Show contents
In short
The site and the questionnaire collect the minimum: your name, contact, the chosen package and what you write yourself. The questionnaire may also ask your due date and travel plans; “not sure yet” is a fine answer. Names, contacts and answers are stored encrypted on a server in Russia (Moscow) and deleted or anonymized within the periods below.
Who processes your data?
Your data is processed by Katerina, a doula in Florianópolis, Brazil. The site: doulafloripa.com. For any questions about data, write to Katosik181@gmail.com: this address serves as the contact for requests (in terms of Brazil’s LGPD law, this is the encarregado, the person in charge of communication).
What data is collected?
| Where | What you provide | What is recorded automatically |
|---|---|---|
| The contact form on the site | Name, contact method and contact, the package you are interested in, a message (optional), consent | Language, page and referral source (UTM tags, if any), a hash of the IP address |
| The questionnaire, by a personal or shared link | Name, contact method and contact, due date (by default only the month), travel plans, package, consent, and optional answers (listed below) | Whether the link was opened and whether filling in began (without the content), a hash of the IP address |
| The contract | Full name, date of birth, passport details, phone: only if you decide to sign a contract | Nothing |
| Correspondence | Everything you write on Telegram, WhatsApp, by email or by phone | Nothing |
| Katerina’s notes in the family record | Notes on conversations, the stage of support, payment amounts, and after the birth the baby’s date of birth: as told by the family | Nothing |
Optional answers in the questionnaire:
- where you are flying from, where you want to give birth, how many adults and children are flying, whether you need a car;
- how you heard about Katerina, what worries you, your question;
- in some questionnaires: the parents’ citizenship, whether you have a CPF or RNM (the migrant registration number, Registro Nacional Migratório), whether you have family or close friends in Florianópolis.
An IP address hash is an irreversible “fingerprint” of the address used to protect against spam; the IP address itself is not stored in the requests database. The site forms and the questionnaire do not ask for diagnoses, birth history, passport details, scans and photos of documents, the partner’s name and contacts, the purpose of the trip or visas. Do not write about your health in open text fields.
Why do we need this data, and on what basis?
- To reply to your request and prepare for the conversation. Basis: your consent (LGPD, art. 7, I).
- To take your due date into account. This is health information, which the law considers sensitive. It requires separate explicit consent for a specific purpose (LGPD, art. 5, II and art. 11, I; for visitors from the EU: GDPR, art. 9(2)(a)). That is why the checkbox in the questionnaire is separate, not ticked in advance, and is stored with the version of the text and the time. You can answer the question about the due date with “not sure yet”.
- To draw up and perform a contract. Basis: preparation and performance of a contract at your request (LGPD, art. 7, V).
- To protect the site from spam. Basis: legitimate interest (LGPD, art. 7, IX).
If you are in Russia or are a Russian citizen, Russian law 152-FZ “On Personal Data” may also apply to your data. How its requirements, including the rules on storing the data of Russian citizens, apply to this site, we are clarifying.
Who sees the data?
- Katerina and her assistant, if he is involved in the support. The assistant has no access to passport details for the contract.
- The site’s technical administrator: access only to the extent needed to maintain the server; the content of questionnaires and contacts is stored encrypted.
- The hosting provider, FirstByte (a server in Moscow, Russia).
- Telegram. Notifications to Katerina and her assistant arrive in private chats and contain the family number, a first name without a surname and the package name; they contain no due date, dates or contacts. If you chose Telegram or WhatsApp to get in touch, the correspondence follows the rules of those services.
- Clinics, translators and public authorities: only at your request and to the extent needed for the service, or if the law requires it.
The data is not sold and is not passed on for advertising.
Where is the data stored?
The servers where the site’s data is stored are located in Russia (Moscow; hosting provider FirstByte). Backups of the database are stored on the same server. Katerina works with the data from Brazil. Telegram, WhatsApp and email services process data in their own countries under their own rules. Transfers between countries are carried out in compliance with applicable law (in Brazil: LGPD, art. 33).
How long is the data stored?
| Data | Period |
|---|---|
| A request or questionnaire, if cooperation has not started | 6 months after the last contact; spam: 30 days |
| A family’s data, while services are ongoing | No automatic deletion, then as in the row below |
| Completed families | 24 months, then anonymization: name, contacts, notes and answers are erased, while the stage, package, month of the request and amounts remain |
| Passport details and date of birth for the contract | 30 days after signing; if the contract is not signed: 30 days from creation or cancellation. The signed copy stays with the parties |
| The IP address hash | 30 days |
| A shortened IP address (last digits hidden) in web server logs | Until the log is overwritten by automatic rotation; the period depends on site traffic |
| The log of access to sensitive data (without the values themselves) | 24 months |
| Database backups | No longer than 35 days |
| A questionnaire draft in your browser | 7 days, only on your device |
What are your rights?
You can find out what data about you is processed, get a copy, correct inaccuracies, demand deletion, blocking or anonymization, receive the data in a portable form, find out to whom it was passed, and withdraw your consent at any time (LGPD, art. 18; for visitors from the EU: GDPR, art. 15–22). Processing before withdrawal remains lawful (LGPD, art. 8, § 5).
If the reply does not satisfy you, you can complain to Brazil’s data protection authority (ANPD), and where the GDPR applies, to the supervisory authority of your country (art. 77).
Write to Katosik181@gmail.com. If you gave an email address in the form, write from it; if you gave a messenger or phone, name that contact in your email. This makes it easier to confirm that the request is yours. The request costs nothing (LGPD, art. 18, § 5). A reply with a full account of your data arrives within 15 days at the latest (art. 19, II). Deleted data leaves the backups within 35 days; each party deletes correspondence in messengers on its own side.
Consent is voluntary, but without it the form and the questionnaire will not be sent. You can also contact Katerina directly.
Cookies and browser memory
The questionnaire and the request form do not use cookies for tracking and advertising and do not load external scripts. The site’s fonts and maps are its own; no external ones are loaded.
The browser’s memory stores the referral source for the duration of the session (to include it in your request if you send one), and a questionnaire draft for 7 days. This data stays on your device.
Visit counter. For statistics, the pages of the site run Google Analytics (and Yandex Metrica, if it is connected). It stores a cookie in your browser and sends Google (Yandex) anonymised information about the visit: which pages were opened, the type of device and browser, the country and city, and where you came from. IP addresses are not kept in the reports, and advertising features and personalisation are switched off. The information is used only for visit statistics. You can opt out in your browser settings (block cookies) or with a blocker extension: the site works the same.
How is the data protected?
Names, contacts, due date, questionnaire answers, notes and passport details are stored in the database encrypted, and the fields remain encrypted in backups. Sign-in to the control panel is protected by personal confirmation through Telegram, access to sensitive data is recorded in a log, and the personal link to the questionnaire is single-use and valid for a limited time. Absolute protection does not exist; if an incident occurs that may cause you harm, you and the supervisory authority will be informed (LGPD, art. 48).
Children
The site is not intended for people under 18, and the forms do not ask for information about children: in the optional part of the questionnaire you can only state how many adults and children are flying. After the birth, Katerina may note the baby’s date of birth in the family record as told by the parents. If a child’s documents are needed for a service, consent will be requested from one of the parents or a legal representative (LGPD, art. 14, § 1).
Changes
The current version is always on this page. Version: 1.0. Updated: October 16, 2026. If the purposes of processing or the data involved change, the version will be updated, and new consents will be tied to the new version. See also “Terms of use” and “Legal notice”.