Last updated: September 29, 2026
This Privacy Policy explains how Hospimetal Indústria Metalúrgica de Equipamentos Hospitalares Ltda. (“Hospimetal”, “we”) collects, uses, shares and protects the personal data of people who visit hospimetal.com.br and use our forms, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD).
1. Data controller
Hospimetal Indústria Metalúrgica de Equipamentos Hospitalares Ltda., Brazilian company registration (CNPJ) No. 54.178.983/0001-80, located at Rua Brigadeiro Faria Lima, 2.701 – Parque Industrial – ZIP 16078-030 – Araçatuba-SP – Brazil.
2. Data we collect
- Data you provide in the quote and contact forms: name, company or institution, tax ID, e-mail, phone/WhatsApp, city, state, country, message and the products, colors and quantities you are interested in.
- Browsing data: IP address, browser and device type, pages visited, date and time of access and information collected by cookies (see section 8).
- Security data: information used by Google reCAPTCHA to tell people from bots and prevent automated messages (spam).
We do not intentionally collect sensitive personal data, such as health data. Please do not send this type of information through the forms.
3. How we use the data and legal basis
- Replying to quote and contact requests, sending proposals and following up on negotiations — legal basis: preliminary procedures related to a contract, at the data subject’s request (art. 7, V, LGPD).
- Providing support and technical assistance — legal basis: performance of a contract (art. 7, V).
- Protecting the website against fraud, spam and unauthorized access — legal basis: legitimate interest (art. 7, IX).
- Understanding how the website is used in order to improve it (visit statistics) — legal basis: consent, given in the cookie notice (art. 7, I).
- Complying with legal and regulatory obligations, including tax obligations — legal basis: compliance with a legal obligation (art. 7, II).
4. Who we share data with
Hospimetal does not sell or rent personal data. Data may only be shared with:
- service providers that make the website and communication possible, such as website hosting, e-mail service and Google (reCAPTCHA and, with your consent, Google Analytics), which process the data according to our instructions and their own privacy policies;
- Hospimetal’s authorized sales representatives and distributors, when necessary to handle your request in your region;
- public authorities, when required by law or court order.
5. International transfer
Some providers, such as Google, may store data on servers outside Brazil. In these cases, the transfer takes place in accordance with art. 33 of the LGPD, with providers that adopt adequate protection measures.
6. How long we keep the data
We keep data for as long as necessary to fulfill the purpose for which it was collected. Quote requests and contact messages that do not result in a sale are deleted within 2 (two) years. Data related to completed sales is kept for the periods required by tax law and for the regular exercise of rights.
7. How we protect the data
We adopt technical and administrative measures to protect data against unauthorized access, loss or alteration, such as a secure connection (HTTPS), restricted access to the admin panel with encrypted passwords and two-step verification, and a log of all changes. No system is completely immune to incidents; if one occurs that may cause relevant risk or damage, we will notify the data subjects and the Brazilian National Data Protection Authority (ANPD), as required by law.
8. Cookies
Cookies are small files stored in your browser. We use:
- Essential cookies: required for the website to work, such as remembering the items in your quote list, the chosen language and your cookie preference. They cannot be disabled.
- Analytics cookies (Google Analytics): used only with your permission, to produce aggregated visit statistics.
You can change your choice at any time under Cookie preferences, in the website footer, or delete cookies in your browser settings.
9. Your rights
Under art. 18 of the LGPD, you may request at any time: confirmation that we process your data; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed based on consent; information about who we share data with; and withdrawal of consent. You may also object to processing based on legitimate interest.
10. How to contact us
To exercise your rights or ask questions about this policy, contact our Data Protection Officer at hospimetal@hospimetal.com.br or by phone at +55 (18) 2102-0625. We will reply within the period set by law. You may also file a complaint with the ANPD (www.gov.br/anpd).
11. Changes to this policy
This policy may be updated to reflect changes to the website or the law. The date of the last update is always shown at the top of this page.