Privacy Policy

Last updated: August 13, 2026

This Privacy and Cookies Policy explains how the personal data of visitors to www.vitoriaburnierpsi.com may be collected, used, stored, and shared.

Personal data is processed in accordance with Brazilian Federal Law No. 13,709/2018 — the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or LGPD) — and all other applicable regulations.

1. Data Controller

The person responsible for decisions concerning the processing of personal data collected through this website is:

Maria Vitória Burnier dos Santos
Psychologist — CRP 12/27479
Florianópolis, Santa Catarina, Brazil
Website: www.vitoriaburnierpsi.com
WhatsApp: +55 (48) 98838-3633
Email for privacy-related matters: contato@vitoriaburnierpsi.com

These contact details may be used for questions about this Policy or to exercise rights provided for under data protection law.

2. Scope of This Policy

This Policy applies to data processed when a visitor:

browses the website;
completes a form;
makes contact through any of the buttons, links, or channels provided;
requests information or an appointment;
interacts with cookies and advertising analytics or measurement tools.

Data generated in the context of psychological care, such as professional records and clinical information, is also subject to professional confidentiality and to the ethical and regulatory standards applicable to Psychology. These records are not used for advertising purposes.

3. Data That May Be Collected

3.1. Data Provided by the Visitor

When contacting the practice or requesting an appointment, the visitor may provide data such as:

name;
email address;
telephone or WhatsApp number;
availability;
preference for online or in-person sessions;
preferred language;
content of messages sent;
other information provided voluntarily.

Visitors are advised not to submit extensive clinical accounts or sensitive information that is unnecessary for the initial contact through the website form or in initial messages.

3.2. Data Collected While Browsing

The website and the technology services used to operate it may automatically collect information such as:

IP address;
date and time of access;
device type, browser, and operating system;
approximate location;
pages visited;
source of the visit;
time spent on and interactions with the website;
clicks on contact or appointment buttons;
cookie identifiers and, where applicable, advertising-related identifiers.

This information may be used for security, website operation, statistical analysis, website improvement, and advertising performance measurement.

3.3. Sensitive Personal Data

Messages related to seeking psychological care may, in certain circumstances, reveal health information or other data considered sensitive under the LGPD.

When this occurs, such data will be processed only to the extent necessary to respond to the contact, assess the possibility of providing care, carry out preliminary procedures requested by the data subject, or comply with applicable legal, regulatory, and professional obligations.

Sensitive data, clinical information, and the content of messages will not be used to create advertising profiles, build advertising audiences, or personalize advertising.

4. Purposes of Processing

Personal data may be used to:

respond to requests for information;
facilitate contact and the scheduling of preliminary consultations or sessions;
provide services requested by the data subject;
organize contacts and communications related to psychological care;
ensure the operation and security of the website;
prevent fraud, abuse, and unauthorized access;
understand, through statistical analysis, how the website is used;
improve the website’s content, accessibility, and browsing experience;
measure visits and conversions resulting from advertising campaigns;
comply with legal, regulatory, ethical, or professional obligations;
exercise or defend rights in administrative, judicial, or extrajudicial proceedings.

Visitors’ personal data is not sold.

Promotional communications by email or WhatsApp will be sent only when there is an appropriate legal basis, particularly the data subject’s consent, and recipients will always be able to opt out.

5. Legal Bases

Depending on the purpose and nature of the data, processing may be based on:

the data subject’s consent;
preliminary procedures related to potential psychological care, carried out at the data subject’s request;
performance of a contract or provision of a service;
compliance with a legal or regulatory obligation;
the regular exercise of rights;
legitimate interests, particularly website security, abuse prevention, and basic website improvement, while respecting the data subject’s rights and reasonable expectations;
legally established grounds for the processing of health data by healthcare professionals, where applicable.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

6. Cookies

Cookies are small files stored on a visitor’s device to enable website operation, remember preferences, or collect information about browsing activity.

The website may use the following categories:

Necessary Cookies

These cookies are used for essential functions such as security, stability, page loading, and the operation of website features. Disabling them may impair certain features.

Functional Cookies

These cookies remember a visitor’s choices and preferences, such as language or browsing settings.

Analytics Cookies

These cookies help provide a statistical understanding of how visitors use the website, which pages they visit, and how their experience may be improved.

Advertising and Measurement Cookies

Once advertising campaigns are implemented, these cookies may be used to identify the source of a visit, attribute results to advertisements, and measure actions such as submitting a form or clicking a contact button.

Where required, non-essential cookies will be activated only after the visitor has given consent.

Visitors may accept, reject, or customize cookies through the consent banner available on the website. They may also change their browser settings, although doing so may affect certain features.

An up-to-date list of cookies, providers, purposes, and retention periods may be viewed in the website’s cookie settings.

7. Wix and Analytics Tools

The website is hosted on the Wix platform, which may process technical data necessary for hosting, security, operation, form storage, and traffic analysis.

When a cookie banner is active, non-essential analytics and marketing tools must respect the choices made by the visitor.

More information about Wix’s processing practices is available in its Privacy Policy: https://www.wix.com/about/privacy

8. Google Analytics and Google Ads

The website may use tools such as Google Analytics, Google Ads, Google Tag Manager, and standard conversion measurement in the future.

When these integrations are active, Google may receive information such as the visitor’s IP address, device characteristics, the page visited, the source of the visit, an advertising click identifier, consent status, and the occurrence of certain conversion events.

This data may be used to:

generate website traffic statistics;
measure website performance;
identify which campaigns generated visits or contacts;
prevent fraud and automated access;
technically optimize advertising campaigns.

Form and message content, as well as names, telephone numbers, clinical information, or other data that reveals a visitor’s health status, will not be sent to Google for personalization or advertising measurement based on identifiable data.

Given the nature of psychological services, the following will not be used:

remarketing lists made up of visitors to this website;
first-party audience segments based on visitors or patients;
Customer Match using contact or patient data;
enhanced conversions that transmit email addresses, telephone numbers, or other personal data to Google;
clinical data or health information for advertising targeting.

Any conversion measurement must be limited to generic events, such as “contact button clicked” or “form submitted,” without transmitting the content of the communication.

More information is available on the page “How Google uses information from sites or apps that use our services”: https://policies.google.com/technologies/partner-sites?hl=en

9. Data Sharing

Data may be shared, to the extent necessary, with:

Wix, for website hosting, security, and operation;
Google, when analytics or advertising tools are active and authorized;
Meta and WhatsApp, when the visitor chooses to use these channels;
providers of technical, administrative, or legal services who are subject to confidentiality obligations;
public authorities, when required by law, regulation, or a valid order;
professionals whose involvement is necessary for the exercise or defense of rights.

Data sharing will be limited to the information necessary for each purpose.

When clicking links that direct to WhatsApp, Google Maps, social networks, or other external services, visitors will also become subject to the privacy policies of those platforms.

10. International Data Transfers

Some technology providers, such as Wix, Google, and Meta, may store or process information on servers located outside Brazil.

When an international transfer occurs, the requirements of the LGPD will be observed, and mechanisms compatible with applicable law will be adopted, including security measures and appropriate contractual instruments.

11. Data Retention

Data will be retained only for the period necessary to fulfill the purposes described in this Policy, comply with legal, regulatory, or professional obligations, and allow for the regular exercise of rights.

Retention periods may vary depending on the nature of the data and the existence of a professional relationship. When there is no longer a legitimate purpose for retaining the data, it will be deleted or anonymized, except where continued retention is legally permitted or required.

12. Security

Reasonable technical and administrative measures are adopted to protect data against unauthorized access, loss, destruction, alteration, disclosure, or any form of improper processing.

Despite these measures, no internet-connected system offers absolute security. If an incident that may pose a relevant risk or cause significant harm to data subjects is identified, the measures required by law will be taken.

13. Data Subject Rights

Under the LGPD, data subjects may request, where applicable:

confirmation that their data is being processed;
access to their data;
correction of incomplete, inaccurate, or outdated data;
information about the purposes of processing;
information about data sharing;
anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed unlawfully;
data portability, in accordance with applicable regulations;
deletion of data processed on the basis of consent, except where retention is legally permitted or required;
withdrawal of consent;
information about the consequences of withholding consent;
objection to processing carried out in violation of the law;
review of decisions made solely by automated means, if any.

This website does not use solely automated decision-making to determine whether psychological care may be provided.

To protect a data subject’s privacy, confirmation of identity may be requested before certain requests are fulfilled.

Requests must be sent to contato@vitoriaburnierpsi.com and will be answered within the time frames established by law.

Data subjects may also lodge a complaint with the Brazilian National Data Protection Authority (Autoridade Nacional de Proteção de Dados, or ANPD), in accordance with the applicable procedures.

14. Changes to This Policy

This Policy may be updated to reflect changes to the website, the tools used, data processing practices, or applicable law.

The most recent version will always be made available on this page, together with the date of the latest update.