Privacy Notice

Summary

1. Introduction
2. Terms and Definitions
3. Important Information
4. Purpose of this Privacy Notice
5. Special Note for Legal Representatives
6. Contact Information of the Data Protection Officer (DPO)
7. Data We Collect About You
8. Your Duty to Inform Us About Changes in Your Personal Data
9. How Your Personal Data is Collected
10. Cookies
11. How We Use Your Personal Data
12. Disclosure of Your Personal Data
13. How We Store Your Data
14. Data Retention Period
15. International Data Transfers
16. Data Security
17. Your Rights as a Data Subject
18. What Might We Need From You?
19. Response Timeline
20. Applicable Law and Jurisdiction
21. Updates to This Privacy Notice

1. Introduction

Welcome to Multicare. We are dedicated to ensuring the protection, privacy, and security of personal data for all individuals we interact with, in full compliance with applicable laws.

By using our services, you entrust us with your information. We recognize the importance of this responsibility and strive to safeguard your data while empowering you with control. Our values—commitment, ethics, assertiveness, transparency, and respect—guide us in building and maintaining trust.

This Privacy Notice (“Notice”) has been prepared in compliance with the Brazilian General Data Protection Law (LGPD) to explain:

• The data we collect.
• Why we collect it.
• How you can update, manage, export, or delete your data.
• Your rights as a data subject.

Sharing your personal data is not mandatory. However, refusal to provide certain information may limit our ability to fulfill specific purposes described in this Notice.

2. Terms and Definitions

• Multicare: Refers to Multicare Pharmaceuticals Ltda., a private entity registered under CNPJ/ME No. 24.331.585/0001-90, headquartered at R. Gomes de Carvalho, 1666, cj. 151, 15th floor, Vila Olímpia, São Paulo, Brazil.
• Accept/Acceptance: Refers to the explicit agreement by the data subject (e.g., clicking “I agree”).
• Cookies: Small files or data packets sent to your device to identify it and collect information to enhance services.
• Data Subject: The individual to whom the personal data belongs.
• Personal Data: Information that directly or indirectly identifies a natural person.
• Sensitive Personal Data: Information regarding racial or ethnic origin, religious or political beliefs, union membership, health, genetic or biometric data, and sexual orientation.
• Processing: Any operation involving personal data, including collection, storage, access, sharing, or deletion.
• Controller: Entity responsible for decisions about data processing.
• Processor: Entity processing data on behalf of the controller.
• DPO: The appointed Data Protection Officer responsible for communication regarding this Notice.

3. Important Information

Purpose of this Privacy Notice
This document provides comprehensive information on how Multicare collects and processes personal data.

Special Note for Legal Representatives
The processing of personal data from minors requires explicit consent from a parent or legal guardian as per Article 14, Paragraph 1 of the LGPD.

4. Contact Information of the DPO

For questions or requests related to this Privacy Notice, contact us at:
Email: privacidade@multicarepharma.com.br

Our DPO is available to assist you promptly.

5. Data We Collect About You

We only collect personal data necessary for our operations, including:

6. Your Duty to Inform Us About Changes

You are responsible for keeping your personal data accurate and up-to-date.

7. How Your Personal Data is Collected

• Direct Interactions: Through forms, emails, phone calls, etc.
• Cookies: To optimize your website experience.
• Public Sources: E.g., Brazilian Open Data Portal.

8. Cookies

Cookies are small files that customize your online experience. You can manage your cookie preferences at any time. Note that disabling certain cookies may limit website functionality.

9. How We Use Your Personal Data

Your data is used for purposes such as:

• Identification and authentication.
• Customer support and assistance.
• Legal compliance.
• Personalizing your website experience.

10. Disclosure of Your Personal Data

We may share your personal data with:

• Public authorities to meet legal requirements.
• Service providers assisting with business operations.
• Third parties for purposes outlined in this Notice.

11. How We Store Your Data

Data is stored securely according to applicable standards. Retention periods are limited to what is necessary to meet the stated purposes.

12. Data Retention Period

Your personal data will only be retained for as long as necessary to fulfill the purposes outlined in this Notice.

13. International Data Transfers

While international transfers are not routine, some services may require data storage on servers outside Brazil. In such cases, Multicare ensures compliance with Brazilian law.

14. Data Security

We use robust systems and technical measures to protect your data. In case of a security incident, you will be informed promptly as required.

15. Your Rights as a Data Subject

Under Article 18 of the LGPD, you have rights, including:

• Confirmation of data processing.
• Access to your personal data.
• Correction of incomplete or inaccurate data.
• Anonymization, blocking, or deletion of unnecessary data.
• Data portability.
• Revocation of consent.

To exercise your rights, contact our DPO.

16. Applicable Law and Jurisdiction

This Privacy Notice is governed by Brazilian law. Disputes shall be resolved in the courts of São Paulo, Brazil.

17. Updates to This Privacy Notice

Multicare may update this Notice periodically. Check official channels for the latest version.

The Data Protection Officer (DPO) appointed by Multicare Pharma is Guilherme Braguim and is available to assist with all matters related to Privacy and Personal Data Protection via email: dpo@multicarepharma.com.

Last Updated: February 3, 2025.