Legal
Privacy Policy
Effective date: July 17, 2026
1. Who is responsible for your information
The controller and operator of drkachmar.me (the "Site") is Volodymyr Kachmar, an individual based in Massachusetts, United States, professionally known as Dr. Kachmar. References in this notice to "we," "us," and "our" refer to Volodymyr Kachmar in that personal capacity.
For any privacy question or request, please use our privacy contact form.
2. Scope of this notice
This notice describes how personal information is handled through the Site and the professional resources, forms, subscriptions, and digital educational products offered through it. It does not cover independent third-party services that a user chooses to use, such as the external checkout platform used to purchase digital products, which operate under their own privacy terms.
3. Information we collect
Depending on how the Site is used, the following categories may be collected:
- Identifiers you submit through forms, such as name, professional email address, organization or practice, city and country, and the subject of your inquiry.
- Content of professional inquiries, speaking/training/media requests, support messages, and program-specific waitlist signups.
- Subscription and interest data indicating which educational updates you have requested.
- Technical information relating to Site requests, such as IP address, user-agent, referrer, and timestamps, used for reliability, rate limiting, and abuse prevention.
- Cookieless aggregate analytics events (see Section 10).
- Necessary browser and local storage used by the Site's client components.
Complete payment card data is not received, processed, or stored by drkachmar.me. Purchases of digital products are completed on the external checkout platform described in Section 9. Only limited order-confirmation and email-address information may be received back to fulfill delivery and support.
4. Sources of information
- Directly from you when you complete a form, subscribe, or submit an inquiry.
- Automatically, through standard request logs and cookieless analytics.
- From service providers acting on our behalf (database, edge functions, email delivery, mailing list, hosting).
- From the external checkout platform, limited to order confirmation and delivery information for a purchase you have chosen to make.
5. How we use information
- Deliver the professional resource, checklist, or educational item you have requested.
- Respond to professional, media, speaking, training, and collaboration inquiries.
- Fulfill, support, and keep records of purchases of digital educational products.
- Manage program-specific waitlists and send updates only about the specific program you signed up for.
- Send newsletter or marketing messages only when you have separately opted in.
- Maintain security, prevent abuse, and enforce acceptable use.
- Comply with applicable legal, tax, and record-keeping obligations.
Submitting a general inquiry does not enroll you in general marketing. Waitlist signups are interest-specific and used to communicate about that specific program.
6. Legal bases (GDPR/UK GDPR)
Where the EU GDPR, UK GDPR, or a similar regime applies, processing relies on:
- Performance of a contract or pre-contractual step — to deliver a requested resource, respond to an inquiry, or fulfill a purchase.
- Consent — for the newsletter, program-specific waitlists, and other non-essential communications; consent can be withdrawn at any time without affecting prior lawful processing.
- Legitimate interests — operating and securing the Site, preventing abuse, keeping business records, and responding to professional communications, balanced against your rights.
- Legal obligation — tax, accounting, and other statutory requirements.
7. No sale, no targeted advertising, no automated decisions
We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising. We do not use personal information to make decisions that produce legal or similarly significant effects about you through solely automated means.
8. Email delivery, waitlists, and marketing
Transactional and resource-delivery messages — such as sending a requested checklist, confirming an inquiry, delivering purchase access, or providing purchase support — are sent to fulfill your request and are distinct from marketing.
Program-specific waitlists (for example, Digital Veneer Mastery or AI for Dentists) are used only to send updates about that specific program. They are not merged into general marketing.
Newsletter and general marketing require a separate, unbundled opt-in. Every marketing email includes an unsubscribe link, and you can also request removal via our privacy contact form. When you unsubscribe, we may retain a minimal suppression record to honor your choice.
9. Service providers and third-party platforms
We use the following categories of providers. Providers that process information on our behalf act as service providers/processors under written terms; independent platforms that determine their own purposes operate under their own privacy terms.
Service providers / processors
- Supabase — database hosting, edge functions, and authentication support for form submissions.
- Resend — transactional and administrative email delivery.
- Mailchimp — newsletter, resource lists, and program-specific waitlist tagging where you have consented.
- Plausible Analytics — cookieless aggregate analytics (see Section 10).
- Lovable — Site hosting infrastructure, which may generate technical request logs for reliability and abuse prevention.
Independent third-party platforms
- Stan Store — independent external checkout and product-delivery platform for paid digital products (The Digital Veneer Playbook and The 8-Day Clinical Photography Protocol). When you leave the Site to purchase, Stan Store determines its own processing purposes for payment, fraud prevention, and delivery, and its own privacy terms apply to that transaction.
Personal information may also be disclosed where required by law, in response to lawful requests by public authorities, to protect the rights, property, or safety of the operator or others, or in connection with a corporate transaction with appropriate safeguards.
11. International processing
We are based in the United States, and some of our service providers may process information in the United States or other countries. If you access the Site from outside the United States, your information may be transferred to and processed in a country whose data- protection laws differ from those of your country of residence. Where applicable law requires a transfer mechanism, we use or require the relevant provider to maintain an appropriate safeguard, which may include approved standard contractual clauses or another lawful mechanism.
12. Retention
We retain personal information only for as long as needed for the purposes described in this notice, applying the following criteria:
- Newsletter, waitlist, and resource-list data — until you unsubscribe or withdraw consent or the purpose ends, after which a minimal suppression record may be kept where legally needed to honor your opt-out.
- Inquiries and support communications — while active and for a reasonable period afterward to allow follow-up, resolve disputes, and maintain records of the interaction.
- Purchase and transaction records — as required for tax, accounting, fraud prevention, chargeback handling, and legal claims.
- Technical and security logs — according to operational security need and each provider's retention schedule.
After deletion or expiry, residual copies may persist temporarily in routine backups until normal backup rotation removes them.
13. Security
We use reasonable technical and organizational safeguards designed to protect personal information, taking into account the nature of the information, the services, and the risks involved. These may include access controls, secure transmission, data minimization, and restricted administrative access, as appropriate. No online service can be guaranteed absolutely secure. We respond to security incidents and provide notices as required by applicable law.
14. Your rights
Depending on where you live and the applicable law, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information.
- Receive a portable copy of information you provided to us.
- Restrict or object to certain processing, including processing based on legitimate interests.
- Withdraw consent at any time, without affecting prior lawful processing.
- Opt out of marketing at any time.
- Appeal a denied privacy request where applicable law provides an appeal right.
- Lodge a complaint with a competent supervisory authority (for example, your EU/UK data-protection authority or your state attorney general).
To exercise a right, contact us via our privacy contact form. We may need to verify your identity before responding, using information proportionate to the request. Authorized agents may submit requests on your behalf where applicable law permits, subject to reasonable authorization and verification.
15. U.S. state privacy rights
Residents of certain U.S. states may have rights under state privacy laws (including, where applicable, California, Colorado, Connecticut, Virginia, Utah, and others). These rights may include the rights described in Section 14 and, where applicable, the right to opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling. As stated in Section 7, we do not sell personal information, do not share it for cross-context behavioral advertising or targeted advertising, and do not conduct profiling with legal or similarly significant effects.
We provide these rights to residents of a covered state whether or not statutory thresholds are met, to the extent the applicable law does not require otherwise. Requests can be submitted via our privacy contact form.
16. Children
The Site is intended for dental professionals, dental students under appropriate supervision, and other adult professional audiences. Paid products are offered to adults and, where the product page states, to eligible professionals. The Site is not directed to children under 13, and we do not knowingly collect personal information from children.
17. Professional context and patient information
Do not submit patient records, radiographs, clinical photographs, protected health information, or any other sensitive clinical or patient data through general Site forms.
Use of Site forms and resources does not create a dentist-patient relationship and does not constitute patient-specific diagnosis or treatment. You are responsible for ensuring that any information you submit is appropriate to share through a general professional website and complies with applicable privacy and confidentiality obligations.
18. External links and checkout
The Site links to independent external services, including the current checkout platform for paid digital products. Once you leave the Site, the destination service's terms and privacy policy govern how it collects and uses information. We are not responsible for the practices of independent third-party services.
19. Changes to this notice
We may update this notice from time to time. Updates take effect prospectively from the stated effective date. Material changes will be indicated by updating the effective date at the top of this notice and, where appropriate, by more prominent notice on the Site.
20. Contact and privacy requests
Volodymyr Kachmar, Massachusetts, United States. Privacy questions, requests, and unsubscribe support may be submitted by email to volodymyr@drkachmar.me or through our privacy contact form. Marketing emails also include an unsubscribe link.