Scope and responsible business
Biopeptídeo is a U.S.-operated marketing platform. Brazil’s Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018) may apply to processing connected with people in Brazil regardless of where the business is incorporated. Applicable U.S. privacy obligations also require review once the legal entity, operating states and data practices are confirmed.
The legal entity name, business address and monitored privacy-contact channel have not yet been supplied. Biopeptídeo is the public-facing brand, not a verified legal controller identification. This draft does not establish full privacy compliance.
Data handled by this site
Doctor signup and accounts store email, authentication information and submitted professional details. Doctor profiles and onboarding retain name, CRM and state, specialty, clinic, location, practice operations and peptide-interest answers. Registration does not verify professional credentials.
The research-interest form stores name, email, optional phone, age, state, goals and any optional conditions or medications submitted, together with the form’s consent. Health details are sensitive personal data. Submission is not enrolment, a medical assessment or a verified referral to a clinical partner.
The contact form is currently a demonstration: its values remain on the page and its submit button does not deliver a message. It must not be used to send privacy requests, complaints or urgent information.
The wellness guide transmits the text you enter to Lovable AI to generate an educational response. Goals and responses are not saved to your Biopeptídeo account or application database. This is not a promise of zero retention: provider processing, logs, retention periods and processing locations have not been confirmed. Avoid identifying yourself or another person and do not enter records or detailed medical histories.
Browser storage remembers the information acknowledgement and authentication session. Hosting, security and service providers may process technical request or error data. This draft does not assert that no cookies, provider logs or analytics exist.
Purposes and legal bases
Submitted professional data supports account access and self-owned profile/onboarding records. Research answers support recording an expression of interest. Wellness text supports the requested educational response. Authentication and technical information support site operation and security.
The legal basis for each processing activity must be documented by the controller: where applicable, requested services or preliminary steps (LGPD art. 7, V), legal obligations (art. 7, II), consent (art. 7, I), or legitimate interest after assessment (art. 7, IX). Merely listing these bases does not establish that each is applicable.
Health data requires an applicable basis under LGPD art. 11. Ordinary legitimate interest is not a basis for sensitive health data. Consent, where relied upon, must be specific, highlighted, informed and tied to a defined purpose; general acceptance of terms is not sufficient. Do not submit sensitive information until the controller and privacy channel are identified and the processing has been reviewed.
Providers and cross-border processing
Lovable Cloud supports authentication and application storage; Lovable AI processes wellness inputs. Hosting and delivery providers also support the site. The code does not establish a completed clinical-partner disclosure or a transfer to research agencies.
Actual recipients, processing countries, retention terms and any onward transfers must be confirmed. International transfers subject to LGPD require a valid mechanism under arts. 33–36 and Resolution CD/ANPD 19/2024, such as applicable ANPD standard contractual clauses. U.S. incorporation and confidentiality alone do not establish a compliant transfer.
Retention and security
Research submissions and professional records are stored beyond the form session. No fixed deletion schedule or automated erasure process has been verified. Wellness page contents are not stored as account records, but provider retention remains subject to confirmation. The controller must define and implement purpose-specific retention, deletion and security measures; this draft makes no guarantee that processing is risk-free.
Your rights — direitos do titular
Subject to LGPD conditions, you may request confirmation, access, correction, anonymisation, blocking or deletion of unnecessary or unlawful data, portability, information on sharing and consent, and withdrawal of consent. Legal retention obligations and identity verification may affect a request.
A monitored privacy-request channel is not configured. The demonstration contact form cannot receive these requests. Publishing the controller’s legal identity and a working contact is a launch requirement; no response-time promise is made here. You may consult ANPD’s official guidance and petition channels using the links below.
Minors and policy updates
The website acknowledgement is intended for adults aged 21 or over; it is not identity verification. Do not submit a child’s information. The controller must address any inadvertently collected data under applicable law. Material policy changes should be communicated clearly and renewed consent obtained where required.