Privacy Policy
Last updated: November 2026
This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails.
This Policy explains how Mediport USA LLC (“Mediport”, “we”), located at Suite 203, 6965 Piazza Grande Ave, Orlando, Florida 32835, USA, collects, uses, shares and protects the personal data of people who visit mediportlabs.com or contact our team. As we serve people located in Brazil, we follow Brazil’s General Data Protection Law (Law No. 13,709/2018 — LGPD).
1. Data controller
The controller of personal data is Mediport USA LLC. Questions and requests about your data can be sent to our data subject channel and data protection officer: contato@mediportlabs.com.
2. What data we collect
We only collect the data needed to assist you:
- Contact form: name, mobile/WhatsApp number, email, the message sent and the page language.
- Support via WhatsApp or email: the data and messages you send us.
- Import process: identification data (name, ID document, CPF), contact details, delivery address, prescribing doctor’s details, the medical prescription and the ANVISA authorization — and, where applicable, the legal guardian’s data.
- Technical access data: like any website, the hosting provider automatically records technical data about visits (such as IP address, date and time, and browser), used for security and for the website to work.
Prescriptions, intended use and other health information are sensitive personal data and receive enhanced protection.
3. How we use data and on what legal basis
- Responding to your inquiry and providing information — based on pre-contractual steps requested by you and our legitimate interest in assisting those who contact us (LGPD, art. 7, V and IX).
- Enabling importation, shipping and order support — to perform the contract and comply with legal and regulatory obligations (art. 7, II and V).
- Processing health data (such as the prescription) — solely to enable the importation authorized by ANVISA, based on compliance with legal or regulatory obligations and your specific consent where required (art. 11, I and II, “a”).
- Website security and fraud prevention — legitimate interest (art. 7, IX).
We do not use your data for automated decisions or targeted advertising. We do not sell personal data.
4. Who we share data with
We share data only with those who need it to provide the service, and only to the extent necessary:
- technology providers: website hosting (Netlify), contact form delivery (Web3Forms), business email (Zoho) and WhatsApp (Meta);
- carriers and customs agents involved in delivering the product;
- public authorities, such as ANVISA and the Brazilian Federal Revenue Service, when required by law or necessary for importation.
5. International transfers
Mediport is based in the United States, and some of our providers keep servers outside Brazil. Your data may therefore be transferred to and stored abroad. These transfers take place to perform the service you requested, with appropriate security measures, under art. 33 of the LGPD.
6. How long we keep data
We keep data only for as long as needed for the purposes described: contact messages that do not lead to an order are kept for up to 2 years; import-related documents are kept for the period required by applicable health, tax and other regulations. After that, data is deleted or anonymized.
7. How we protect data
We adopt technical and administrative measures to protect your data against unauthorized access, loss or misuse, such as encrypted connections (HTTPS), access restricted to the responsible team, and providers with recognized security standards.
8. Your rights
Under art. 18 of the LGPD, you may at any time and free of charge:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- request data portability;
- find out who we share your data with;
- withdraw consent, where processing is based on it, and request deletion of data processed on that basis.
To exercise your rights, email contato@mediportlabs.com. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
9. Cookies
This website does not use tracking, analytics or advertising cookies. The website may store in your own browser only your language choice (Portuguese or English), with no personal data. When you follow links to third-party services such as WhatsApp, those services’ policies apply.
10. Children and adolescents
This website is not intended for people under 18. When the patient is a minor, data is provided and processed through their legal guardian, in the patient’s best interest.
11. Changes to this policy
This policy may be updated to reflect changes in our services or in the law. The version in force is always the one published on this page, with the date of the last update.
12. Contact
Mediport USA LLC · Suite 203, 6965 Piazza Grande Ave, Orlando, Florida 32835, USA
Data protection officer (data subject channel): contato@mediportlabs.com

