Privacy policy
What personal data we collect when you book a sample collection, why, for how long, and how you can exercise your rights.
Last updated: September 26, 2026.
Who handles your data
The data controller is [POR DEFINIR], tax number (NIF) [POR DEFINIR], registered at Luanda – Angola. For any question about your data, write to geral@bgi.example.
What data we collect
When you book a collection: your name, mobile number and email; the unit, date and time you chose; the language you booked in; and the record that you accepted this policy. For bookings made at reception, email is optional. This site does not collect or display test results.
What we use it for
Only to book your collection and to contact you about it: the email to confirm the booking, the reminder the day before, and the notice if the booking is cancelled. We do not use your data for advertising or automated decisions.
On what basis
With your express consent, given when you book, under Angolan Law No. 22/11 of 17 June (Personal Data Protection Law). You can withdraw it at any time by cancelling the booking or contacting us.
For how long
An unconfirmed reservation is deleted after 15 minutes. The data that identifies you (name, mobile number and email) is automatically anonymised 90 days after the collection date; from then on only an unidentified record remains, for statistical purposes.
Who we share it with
We do not sell or hand over your data. The providers that receive it are the email service that sends our messages and, only if you choose to get the reminder by WhatsApp or Telegram, Meta or Telegram. We only disclose it to authorities when required by law.
Reminders by WhatsApp or Telegram
Only if you choose it: when booking, you can ask for the reminder by WhatsApp; after confirming, you can ask for it on Telegram. In that case, Meta (WhatsApp) or Telegram process your mobile number or your chat identifier, and the reminder message, which only states the unit, the date and the time. We never send anything about your tests through these channels. If you do not choose it, the reminder goes by email, as always. This data is deleted together with the rest, within the period stated above.
How we protect it
The connection to the site is always encrypted (HTTPS). Staff access bookings with two-step authentication and only see those of their own unit. Audit logs do not store names, and backups are encrypted.
Cookies and analytics
The public site uses no cookies, and no analytics or advertising tools. It only stores in your own browser your theme choice (light or dark) and that the intro animation has been seen. The anti-robot check runs in your browser, with no external services, and your IP address is used only briefly to stop repeated requests — it is not stored.
Your rights
You can ask for information about your data, access it, correct it, ask for it to be erased or object to its processing, by writing to geral@bgi.example. You can also lodge a complaint with the Data Protection Agency (Agência de Proteção de Dados, APD).