Privacy Policy
This policy explains, in plain language, what happens to your data when you visit drmarcelogobbo.com and, now, when you subscribe to the newsletter or create a free member account. The site remains static and built to be read; data is collected only when you choose, on your own initiative, to give your email to receive content.
1. Who is responsible for your data
The data controller is Dr. Marcelo Gobbo Jr., Family and Community Physician, CRM-MG 74.511 · RQE 69038, practicing in Uberlândia, Brazil. For anything related to personal data, including to exercise your rights, the channel is contato@drmarcelogobbo.com.
2. What data is collected
We only collect what you provide on purpose and the technical minimum needed for the pages to work:
- Newsletter and member account: when you subscribe, we collect your email (and your name, if you choose to give it). The member account uses passwordless login, through a link sent to your email.
- Email engagement: the platform that sends the newsletter records whether an email was opened and which links were clicked, to measure interest and deliverability in aggregate.
- Direct contact: if you write by email or WhatsApp, the data you send (name, contact and the content of your message).
- Technical browsing data: as with any website, the server logs access data (IP address, date and page) to deliver the pages and maintain security.
- Payment (future): should a paid subscription ever exist, payment data will be provided by you directly to the processor (Stripe) and is not stored by us.
We do not ask for or store health data through the site. Clinical information belongs to the consultation and the medical record, protected by medical confidentiality.
3. Why the data is used, and on what legal basis
- To send the newsletter and member content — legal basis: your consent (art. 7, I of Brazil's LGPD, Law 13.709/2018), given when you check the subscription box. You can withdraw it at any time, with a one-click unsubscribe in every email.
- To maintain your member account (login, preferences) — legal basis: performance of a service you requested (art. 7, V).
- To measure deliverability and interest in aggregate and to maintain security — legal basis: legitimate interest (art. 7, IX), with no automated decisions that affect you.
- To reply to your contact — legal basis: consent and pre-contractual steps (art. 7).
- To process a paid subscription (future) — legal basis: performance of a contract (art. 7, V) and legal/tax obligations for keeping payment records.
4. Processors and services that handle data for us
To function, the site and the newsletter rely on providers that act as processors, handling data only as instructed by this policy:
- Ghost — hosts the members area and sends the newsletter (stores your email and email engagement). See Ghost's privacy policy.
- Stripe (if and when a paid subscription exists) — processes payments. See Stripe's privacy policy.
- GitHub Pages — hosts the static site; the server logs access data per the GitHub policy.
- Google Fonts — when the page loads, your browser requests the font files from Google, which transmits your IP, per Google's policy.
5. International transfer
Some of these processors handle data on servers outside Brazil (for example, in the United States and the European Union). The transfer takes place with the safeguards set out in arts. 33 and 34 of the LGPD and in each provider's contractual and privacy terms. By subscribing, you are aware of this transfer.
6. Cookies
The site itself uses no tracking cookies. The members area (Ghost) uses strictly necessary cookies to keep you logged in after sign-in. Details are in the Cookie Policy.
7. When you get in touch
If you write by email or WhatsApp, on your own initiative, the data you send is used only to answer your request, such as booking a conversation or replying to a professional invitation.
For your safety, avoid sending detailed clinical information by email, WhatsApp or the newsletter before a consultation. Health information shared during care is protected by medical confidentiality, under the Code of Medical Ethics.
8. Your rights
The LGPD (art. 18) grants you, at any time and free of charge, the right to: confirm that processing exists; access your data; correct incomplete or outdated data; request anonymization, blocking or deletion; ask for portability; obtain information about sharing; and withdraw consent. To exercise any of these, write to contato@drmarcelogobbo.com. Unsubscribing from the newsletter is immediate, with one click at the bottom of any email.
9. Security
We adopt, and require of our processors, technical and administrative measures to protect your data against unauthorized access and against destruction, loss or alteration (art. 46 of the LGPD). No system is infallible; in the event of a relevant incident, the data subjects and the authority will be notified as required by law.
10. Retention
Your email is kept for as long as you want to receive the newsletter or keep the member account. When you unsubscribe or request deletion, the data is removed, except for records the law requires us to keep (for example, tax receipts for a payment).
11. Children and adolescents
The newsletter and the members area are intended for people over 18. We do not knowingly collect data from minors without their guardians' consent.
12. Changes
This policy may be updated to reflect changes to the site or the law. The date at the top shows the last revision; relevant changes will be announced here and, where appropriate, by email.