Privacy Policy

Privacy Policy & Cookie Disclosure

Effective Date: September 2026
Last Updated: September 2026
Data Controller: Ștefan Prohnițchi d/b/a anicetix.pro (“Architect,” “anicetix.pro,” “we,” “us,” “our”)
Website: https://anicetix.pro
Privacy Inquiries & Data Rights Requests: info@anicetix.pro

1. OVERVIEW & SCOPE

This Privacy Policy describes how anicetix.pro collects, uses, stores, shares, and protects personal information obtained through our website (https://anicetix.pro), our commercial diagnostic forms (including the Asymmetric Pipeline Teardown intake), and our advisory communications with your practice.

We operate under a strict data minimization principle. In practice, our advisory services are exclusively intended for commercial enterprises, professional practices, and business operators (B2B). Specifically, we comply with:

  • The General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR;
  • The e-Privacy Directive (Directive 2002/58/EC) and applicable national implementing laws;
  • The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA / CPRA”);
  • Other applicable state and national data privacy statutes.

2. STRICT EXCLUSION OF PATIENT & HEALTH DATA (HIPAA & GDPR ART. 9)

CRITICAL NOTICE FOR HEALTHCARE & DENTAL PRACTICES:
anicetix.pro is an architectural and systems consultancy. WE DO NOT COLLECT, SOLICIT, INGEST, OR STORE PROTECTED HEALTH INFORMATION (PHI) UNDER HIPAA OR SPECIAL CATEGORY HEALTH DATA UNDER ARTICLE 9 OF THE GDPR.

In practice, when your practice submits intake diagnostics, CRM architecture reviews, or practice teardown questionnaires, DO NOT INCLUDE PATIENT NAMES, MEDICAL HISTORIES, TREATMENT RECORDS, OR IDENTIFIABLE CLINICAL CHARTS. Any patient data received inadvertently will be purged immediately without retention, ensuring your practice and patients remain completely safeguarded.

3. CATEGORIES OF PERSONAL DATA COLLECTED

Specifically, we collect only the minimum personal information necessary to deliver commercial architecture services, evaluate teardown and partnership applications submitted by your practice, and maintain website security.

3.1. Information You Provide Directly

  • Commercial Contact Data: Your name, professional business email address, phone number (or WhatsApp handle), practice or firm name, professional practice website URL, and primary geographic location.
  • Practice Diagnostic & Intake Data: Your practice business model details, practice specialty (e.g., Orthodontics, High-Ticket Dentistry, Commercial Law), your target Average Engagement Value (AEV), your current software stack (CMS/CRM), identified practice pipeline bottlenecks, and general practice revenue ranges submitted through your intake questionnaires.
  • Transaction & Billing Data: Your company legal name, billing address, tax identification number (VAT/CUI/EIN), and payment confirmation. Note: In practice, we do not process or store raw credit card numbers. All payments are processed directly by PCI-DSS compliant third-party payment processors or Merchants of Record (e.g., Stripe, Paddle, Lemon Squeezy).
  • Direct Communications: Records of email correspondence, advisory consultation notes, and intake interview transcripts conducted with your practice leadership.

3.2. Information Collected Automatically (Log Data & Analytics)

When you or your practice team browse anicetix.pro, our servers automatically record technical telemetry, including:

  • IP address (truncated or anonymized where applicable);
  • Browser type and version;
  • Device architecture, screen resolution, and operating system;
  • Referring URL, pages visited, timestamps, and dwell time per page;
  • Language preferences (e.g., browser locale for hreflang routing).

3.3. Cookies & Tracking Technologies

In practice, we utilize cookies and similar technologies with strict user controls:

  • Strictly Necessary Cookies: Essential for page routing, session stability, security, and recording your cookie consent preferences. These cannot be disabled.
  • Performance & Analytical Cookies (Optional): Used to understand visitor navigation flows (e.g., Google Tag Manager / Google Analytics with IP anonymization enabled). Specifically, under the EU e-Privacy Directive, these cookies are blocked by default and execute only after your affirmative opt-in consent via our Cookie Banner. For comprehensive technical disclosures, consult our dedicated Cookie Policy.

4. PURPOSES AND LEGAL BASES FOR PROCESSING (GDPR ART. 6)

Specifically, under European and international data protection law, we establish an explicit legal basis for every processing activity affecting your practice data:

Processing PurposeCategory of DataLegal Basis (GDPR Art. 6)
Evaluating Intake Applications & Delivering TeardownsYour practice commercial contact data, practice diagnostic telemetry.Performance of a Contract (Art. 6(1)(b)) with your practice or steps taken prior to entering a contract.
Executing Commercial Invoicing & Payment ProcessingYour practice billing details, tax identification numbers, client transaction records.Performance of a Contract (Art. 6(1)(b)) with your client practice and Compliance with Legal Obligations (Art. 6(1)(c)) (tax/accounting rules).
Website Security, Fraud Prevention & System IntegrityPractice portal server log data, IP addresses, technical user agents.Legitimate Interests (Art. 6(1)(f)) (safeguarding practice communications and digital infrastructure against attack).
Anonymized Macro-Economic & Case Intervention AnalysisFully aggregated, de-identified practice benchmarks.Legitimate Interests (Art. 6(1)(f)) (refining proprietary commercial architecture models for client practices).
Direct B2B Inquiries & Consultation SchedulingYour professional email, practice contact history.Legitimate Interests (Art. 6(1)(f)) or Consent (Art. 6(1)(a)) granted by your practice.
Website Analytics & Dwell Time MeasurementAnalytical cookies, practice visitor navigation telemetry.Consent (Art. 6(1)(a)) obtained via our Cookie Banner from you or your team.

5. SUB-PROCESSORS & DATA SHARING

We do not sell, rent, monetize, or trade your personal information or practice data to any third party.

In practice, we share personal data only with trusted service providers (sub-processors) bound by strict contractual data protection agreements (DPAs) to protect your practice data:

  • Web Hosting & Infrastructure: High-performance, secure cloud servers and CDN infrastructure (e.g., Cloudflare, certified hosting facilities in the EU/US) ensuring high availability for your practice intake pathways.
  • Payment Gateways & Merchants of Record: PCI-DSS Level 1 compliant processors (Stripe, Paddle, or Lemon Squeezy) to process diagnostic fees and international VAT/sales tax for your client practice.
  • Communications & Form Processing: Professional workspace infrastructure (e.g., Google Workspace) and secure form routing plugins securing direct messaging with your practice leadership.
  • Web Analytics: Google Tag Manager / Google Analytics configured with IP anonymization and disabled ad-personalization features, measuring aggregate traffic without profiling individual practice visitors.
  • Legal & Regulatory Compliance: We may disclose data if legally compelled by valid subpoena, court order, or official regulatory investigation, providing prior notice to your practice where permitted by law.

6. INTERNATIONAL DATA TRANSFERS

anicetix.pro operates globally, serving client practices across the United States, the European Union (specifically Romania), the United Kingdom, and candidate states (Moldova).

Specifically, when personal data originates in the European Economic Area (EEA) or the UK and is transferred to service providers or servers in third countries (such as the United States), we ensure an adequate level of protection for your practice through:

  • Standard Contractual Clauses (SCCs): Incorporating the European Commission’s approved standard contractual clauses into our agreements with sub-processors;
  • UK International Data Transfer Addendum: Ensuring equivalent protections under UK data protection law;
  • Data Privacy Framework (DPF): Selecting US sub-processors certified under the EU-US Data Privacy Framework where available.

7. DATA RETENTION SCHEDULE

In practice, we retain personal information only for as long as necessary to fulfill the operational purposes outlined in this Policy and support your practice:

  • Diagnostic & Intake Submissions: Retained for the duration of the active consultation or engagement. In practice, unaccepted applications or abandoned inquiries from candidate practices are deleted or irreversibly anonymized after twelve (12) months.
  • Client Engagement & Deliverable Records: Retained for the duration of the engagement plus twenty-four (24) months for longitudinal architectural reference, unless your practice requests earlier erasure.
  • Tax, Invoice & Accounting Records: Retained for statutory periods mandated by commercial and tax codes (typically five (5) to ten (10) years).
  • Server Access Logs: Retained for thirty (30) to ninety (90) days for cybersecurity and debugging, after which they are automatically purged.

8. YOUR STATUTORY DATA RIGHTS (GDPR & UK GDPR)

If you or your practice team reside in the EEA, the United Kingdom, or jurisdictions with equivalent privacy frameworks, you have the following statutory rights under Articles 15–22 of the GDPR:

  1. Right of Access (Art. 15): Request a copy of the personal information and practice records we hold about you or your firm.
  2. Right to Rectification (Art. 16): Request correction of inaccurate, outdated, or incomplete data regarding your practice profile.
  3. Right to Erasure (“Right to Be Forgotten”) (Art. 17): Request deletion of your personal or practice data where retention is no longer justified by contract, legitimate interest, or statutory obligation.
  4. Right to Restriction of Processing (Art. 18): Request that we suspend processing while a dispute regarding your practice data accuracy or legal basis is resolved.
  5. Right to Data Portability (Art. 20): Request your practice intake submissions and account data in a structured, commonly used, machine-readable format.
  6. Right to Object (Art. 21): Object at any time to processing based on legitimate interests or direct commercial communications directed to your practice.
  7. Right to Withdraw Consent (Art. 7(3)): Withdraw your consent or your practice team consent for analytical tracking at any time without affecting the lawfulness of processing prior to withdrawal.
  8. Right to Lodge a Complaint: You or your practice leadership have the right to lodge a complaint with your local data protection supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP – anspdcp@dataprotection.ro). In the UK, this is the Information Commissioner’s Office (ICO – ico.org.uk).

To exercise any of these rights, contact our Data Controller at info@anicetix.pro. In practice, we respond to your practice request within thirty (30) days without fee.

9. CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA NOTICE)

Specifically, this Section applies solely to California residents and practice operators pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020:

9.1. Categories of Personal Information Collected & Disclosed

In the preceding twelve (12) months, anicetix.pro has collected and disclosed for business purposes the following categories of Personal Information regarding prospective and active client practice personnel:

  • Identifiers: Your name, business email, IP address, practice name.
  • Commercial Information: Your practice diagnostic intake responses, engagement transaction records, architectural services purchased.
  • Internet / Network Activity: Log files, practice website navigation paths, device telemetry.

9.2. No Sale or Sharing of Personal Information

anicetix.pro does not “sell” your personal information, nor do we “share” personal information or practice data for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA). In practice, we have not engaged in such sales or sharing in the preceding twelve (12) months.

9.3. Your Rights Under CCPA / CPRA

  • Right to Know / Access: Request details regarding the categories and specific pieces of personal information collected about you or your practice team.
  • Right to Delete: Request the deletion of personal information collected from your practice, subject to standard statutory exceptions (e.g., completing commercial transactions, legal compliance).
  • Right to Correct: Request correction of inaccurate personal data regarding your practice profile.
  • Right to Non-Discrimination: We will never deny services, charge different rates to your practice, or degrade service quality because you or your practice team exercised statutory privacy rights.

In practice, to submit a CCPA/CPRA request on behalf of yourself or your practice, email: info@anicetix.pro with the subject line “California Privacy Rights Request”.

10. COOKIE MANAGEMENT & USER CONTROLS

When you or your practice team first visit anicetix.pro, our Cookie Banner gives your practice explicit control over optional tracking scripts:

  • Browser Controls: You can configure your browser to reject cookies or notify you when a cookie is placed. Note that disabling essential cookies may impact site navigation.
  • Consent Withdrawal: You can modify your analytical tracking preferences at any time by clicking the “Cookie Preferences” link in our website footer. In reality, your practice preferences take effect immediately upon update.

11. DATA SECURITY ARCHITECTURE

We deploy robust technical and organizational safeguards appropriate to the risk level to protect your practice data:

  • Encryption in Transit: All traffic to and from anicetix.pro is encrypted via SSL/TLS 256-bit protocols (HTTPS).
  • Access Control: Specifically, practice diagnostic intake data is accessible strictly on a need-to-know basis by the Principal Architect using multi-factor authentication (MFA) to safeguard client practice confidentiality.
  • Vendor Governance: In practice, all third-party software tools (CRM, hosting, payment) are audited for SOC2, ISO 27001, or GDPR adequacy compliance to protect your practice ecosystem.

12. CHILDREN’S PRIVACY

anicetix.pro is strictly a professional B2B advisory platform serving practice operators. We do not knowingly solicit or collect data from individuals under the age of 18. If we discover that personal data of a minor has been collected, it will be deleted immediately.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our operational architecture, technology stacks, or regulatory requirements. Any modifications will be posted to https://anicetix.pro/en/privacy-policy/ with an updated “Last Updated” timestamp. We encourage you and your practice team to review this page periodically.

14. CONTACT INFORMATION & DATA CONTROLLER

For any questions, concerns, or data rights requests on behalf of your practice, please contact:

Ștefan Prohnițchi
Data Controller d/b/a anicetix.pro
Email: info@anicetix.pro / contact@anicetix.pro
Website: https://anicetix.pro/en/privacy-policy/