Privacy Policy

1. Who we are

Significado Lógico Lda. ("we", "our company"), with registered office at Av. Marcos Portugal Nº 17 A, 2845-545 Amora, Portugal, is responsible for developing and providing ConsultisMed. For any question about this policy or about your personal data, you can contact us at info@consultismed.online or by phone at 919 023 540.

2. Two different roles: the clinic and us

It is important to distinguish two types of data, because legal responsibility differs for each:

• Account and clinic data (name, professional email, role, the clinic's own billing data): here Significado Lógico Lda. is the data controller.
• Patients' clinical data (records, appointments, exams, patient invoices) entered into ConsultisMed by the clinic: here the clinic is the data controller and Significado Lógico Lda. acts only as a data processor — we store and protect this data on the clinic's instructions, but we do not use it for our own purposes. If you are a patient of a clinic that uses ConsultisMed and have questions about your clinical data, you should contact that clinic directly.

3. What data we collect

3.1 If you are a professional at a client clinic

• Identification data from your Microsoft account when you sign in (name, professional email, account identifier) — we do not store your password; authentication is performed directly by Microsoft.
• Role/permissions assigned within the application.
• Technical activity logs (access, changes) for security and audit purposes.

3.2 If you are a patient of a client clinic (Patient Portal)

• Identification and contact data provided by the clinic or by you (name, email, phone).
• Clinical data managed by the clinic: records, appointments, exams, invoices — encrypted in the database (AES-256).
• Payment data when you pay for an online consultation: the payment is processed by our payment partner (EuPago, for MB Way and Multibanco Reference) — we do not store card data or banking credentials.

3.3 If you fill in the contact form on this website

Name, email, phone, clinic name and the message you write. This form opens your email application to send us this data directly — it is not stored on this website.

4. What we use your data for

• Providing and maintaining the operation of the application and the Patient Portal.
• Authentication and permission-based access control.
• Electronic invoicing (including, when enabled by the clinic, the integration with Moloni).
• Processing online payments for consultations (via EuPago).
• Sending transactional emails (booking confirmations, invoices, access invitations) through the clinic's own Microsoft 365/Exchange.
• Security, anomaly detection and compliance with legal obligations.
• Responding to contact/demo requests.

5. Who we share data with

We do not sell personal data. We share data only with the following data processors, to the extent necessary to provide the service:

• Microsoft — authentication (Azure AD / Entra ID) and email sending (Microsoft Graph/Exchange) when the clinic uses that method.
• Moloni — certified electronic invoicing, when the integration is enabled by the clinic.
• EuPago — online payment processing (MB Way, Multibanco Reference).
• SLApp Helpdesk (Significado Lógico) — license and clinic domain verification; it does not receive clinical data.
• Infrastructure and hosting providers for our servers.

We may also disclose data when required by law or by order of a competent authority.

6. Where your data is located

Our servers and databases are hosted in the European Union. We do not transfer clinical data outside the European Economic Area.

7. Security

• All communication between your device, the application and our servers is encrypted via TLS/HTTPS.
• Clinical data is encrypted in the database (AES-256).
• Access to the application is controlled by permissions — each person only sees the modules and data they are authorized for.
• We perform regular backups of the code and the database.

8. How long we keep data

We keep data for as long as the clinic's account/subscription is active and, after that, for the period required by applicable law — namely the record-retention rules for clinical records and tax documents in Portugal. After that period, the data is deleted or anonymized.

9. Cookies and local storage

This website does not use advertising or third-party analytics cookies. We only use the browser's local storage (localStorage) to save your theme (light/dark) and language preference — data that never leaves your device or is sent to us.

10. Your rights

Under the GDPR, you have the right to access, rectify, erase or request the portability of your data, as well as to object to or request the restriction of processing, where applicable. If your clinical data is managed by a clinic that is a ConsultisMed client, that request must be made directly to that clinic; for data relating to your own access account, you can contact us directly. You also have the right to lodge a complaint with the CNPD (the Portuguese National Data Protection Commission).

11. Minors

ConsultisMed is not intended to be used autonomously by minors. Data of underage patients is managed by the responsible clinic, through a parent, guardian or legal representative.

12. Changes to this policy

We may update this policy from time to time. The date of the last update is always shown at the top of this page.

13. Contact

Significado Lógico Lda. — info@consultismed.online · 919 023 540 · Av. Marcos Portugal Nº 17 A, 2845-545 Amora, Portugal.