Privacy Policy

Summary

General Information
How We Collect Personal Data
What Data Is Collected
Purposes of Processing
Data Retention Period
Personal Data Security
Data Sharing
International Data Transfers
Rights of the Data Subject
Consent
Changes to the Privacy Policy
Jurisdiction

01 General Information

This Privacy Policy sets out how ambiwize collects, uses, stores and protects the personal data of users of the websites www.ambiwize.com.br and www.ambiwize.com. Our commitment is to ensure transparency and respect for the rights of data subjects, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13.709/2018), the Brazilian Internet Civil Framework (Law No. 12.965/2014), and other applicable regulations.

02 How We Collect Personal Data

Personal data is collected when the user interacts with the website, completes registrations, requests pharmaceutical services, subscribes to newsletters, or accesses content. Information such as name, email, CPF (Brazilian taxpayer ID), telephone, address and browsing data is recorded.

03 What Data Is Collected

Registration data: name, CPF, email, telephone, address
Sensitive data: health information when provided in the context of pharmaceutical services
Browsing data: cookies, IP address, location and interactions with the website
Marketing data: email address for sending newsletters and promotional content

04 Purposes of Processing

The data collected is processed for the following purposes:

Service delivery and customer support
Personalisation of browsing and user experience
Sending communications, promotions and scientific information
Fulfilment of legal and regulatory obligations
Continuous improvement of our services and content

05 Data Retention Period

Personal data is retained for as long as necessary to fulfil the purposes described above, or as required by legal obligations. Data may be deleted or anonymised upon request, except where retention is required by law.

06 Personal Data Security

ambiwize adopts technical and organisational measures to protect personal data against unauthorised access, destruction, loss, alteration or any form of inappropriate processing. Any incidents will be reported to data subjects and to the ANPD (Brazilian National Data Protection Authority), as required by law.

07 Data Sharing

Data may be shared with:

Service providers essential to the operation of the website and to customer support
Healthcare professionals, when necessary for the delivery of pharmaceutical services
Regulatory authorities, when required by law

All third parties are contractually bound to protect the data.

08 International Data Transfers

In the event of international data transfers, we will ensure that appropriate contractual clauses and safeguards are in place, as required by the LGPD.

09 Rights of the Data Subject

The data subject has the right to:

Confirmation of the existence of processing
Access, correction, anonymisation and deletion of data
Withdrawal of consent
Data portability and information on the use and sharing of data

To exercise these rights, the data subject must contact the Data Protection Officer (DPO) of ambiwize.

10 Consent

By using the ambiwize website and services, the user declares that they have read and accepted this Privacy Policy, authorising the processing of their data under the terms set out herein. Consent may be withdrawn at any time upon formal request.

11 Changes to the Privacy Policy

This Policy may be amended at any time to reflect legal updates or changes in our services. Changes take effect immediately upon publication. Users are advised to review this document periodically.

12 Jurisdiction

Any disputes arising from this Policy shall be resolved in accordance with Brazilian law, with the courts of the jurisdiction in which ambiwize maintains its registered office elected as the competent forum.

Data Protection Officer (DPO) Fabrice Seyller — ambiwize Email: fabrice.seyller@ambiwize.com

Technical Review Eric Tong Data Security Manager — ambiwize

Last updated: 5 May 2025 Governing law: LGPD – Law No. 13.709/2018 DPO: Fabrice Seyller