This policy explains how MoonLion Hemp handles information on its institutional website and patient and professional portal. Health information and portal documents receive heightened care. Version 1.0 · October 29, 2026.
MoonLion Hemp is the brand responsible for this website. For privacy requests, contact [email protected]. The full legal identity of the data controller, its Brazilian mailing address and the direct contact for its data protection officer must be confirmed before real-data operations; this version does not invent a company number, legal name or officer.
It covers public-site visitors, people who contact us or subscribe to the newsletter, patients and professionals using the portal, and authorized team members. The development portal must use fictional data until its infrastructure, operations and this policy are approved for real use.
We may receive technical browsing information such as IP address, date and time, pages viewed, browser, device and security logs. The contact form prepares a message in the visitor’s own email application; the site does not store it as a submitted form. The newsletter records an email address, the request date and time, and confirmation or unsubscribe status. Campaign delivery is not active yet.
For authentication, Clerk processes account identifiers and associated login information, such as a verified email and user ID. The portal may store a full name and optional phone number. Authorized staff may consult these details to support and operate the journey. Passwords are managed by the authentication provider and are not stored by the MoonLion Hemp website.
A prescription may reveal sensitive personal health data. The portal may also receive an Anvisa import authorization, identification information and file metadata such as type, size, upload time, review status and validity. Use the authenticated portal only when the environment has been officially released. Do not send clinical documents, prescriptions, diagnoses or identity numbers through the newsletter, WhatsApp or public contact channel.
We use data to authenticate accounts, answer requests, operate the portal, receive and manually review documents, record journey steps and audit events, protect services, meet applicable obligations and respond to requests. The legal basis is determined for each operation and purpose; sensitive health data is processed only under a lawful basis allowed by Article 11 of Brazil’s LGPD, for a specific purpose and with restricted access. Consent to portal document handling does not authorize advertising or commercial profiling.
Authorized staff manually review portal documents; the system does not diagnose, recommend treatment or make automated clinical decisions. Documents are used for the administrative steps described in the portal. Document contents and clinical data must not be sent to Google Tag Manager, Google Analytics, Microsoft Clarity, Meta Pixel or other advertising tools.
Strictly necessary technologies support security, authentication and saved preferences. Optional analytics (Google Analytics and Microsoft Clarity), marketing (Meta Pixel and tags enabled through Google Tag Manager) and embedded media (YouTube video) remain disabled until you choose. Your choice is stored in this browser and can be changed at no cost using “Cookie preferences” in the footer. Rejecting optional cookies does not block institutional content. Exact cookies and lifetimes may vary with configured integrations.
Access is limited to authorized people who need the data for their duties. Service providers may include authentication (Clerk), secure traffic and infrastructure (Cloudflare), hosting, database and private file storage (including Cloudflare R2 when configured). In the portal, documents are sent to the private bucket through the API and encrypted by the application before storage; files have no public URL. Optional measurement tools listed in the cookie section may also be used. Each provider receives only information needed for its role under the applicable configuration. We do not sell personal data or share health data for advertising.
The planned portal infrastructure includes services and servers that may be outside Brazil, including in the United States. Data may therefore be stored or accessed internationally. Before real operations, providers, countries, contracts and applicable transfer mechanisms must be confirmed and documented under the LGPD and ANPD rules.
Data is retained for as long as needed for the stated purposes and applicable legal, regulatory and audit obligations. A final retention schedule by data type still requires approval. When data is no longer necessary and there is no basis to retain it, it will be securely deleted or anonymized. An administrative deletion request removes the authentication account, profile, stored documents and associated test orders. Receipts recording acceptance of policy and terms versions and minimum deletion-request records may remain in append-only audit tables, with a pseudonymized account reference and acceptance version/date; operational logs may also preserve technical identifiers of the team member who acted and a pseudonymized resource reference where retention is justified. The final retention schedule must be approved by category. Deletion requests may be subject to specific legal retention requirements, which will be explained to the data subject.
The portal is designed to restrict access by role, protect documents in private storage and record relevant administrative actions. No internet-connected service can guarantee zero risk. Confirmed incidents that may cause relevant risk or harm will be handled and communicated to data subjects and the ANPD when required by law.
You may request confirmation of processing, access, correction, sharing information, portability where applicable, anonymization, blocking or deletion where legally available, and withdrawal of consent. Some requests may be limited by legal obligations or the need to preserve valid records. To exercise your rights, email [email protected] from the address associated with the account, without attaching unnecessary health documents.
The patient portal is intended for adults. Do not create accounts or submit information about children or adolescents without prior confirmation of legal requirements, proper representation and a permitted purpose. If we identify information submitted improperly, we will assess restriction and deletion under applicable law and the data subject’s best interests.
Newsletter subscription is optional and requires an affirmative action. Entries remain pending confirmation; campaigns and email delivery are not active yet. Once unsubscribe is available, it will be free and available at any time. Consent to receive content does not change how portal documents are handled.
This policy may be updated to reflect legal, operational or provider changes. Material changes will receive a new version and, when required, a new acceptance. Acceptance records for each version are separate from cookie preferences.