Transparency about professional data, visitor activity, account security, payments, and privacy choices.
Operator, coverage, and contact
IranianDentist.org (the “Site”) is operated by ZSany LLC (“ZSany,” “we,” or “us”), a Washington-registered business. This policy describes the collection, use, sharing, retention, and rights associated with Site visitors, directory profiles, advertisers, and account holders.
The policy covers the Site and its administration, not records, communications, or services managed independently by a listed provider. A provider may have a separate privacy notice and additional regulatory duties.
Information in directory profiles
We may display professional or business names, titles, photographs, office locations, practice or service categories, languages, biographies, affiliations, business telephone numbers, professional email addresses, websites, licensing identifiers supplied or found in public sources, and other work-related details relevant to dentists and dental practices.
Some details are provided directly by professionals or their authorized representatives. Other details may be compiled from publicly available sources and may appear before a profile is claimed.
Public sources and profile creation
Sources can include professional and regulatory directories, official registers, company websites, business listings, public social-media pages, and other lawfully accessible professional information. We may use human review and AI-assisted tools to draft or compare directory fields.
Public availability is not the same as an unrestricted right to reuse or market personal information. ZSany must comply with applicable collection, publication, intellectual-property, marketing, and removal requirements and should honor valid source restrictions.
Public search visibility and indexing
A public profile may be viewed, copied, indexed, or cached by search engines and other third parties. Even if ZSany corrects or removes an entry, an external search result or archive may persist under that third party’s control.
We may review requests to correct, unclaim, limit, or remove a listing. An account holder should not assume that deleting account access automatically removes all previously published professional information.
Accounts, activation, and blue badges
We process account names, business contact details, email addresses, login and security events, password-reset requests, account settings, subscription status, and audit records needed to administer professional listings.
An activated account or blue badge generally reflects account or email-management access under Site procedures. It is not conclusive identity verification, proof of authority to act for the professional, or validation of professional credentials or licensing.
Profile reviews, reports, and documentation
We may collect correction requests, complaints, supporting correspondence, and documents needed to review a disputed listing, suspected impersonation, misleading claim, or reported licensing issue. Documentation is requested proportionately and should be shared through appropriate secure means.
We may keep limited decision and security records to protect platform integrity, resolve disputes, or comply with law, even if public profile content is removed.
Visitor usage and technical information
When a person uses the Site, browsers and systems may send IP address, approximate location, device characteristics, browser type, referral source, visited pages, search terms, clicks, event timestamps, session identifiers, error logs, and cookie or advertising identifiers.
We use such information for operation, security, troubleshooting, audience measurement, advertising analysis, and improving the Directory, subject to applicable privacy and tracking restrictions.
Purposes of processing
We process relevant data to publish and maintain the directory; allow account access; prevent fraud; provide sponsored listings; process subscription payments; communicate about account and billing matters; review complaints; understand Site usage; protect security; and comply with legal obligations.
Professional outreach and promotional use of contact information must comply with applicable electronic marketing, privacy, anti-spam, and opt-out laws. A published business email address does not automatically authorize every kind of promotional message.
Legal bases where EU or UK law applies
Depending on the context and law, processing may rely on contract performance, legitimate interests, consent, legal obligations, or another applicable lawful basis. Legitimate interests may include accurate professional directories, account administration, fraud prevention, and proportionate business communications.
Consent must be obtained where required for nonessential cookies or sensitive information; it can be withdrawn subject to lawful limitations. A privacy notice does not substitute for appropriate consent controls or a documented legitimate-interest assessment.
Google Analytics, Meta Pixel, and reCAPTCHA
The Site uses Google Analytics for audience measurement, Meta Pixel for advertising measurement, and Google reCAPTCHA for abuse and bot prevention, subject to the features enabled in the deployed configuration. Depending on the actual configuration, these services may process page activity, event data, IP addresses, device details, cookies, or identifiers and may disclose information to their providers.
Tracking features and their consent settings must be checked against the Site’s actual deployed configuration. We do not represent that analytics or advertising tags are automatically compliant merely because this policy describes them.
Cookies, choices, and consent mechanisms
Cookies and similar technologies may support security, session management, preferences, analytics, and advertising. Some are essential to core operation; others may require prior opt-in, a clear choice, or an opt-out depending on the visitor’s location.
Where legally required, visitors must receive a working way to reject or withdraw consent for nonessential tracking. Applicable opt-out preference signals, including Global Privacy Control, must be honored when required. Browser controls may also limit cookies, but are not a substitute for statutory choices.
Stripe and payment records
Subscriptions may be billed through Stripe. ZSany may receive subscriber identity, billing contact information, invoice details, payment status, limited card metadata, transaction identifiers, tax information, refund and dispute status, and subscription dates.
The payment provider processes payment credentials under its own policies. ZSany does not need full payment-card numbers or security codes for normal Site billing administration.
Public contact methods and direct provider communications
Profiles may provide telephone numbers, professional email or website links, maps, and third-party messaging destinations. When visitors contact listed dentists and dental practices independently, those communications are not controlled by ZSany.
If the Site offers a contact or inquiry tool for directory administration or provider communications, the information submitted and relevant technical logs may be processed to handle the request. Do not include confidential case files, personal health records, full payment details, government identity documents, or other unnecessary sensitive data.
AI-assisted work and quality review
We may use AI-assisted tools to format or draft professional summaries from supplied or public information, detect inconsistencies, support internal review, or assist with business outreach. AI-generated or AI-edited wording may be incomplete or wrong and remains subject to correction.
Do not submit confidential client, patient, investor, borrower, insurance, or immigration records for use in profile drafting. We should use reasonable data minimization, access safeguards, and contractual controls when providers process information on our behalf.
Professional invitations and marketing communications
We may contact professional or business addresses about profile management, listing accuracy, directory participation, or optional advertising, subject to applicable consent, anti-spam, and direct-marketing laws. Marketing messages should identify ZSany and provide required unsubscribe or objection mechanisms.
Unsubscribing from marketing does not necessarily stop essential account, security, payment, or legal notices. We may keep minimal suppression records so an opt-out can be respected.
Service providers and recipients
Information may be disclosed to hosting, content-delivery, email-delivery, payment, security, fraud-prevention, analytics, customer support, professional advisers, or other vendors acting under appropriate arrangements. Public profile information is inherently available to visitors and search engines.
We may disclose data to regulators, courts, law enforcement, or other parties when lawfully required, or in connection with a legitimate business transfer subject to required safeguards and notices.
Targeted advertising, sale, and sharing
Advertising cookies and pixels can constitute “sharing,” “sale,” or targeted advertising under certain privacy laws even if ZSany does not sell a database for cash. We must assess the actual disclosures and contractual arrangements rather than treating all analytics as exempt.
Where applicable law provides a right to opt out, limit use, or withdraw consent, the Site must provide an effective process, including legally required signal handling. Sensitive information must not be used for advertising in ways prohibited by law.
Ordinary retention and the 90-day schedule
The Site’s general operating schedule targets deletion or de-identification of ordinary removed profile records, routine inquiries, logs, and backup copies within approximately 90 days after they are no longer needed, subject to technical deletion cycles and lawful exceptions. This is not a promise that all personal information is erased exactly 90 days after collection.
Public profiles that remain active are retained for directory operation. Records needed for billing, taxes, fraud prevention, disputes, security investigations, mandatory reporting, consent records, or legal holds may be retained longer for the legally necessary period.
Billing records and statutory retention
Financial, invoice, tax, contractual, consent, refund, and payment-dispute records may remain after an account closes where business-record retention or law requires them. We seek to minimize what is kept and limit access to appropriate personnel and providers.
A request to remove a public listing does not automatically delete payment records, suppression records, or information another independent controller lawfully holds.
Information security and incidents
We use reasonable technical and organizational safeguards appropriate to the information and services involved, such as access controls, account authentication, limited administrative access, and provider security measures. No online service can promise absolute security.
We will investigate suspected incidents and provide notices to affected individuals or authorities when applicable law requires them. A password-reset email is not proof of the recipient’s professional credentials.
Access, correction, deletion, and objection rights
Depending on the relevant law, individuals may be entitled to request access, correction, deletion, portability, processing restrictions, withdrawal of consent, objection to certain use, or an appeal of a privacy decision. Some requests can be limited by applicable legal exceptions.
We may reasonably verify a requester’s authority, especially when a request would alter a publicly visible professional listing or reveal account information. We will not demand more identification than reasonably necessary for the request.
United States privacy laws
California and other U.S. states may grant eligible residents rights concerning personal information, targeted advertising, sale or sharing, sensitive data, and related notices. Statutory scope and business thresholds vary, so rights and exceptions depend on the applicable law and facts.
Where required, the Site must offer the prescribed privacy choices and honor qualifying authorized-agent requests and opt-out preference signals. We will not retaliate unlawfully against a person for exercising an applicable privacy right.
Canada and electronic communications
Canadian privacy laws, including PIPEDA and applicable provincial legislation, may govern collection, publication, accuracy, reasonable purposes, access, and correction. Canada’s anti-spam framework may apply to commercial electronic messages.
Professionals and other visitors may ask about personal information held by ZSany and object to marketing in accordance with applicable law. Public professional contact information does not eliminate every privacy or marketing restriction.
EU, UK, and international transfers
Where EU or UK privacy rules apply, individuals may have additional rights and cross-border transfers may require a recognized adequacy mechanism, appropriate contractual safeguards, or another lawful transfer basis.
Website visitors may be in multiple jurisdictions, and applicable transfer, regulator-contact, representative, or additional disclosure obligations depend on the Site’s actual footprint and data processing.
Children and unnecessary sensitive information
The Site is intended for adults seeking business or professional information, not directed to children. We do not seek children’s personal information or confidential sensitive materials through general directory features.
Do not submit medical diagnoses, therapy records, immigration case files, financial account details, biometric information, credentials, or other sensitive records unless a specific lawful and secure channel is expressly provided for that purpose.
Health-related searches and inferred conditions
A search for oral surgery, dental pain, an oral condition, or a particular dental specialty can create inferences about a person’s health. The Site should minimize such data, avoid sending identifiable clinical information through advertising tags, and apply health-privacy and consumer-health-data rules where relevant.
A professional health directory may be subject to consumer-health-data laws even if it is not a hospital, clinical records system, or HIPAA-covered entity. Health interests inferred from visits or click events require particular caution.
HIPAA, Washington health privacy, and other health rules
HIPAA coverage depends on the nature and role of the entity and the data; ZSany should not state that this Directory is automatically a HIPAA-covered healthcare provider. Other privacy laws, including Washington’s My Health My Data Act, may apply to consumer health data and require separate notices, consents, restrictions, and rights.
The FTC Health Breach Notification Rule applies to certain personal-health-record businesses and related entities under its own definitions, not automatically to every health directory. Any applicability determination should be based on actual services and data flows.
Third-party sites and independent records
External links can lead to websites and applications with different privacy notices, retention policies, data-sharing practices, and security arrangements. We do not control how independent professionals or third-party websites handle information after a visitor leaves our Site.
If you are concerned about the confidentiality of professional correspondence or documents, ask the chosen provider about a secure channel and applicable obligations before sending them.
Changes and privacy requests
We may revise this Privacy Policy to reflect changes in services, legal requirements, or data practices. We will update the revision date and provide additional notice or obtain consent where required by law.
For privacy rights, profile corrections, data processing questions, or concerns about this policy, contact ZSany LLC using the contact form. We will handle requests under the rules applicable to the requester and the relevant data.