Privacy Policy

This policy describes how Prime Health Report handles the personal data of site visitors and newsletter subscribers, under Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados, Law 13,709/2018 — “LGPD”).

What data we collect

If you only read the site, we do not collect data that identifies you. We do not use tracking cookies, there are no analytics tools installed and there are no advertising pixels.

If you subscribe to the newsletter, we collect your email and, when provided, your name and your chosen area of interest. We also record the date of subscription and which form on the site was used.

If you access the admin panel, we use strictly necessary cookies to keep your session authenticated. They are limited to the restricted area and do not follow public browsing.

Legal basis and purpose

Newsletter data is processed on the basis of your consent (LGPD, art. 7, I), given when you submit the form, for the sole purpose of sending our editorial briefing. We do not use this data for any other purpose, nor do we sell or share it with third parties for commercial purposes.

Who we share data with

We work with service providers that process data on our behalf, as processors:

• Vercel — site hosting. It keeps access logs, which may include IP addresses, for the platform’s retention period.
• Supabase — database, authentication and image storage, where newsletter data and editorial content are kept.
• MailerLite — newsletter delivery platform, which receives subscribers’ names and emails. The company is based in the European Union, which constitutes an international data transfer, supported by your consent and by a country with an adequate level of protection.
• Cloudflare — DNS service for the domain.

Embedded third-party content

Some pages embed YouTube videos and Spotify audio. When these players load, your browser communicates directly with those platforms, which may receive your IP address and browsing data under their own privacy policies. We use YouTube’s privacy-enhanced mode (youtube-nocookie) to reduce this collection. Fonts are served by the site itself, with no requests to third parties.

How long we keep data

Newsletter data is kept for as long as your subscription lasts. When you unsubscribe, your record is marked as inactive and removed from the mailing list; permanent deletion can be requested at any time through the channels below.

Your rights

The LGPD gives you the right to confirm whether your data is processed, access it, correct incomplete or outdated data, request anonymization or deletion, withdraw consent and request data portability.

To exercise any of these rights, write to us through our contact channel. We will respond as quickly as possible, within the legal deadlines. To unsubscribe from the newsletter, you can also use the unsubscribe link at the bottom of every issue, or the unsubscribe page on this site.

Security

The site runs entirely over HTTPS, with a restrictive content security policy. Access to database content is controlled by row-level permission policies, and the admin area requires authentication. No system is immune to incidents, but we adopt technical measures appropriate to the nature of the data processed.

Changes to this policy

If we start using audience measurement, advertising or other technologies that involve tracking, this policy will be updated and you will be informed before any collection, with the option to decline.