Privacy

The controller is BrightIntuition, Lda., which runs the Onda Saúde brand, with its registered office at Rua do Jornal de Notícias, 573, 2/3, 4100-298 Porto, Portugal. For any personal data matter, write to info@ondasaude.pt.

This website has a contact form, on the home page, that asks for your name, your email, an optional phone number and a message. We use these details only to reply to your request. The message is kept in the info@ondasaude.pt mailbox. We send it through an email service, Resend, which delivers it to that mailbox.

The form does not ask for health data. The website has no advertising pixels and no analytics tools.

Like any website, the hosting service logs technical request data, such as the IP address and browser, so the site works and stays secure. See also the cookies page.

You can reach us by phone, SMS, email, WhatsApp or the form on this website. We use what you send us to reply to your request.

When you first get in touch, please do not send us reports, test results, medication lists or other health details. If that information is needed, we agree a suitable way to share it later.

WhatsApp is a WhatsApp service with its own privacy rules. The message this site prepares is generic and contains no clinical information.

• Replying to you: to answer people who ask for information before they enrol.
• Providing the service: after enrolment, to assess, plan and coordinate the agreed care.
• Sharing with family: only with relatives the person supported has authorised, or with someone who has legal standing to receive the information.
• Marketing messages: only if you agree to receive them. You can stop at any time. Enrolment never depends on it.

Each purpose has its own legal basis under the GDPR. Consent is not a single basis for everything.

• Replying to you: steps taken at your request before a contract.
• Providing the service: performance of the contract.
• Health data: provision of health care by professionals bound by confidentiality, under Article 9(2)(h) of the GDPR.
• Sharing with family: the authorisation of the person supported, or legal standing.
• Marketing: your consent, which you can withdraw.
• Invoicing and other duties: compliance with legal obligations.

An employer that funds the service does not receive the clinical record. It only receives the administrative information needed and, when there are enough cases, aggregated figures that do not identify anyone. Taking part is voluntary for the employee.

Clinical records live in Onda’s service platform, used by the team supporting the person. They are not kept on this public website.

We do not sell personal data. We may share it with:

• professionals and providers involved in the plan, only as needed and with authorisation;
• suppliers that process data on our behalf, under contract and on our instructions;
• authorities, when the law requires it.

We keep data for as long as the purpose needs and for the periods the law requires, for example for clinical records and invoicing.

You have the right to access, correct, erase, restrict, object to and port your data, and to withdraw any consent you have given. To use these rights, write to info@ondasaude.pt.

You can also complain to the Portuguese data protection authority (CNPD), at www.cnpd.pt.