Privacy Policy | Contact Form

Last update: October 20, 2026

IHCare, S.A., as the controller of personal data, is committed to protecting the privacy and personal data of users who submit information through the contact form available on its website.

This Privacy Policy explains how personal data provided through this form is collected, used, stored, and protected, in compliance with Regulation (EU) 2016/679 of April 27, on the protection of natural persons with regard to the processing of personal data (GDPR), and other applicable legislation.

1. Personal data collected

When filling out and submitting the contact form, the following personal data may be collected, depending on the fields provided:

Name: for identification of the person making contact.
Email address: to respond to the request and establish related communications.
Phone number: for direct contact, when provided.
Company or institution: for identification of the entity represented, when applicable.
Subject or reason for contact: to properly identify and route the request.
Message: including information provided voluntarily by the user.

Technical data strictly necessary for the operation and security of the form may also be processed when effectively collected by the platform used.

IHCare recommends that no sensitive personal data be included in the message, namely health information, unless strictly necessary and with an appropriate legal framework.

2. Purposes of data processing

The personal data collected through the form is intended exclusively for the following purposes:

Receiving, analyzing, and responding to contact or information requests.
Providing clarifications regarding IHCare products, solutions, and services.
Following up on requests for commercial presentations, proposals, or collaboration.
Establishing contact with potential clients, distributors, partners, or other interested entities.
Ensuring the follow-up of communications related to the submitted request.
Ensuring the security of the form and preventing abusive use.

The collected data will not be used for sending newsletters or promotional communications unrelated to the request, unless there is an autonomous legal basis allowing such processing.

3. Legal basis for processing

The processing of personal data is carried out based on the following legal grounds, depending on the purpose:

Pre-contractual measures, under Article 6(1)(b) of the GDPR, when the contact is intended to obtain a proposal or prepare a contractual relationship with the data subject.
Legitimate interest, under Article 6(1)(f) of the GDPR, to respond to contacts, manage professional or institutional requests, and ensure communication follow-up, provided the rights and freedoms of the subjects do not prevail.
Compliance with legal obligations, under Article 6(1)(c) of the GDPR, when applicable.

When a specific purpose requires consent, it will be requested in a specific, free, informed, and unambiguous manner.

4. Sharing of personal data

IHCare does not sell personal data collected through the contact form.

Data may be processed by authorized IHCare employees and technological service providers that ensure the hosting, operation, storage, or routing of the submitted information.

These providers may only process the data for authorized purposes, subject to the contractually and legally required security guarantees.

Data may also be communicated to competent authorities when there is a legal obligation.

5. Retention of personal data

Personal data will be kept only for the period necessary to respond to the request and ensure the follow-up of the communication or any eventual commercial relationship.

When the contact gives rise to a contractual or commercial relationship, the necessary data may be kept for the periods applicable to that relationship and its respective legal obligations.

Once the applicable retention period ends, the data will be securely deleted or anonymized, unless its retention is legally required or necessary for the defense of rights.

6. Security of personal data

IHCare adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure or destruction.

Access to information collected through the form is limited to those persons and entities that need to process it for the purposes identified in this policy.

7. Data subject rights

Under applicable law, data subjects may exercise the following rights:

Right of access: to obtain information about the processed personal data.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of data, when legally applicable.
Right to restriction of processing: to request the restriction of processing under certain circumstances.
Right to object: to object to processing based on legitimate interests, under legal terms.
Right to data portability: to receive your data in a structured, commonly used, and machine-readable format, when applicable.
Right to withdraw consent: when processing is based on consent, to withdraw it at any time, without compromising the lawfulness of the processing carried out previously.

To exercise their rights, the data subject may contact IHCare via the address support@ihcare.pt.

The data subject also has the right to file a complaint with the National Data Protection Commission (CNPD), via www.cnpd.pt.

8. International data transfers

Whenever the technological service providers used for the operation of the form involve the transfer of personal data to countries outside the European Economic Area, IHCare will ensure the application of the mechanisms and guarantees legally required by the GDPR.

9. Changes to the Privacy Policy

IHCare may update this Privacy Policy whenever there are changes in the operation of the form, in personal data processing practices, or in applicable legal obligations.

The updated version will be made available on the website, with the date of the last update indicated.