Privacy Policy

Last updated: August 9, 2026

1. Introduction

IF Estetica by Ivana Figueroa ("we", "our", "company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

Wellness & spa — not a medical clinic. We provide aesthetic massage and body wellness services. We do not collect, store, or process medical records, health questionnaires, diagnoses, or Protected Health Information (PHI). Any health-related questions are discussed in person with your own healthcare provider when needed.

2. Data We Collect

2.1 Data You Provide

We collect the following data when you:

  • Schedule an appointment: Name, phone, email, preferred date/time, desired service
  • Fill out contact form: Name, email, phone, message
  • Optional service notes you choose to share: Preferences to help schedule your visit (not a medical intake form)

2.2 Automatically Collected Data

  • IP address
  • Browser type
  • Pages visited
  • Date and time of access
  • Cookies (see our Cookie Policy)

3. How We Use Your Data

We use your personal data to:

  • ✅ Process and confirm appointments
  • ✅ Contact you about your appointments
  • ✅ Send appointment reminders (with your consent)
  • ✅ Respond to your requests and questions
  • ✅ Improve our services
  • ✅ Comply with legal obligations

4. Legal Basis (LGPD/GDPR)

We process your data based on:

  • Consent: When you give us explicit permission
  • Contract execution: To process appointments
  • Legal obligations: To comply with applicable laws
  • Legitimate interest: To improve our services

5. Data Sharing

We DO NOT sell your personal data.

We share data only with:

  • Service providers: Companies that help us operate (hosting, email, etc.) - only necessary data
  • Legal authorities: If required by law or court order

6. Data Security

We implement technical and organizational security measures:

  • ✅ SSL/HTTPS (encryption in transit)
  • ✅ Encryption of sensitive data
  • ✅ Restricted access to data
  • ✅ Strong passwords and authentication
  • ✅ Regular and secure backups

7. Data Retention

We keep your personal data only for as long as necessary:

  • Appointment data: 2 years after last appointment
  • Contact data: 1 year after last contact
  • Voluntary service preferences: up to 5 years or as required by applicable law, whichever is shorter

8. Your Rights (LGPD/GDPR)

You have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right of Rectification: Correct inaccurate or incomplete data
  • Right to be Forgotten: Request deletion of your data
  • Right to Portability: Receive your data in structured format
  • Right of Opposition: Object to processing of your data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise your rights, contact us:

We will respond within 30 days.

9. Cookies

We use cookies to improve your experience. See our Cookie Policy for details.

10. Children's Data

Our services are not directed to children under 18. We do not intentionally collect data from minors.

11. International Transfer

Your data may be processed and stored outside of Brazil/USA. We ensure all service providers meet adequate data protection standards.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or notice on the website.

13. Contact

For questions about privacy or to exercise your rights:

Version: 1.1
Date: August 9, 2026
Next review: August 9, 2027