_medium, utm_campaign).
We don't ask for health data or patient data on the website.
What we use it for
- To confirm and hold the diagnostic call you booked.
- To prepare and send a proposal, if it makes sense for you.
- To understand which channels bring in leads, so we can decide where to invest in marketing.
The legal bases are your consent (art. 7, I of the LGPD), given by checking the box on the form, and pre-contractual steps you requested (art. 7, V).
Who holds the data
The data is stored in a NESSO database, with access restricted to the NESSO team. To operate, we use infrastructure providers that process data on our behalf and follow our instructions: website and database hosting, email delivery and the WhatsApp platform for confirmation messages. Some of these providers may store data outside Brazil, with the safeguards required by the LGPD. We don't sell or transfer data to third parties.
How long we keep it
If the diagnostic call doesn't turn into a contract, we keep the data for up to 12 months after the last contact and then delete it. If it turns into a contract, the data follows the contract and the legal retention periods. You can ask for deletion before that.
Your rights
At any time and at no cost, you can ask for: confirmation that we process your data, access to it, correction, anonymization or deletion, portability, information about who we share it with and withdrawal of consent (art. 18 of the LGPD). Write to contato@nessosistemas.com; we reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
Cookies and measurement
The pages only store in your browser what they need to work. If we use ad measurement tools, they record that a form was sent, without its content.
Client clinics' data
When a clinic hires NESSO Health, patient and operational data is stored in a database in the clinic's name. In that case the clinic is the data controller and NESSO acts as the data processor, only following the clinic's instructions, as set out in the contract. Role-based access, weekly backups and a full data export at the end of the contract are part of that agreement.
Security
We use an encrypted connection (HTTPS), database access rules that prevent anyone outside the team from reading the leads, and backups. No system is infallible; if there is an incident that could put you at risk, we will notify you and the ANPD.
Changes to this policy
If this policy changes, the date at the top is updated. Relevant changes will be communicated to anyone with a diagnostic call or contract in progress.