Legal
Privacy Policy
Last updated: 2026-05-01
Six Medic ("we", "us") is a private medical practice based in Portugal. This policy explains what personal and health data we collect when you use our website and online consultations, how we use it and what rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.
Who is the data controller
Six Medic, contactable at info@sixmedic.com or +351 910 357 802, is the controller of the personal data described below. For questions about your data you can reach us at any time using either of those channels.
What data we collect
Identification and contact data (name, email, phone, country), clinical data you share to obtain a consultation (symptoms, medical history, medication, attachments you upload), payment metadata processed by Stripe (we never see your full card number) and technical data (IP, browser, basic analytics) needed to run the site securely.
Why we use it (legal basis)
Clinical data is processed to deliver the medical act you requested (Art. 9(2)(h) GDPR — provision of health care by a regulated professional bound by medical secrecy). Contact and payment data are processed to perform the contract you entered into when booking. Technical/analytics data is processed on the basis of our legitimate interest in keeping the site secure and improving it. Marketing emails, if any, are sent only with your explicit consent and can be withdrawn at any time.
Who can access it
Only the treating physician and strictly necessary staff. We use carefully selected processors: Stripe (payments), our cloud hosting and email provider, video-call infrastructure and our practice-management tools. These providers are bound by data-processing agreements and only handle the data needed to deliver their service.
How long we keep it
Clinical records are kept for the period required by Portuguese health legislation (currently a minimum of 5 years, longer for certain documents). Billing data is kept for 10 years for tax purposes. Other contact and technical data is deleted as soon as it is no longer needed.
International transfers
Some of our processors are located outside the EU. When that is the case we rely on the European Commission's Standard Contractual Clauses and additional safeguards to protect your data.
Your rights
You can request access, rectification, erasure, restriction, portability or object to processing of your data, as well as withdraw consent at any time. To exercise any of these rights write to info@sixmedic.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD — www.cnpd.pt).