Controller and contact information
This notice describes data processing related to carus.com.br and initial contact with Carus — A Strategy House for Clinics. Carus LTDA, Brazilian business registration (CNPJ) 56.432.336/0001-88, is responsible for using data received to respond to requests. For privacy questions and rights requests, email [email protected] or call +55 (11) 99863-7764.
Data received and purposes
Browsing does not require registration. This website has no forms, login area, or payment facility. When you contact us through WhatsApp or email, we may receive your name, phone number, email, professional information, and the content you choose to send. We use this data to respond, assess fit, schedule conversations, and prepare proposals. Clicking the button does not send the WhatsApp message: you decide whether to send it in the app.
Legal bases
Consultation and proposal requests may involve preliminary contractual procedures at your request. Technical data necessary for security may be processed based on legitimate interests, considering necessity, proportionality, and data subject rights. Legal obligations and the exercise of rights may justify retaining records. When an activity requires consent, consent must be requested for that specific purpose; browsing does not authorize any use of data.
Hosting, security, and metrics
We use Cloudflare for hosting, secure delivery, and website protection. This infrastructure may process IP addresses, request information, browser details, and technical logs. Cloudflare Web Analytics provides visit and performance metrics; according to the provider's documentation, this feature does not collect or use visitors' personal data. Access metrics do not demonstrate sent messages, completed consultations, or sales.
Optional Google Analytics measurement
When you allow analytics, Google Analytics 4 records page views and interactions, including consultation-button clicks. These clicks indicate contact intent; they do not prove a message was sent, a conversation took place, or services were hired. We do not send WhatsApp conversation content, medical records, or patient data to Analytics. Our configuration sends the page path and button location without URL parameters. Advertising personalization features are not enabled. This measurement requires your consent and may involve Google processing data outside Brazil.
Cookies and browser storage
Google measurement loads only after you select “Allow analytics.” “Essential only” lets you browse without loading that tag. Your choice is stored in the browser for up to 90 days; when analytics is allowed, Google may create analytics cookies configured for 90 days. You can change your choice under “Privacy preferences” in the footer. When permission is withdrawn, the site deletes accessible analytics cookies and reloads without the tag. Security infrastructure may use technical mechanisms needed to prevent abuse. WhatsApp, Instagram, TikTok, and Google have their own policies when you access their services. Our website code does not use remarketing pixels.
Sharing and external services
We do not sell contact data. Responding to requests may involve the responsible Carus team members and necessary providers, such as Cloudflare, Google Analytics when authorized, WhatsApp, and email services. Sharing may also be required by law or necessary to exercise rights. These providers may process information outside Brazil; international transfers must follow applicable safeguards under Brazil's LGPD. Their policies explain their own data processing.
Retention and protection
Records are retained for as long as needed for responding to requests, applicable obligations, and the exercise of rights. Retention needs should be reassessed, with deletion or anonymization where appropriate. There is no single retention period for every category. We adopt technical and organizational measures proportionate to the processing, but no connected environment can promise zero risk.
Your rights
Under Brazil's LGPD, you may request confirmation of processing, access, correction, and, where applicable, anonymization, blocking, deletion, portability, information about sharing and consent, withdrawal of consent, and review of solely automated decisions. Requests are handled without charge, subject to legal requirements. We may ask for information strictly necessary to confirm your identity. Legal exceptions may apply to deletion. You may also submit a petition to Brazil's data protection authority, ANPD.
Patient information
This website is intended for professionals and managers interested in Carus services. Do not send medical records, test results, or other patient health data during initial contact. If a contractual relationship requires processing third-party data, responsibilities, purposes, and safeguards must be specifically defined.
Updates
Updated October 3, 2026. Significant changes in data use will be reflected on this page. To clarify a specific practice or exercise your rights, use the privacy contact listed above.
How Google uses data · Cloudflare privacy · WhatsApp privacy · ANPD
Terms of use