Privacy Policy

1. Who we are

Abranghe — Brazilian Hereditary Angioedema Association is a non-profit organization founded in 2010, based in São Paulo, Brazil. We support patients and families affected by Hereditary Angioedema (HAE) in Brazil.

For questions regarding this policy or your personal data, please contact us at abranghe@abranghe.org.br.

2. Data we collect

We collect personal data only when you voluntarily provide it through our forms. The data may include:

3. How we use your data

• Registration and identification of patients, family members and healthcare professionals associated with the organization.
• Communication about activities, events, campaigns and newsletters from Abranghe.
• Community mapping of HAE in Brazil for support and advocacy actions.
• Responding to inquiries submitted through the contact form.
• Listing healthcare professionals on the website, only when expressly authorized by the doctor.

4. Legal basis

The processing of your personal data is based on your consent (Articles 7, I and 11, I of the LGPD), freely, informedly and unambiguously given when filling out the forms.

For sensitive personal data (health data), consent is specific and highlighted, as required by Article 11, I of the LGPD.

5. Data sharing

Abranghe does not sell, trade or rent your personal data to third parties.

Data may be shared only in the following situations:

• Google Workspace: forms use Google Forms as a collection platform, and data is stored in the association's Google Drive.
• Legal obligation: when required by law or court order.
• Registered doctors: name, city and state may be listed on the website, only when the professional expressly authorizes it.

6. Storage and security

Your data is stored securely in Google Workspace, which employs technical protection measures including encryption in transit and at rest.

Access to the data is restricted to authorized members of Abranghe's board of directors. Unauthorized third-party access is prohibited.

7. Data retention

Personal data will be retained as long as the relationship with Abranghe lasts or as long as necessary to fulfill the purposes described in this policy. You may request the deletion of your data at any time.

8. Your rights

Under the LGPD (Article 18), you have the right to:

9. Cookies, analytics and tracking technologies

This website does not use its own cookies for tracking or behavioral analysis.

To understand how visitors navigate the site (most visited pages, countries of origin, devices), we use Umami Analytics, an open-source tool hosted on our own servers (analytics.abranghe.org.br). Umami does not use cookies, does not collect IP addresses, does not individually identify visitors, and does not share data with third parties. All metrics are aggregated and anonymous.

Libraries loaded via CDN (TailwindCSS, Lucide Icons, Google Fonts) may set technical cookies necessary for functionality, according to their respective privacy policies. These cookies are strictly technical and are not used for tracking.

10. Virtual Assistant (chat.abranghe.org.br)

Abranghe provides an AI-powered Virtual Assistant, accessible at chat.abranghe.org.br, for registered patients and healthcare professionals.

Access to the Virtual Assistant requires individual login (email and password), granted exclusively after registration approval by the Abranghe team.

11. Children and minors' data

Registration of patients under 18 years of age must be done by their legal guardian, who will be the holder of consent for data processing, in accordance with Article 14 of the LGPD.

12. Changes to this policy

This policy may be updated at any time to reflect changes in our practices or applicable legislation. The most recent version will always be available on this page.

Last updated: April 2026.