Privacy

Who is responsible

This website is maintained by Gervásio Mikami, MD, radiologist (CRM-SP 83838 · RQE 41169), who decides how the personal data collected here is handled.

Privacy enquiries: gm.mikami@gmail.com.

Data collected

Contact form: name, email address, the role you select (patient, healthcare professional or other), subject and the content of the message you choose to write.

Second opinion request form: your name, email address and phone number; study access details (portal address, access password or protocol, the facility where the study was performed, study type and body region); sensitive personal health data (current clinical history, past medical and surgical history and the reason for the request); the referring physician's details when provided; and a record of your acceptance of the consent statement, including its version and the date and time of acceptance.

Payment data for the second opinion: protocol number, amount and the Pix code generated for the charge, plus the payment status. No card data, banking passwords or financial credentials are collected or stored.

Teleradiology quotation form: identification and contact details of the responsible person plus administrative information about the request, such as institution, imaging modalities and estimated monthly volume.

Minimal technical data generated by browsing, such as the IP address logged by the hosting servers, processed for security and site operation.

Purpose

Data is used solely to reply to your message, assess whether the requested service is feasible, produce the requested imaging review, keep a record of the correspondence and comply with legal obligations applicable to medical practice.

It is never used for advertising, commercial profiling or sale to third parties.

Legal basis

Personal data is processed under the Brazilian General Data Protection Law (LGPD), based on your consent where applicable, on steps needed to reply to your contact or prepare a possible service, and on legitimate measures to keep the site secure and operational.

Sensitive health data submitted with a second opinion request is processed on the basis of the specific, highlighted consent given in the form itself and for the protection of the data subject's health in a procedure carried out by a healthcare professional, under article 11 of the LGPD.

Sensitive and health data

The dedicated channel for clinical information is the second opinion request form, which collects clinical history and study access details for the specific purpose of the requested review, under medical confidentiality.

The general contact form is not a channel prepared for health data. Please do not send clinical history, reports, imaging studies or any information about your medical condition through it.

Contact messages containing such content may be deleted without further processing.

Images and DICOM files are uploaded exclusively in the private case area, reached through an individual link and enabled after payment confirmation. Files are written to private storage with no public access and used only for the requested review.

Storage and security

Messages are stored in a database hosted on cloud infrastructure, with access restricted to the site owner and encrypted transmission.

Imaging studies uploaded in the private case area are written to private storage on the same cloud provider, with no public read access, reachable only through short-lived links generated server-side for the reporting physician. No security certifications we do not hold (such as HIPAA or ISO) are claimed.

No technical measure removes risk entirely, which is why unnecessary information should not be sent.

Sharing

Data is not sold and is not shared with third parties for their own purposes.

Technical providers — site and database hosting and the email provider used for replies — access data strictly as needed to operate the service. Disclosure may also occur where required by law or a competent authority.

Payment for the second opinion is settled through a financial institution and, once enabled, through a payment service provider (PSP) that issues the Pix charge and reports its confirmation. These parties receive name, email, phone where provided, amount and protocol number, and process the data under their own policies and applicable regulation. Clinical information and imaging studies are not shared with the payment provider.

Retention

Information is kept only as long as necessary for the purpose that prompted the contact and for legal obligations. It is deleted when no longer needed or upon request, except where retention is legally required.

Clinical data and the opinion issued are retained under medical confidentiality for the period applicable to medical records, and payment records for the period required by tax law.

Uploaded imaging studies are stored only for as long as needed for the review and for the retention period configured for the service. Deletion is performed administratively or on request; at this stage there is no scheduled automatic deletion.

Cookies and analytics

The site does not run its own behavioural advertising tools. Hosting and security infrastructure may generate the minimum operational records needed to run and protect the service.

Your rights

Under the LGPD you may request confirmation of processing, access, correction, anonymisation, portability, information about sharing, withdrawal of consent and deletion of your data.

Requests can be sent to gm.mikami@gmail.com and are answered within a reasonable period; identity confirmation may be required.

Updates

This policy may be revised to reflect changes in the site's features or in applicable law. The version published on this page is the one in force.