Privacy notice
Effective from 17 September 2026 · Version 1.1
This notice explains what data we collect through the softwareldv.com website and the LDV Software applications, why we process it, who we share it with and what rights the people concerned have. It is drawn up under articles 13 and 14 of Regulation (EU) 2016/679 («GDPR»).
The general rules apply to all products. Anything that concerns a single product is set out below the relevant section, in a box dedicated to that product. One product is on the market today: Dr. Green.
The supplier
LDV Consulting FZCO
IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai 342001, United Arab Emirates
Tax Registration Number (TRN): 104336951900003
Email: support@softwareldv.com · Phone: +39 331 392 5773
Trading name: «LDV Software» · Website: softwareldv.com
Products: «Dr. Green»
1. Controller and representative
The controller for data relating to customer accounts, the website and invoicing is LDV Consulting FZCO, at the contact details above. Representative in the European Union under art. 27 GDPR: the designation is under way. In the meantime the controller answers requests from data subjects and supervisory authorities directly, at the contact details above. For any request concerning personal data write to support@softwareldv.com.
2. Two distinct roles
- Customer data (sign-up, use of the applications, invoicing): we are the controller.
- Data about third parties that a product processes on the customer's behalf: the customer is the controller and we act as processor, following the instructions set out in the Terms and in an art. 28 GDPR agreement provided on request.
How this applies to Dr. Green
Data about third parties means the data collected through invitations to patients: for this data the practice is the controller and we are the processor.
3. What data we process
The data processed depends on the product the customer uses, and a product may collect data beyond what is listed here. The table shows the data common to all products; data specific to each product is listed in its box.
| Category | Data | Source |
|---|---|---|
| Customer account | Name of the practice or business, email address, password (stored only in encrypted form by the authentication provider), role | Provided by the customer |
| Invoicing | Company name, address, tax identifier, last four digits and expiry date of the card, payment history | Collected and stored by Stripe; we only process the customer identifier and subscription status |
| Technical data | IP address, device and browser type, technical error logs | Collected automatically by the infrastructure |
How this applies to Dr. Green
In addition to the common data, Dr. Green processes:
| Category | Data | Source |
|---|---|---|
| Practice listing | Public link to the Google listing, listing identifier, number of reviews and average rating | Provided by the customer and read from Google's public data |
| Use of the service | Invitation identifier, type of visit, dates and times, invitation status, keys of the questions drawn, positions chosen on the scales (numbers from 1 to 5), outcome of the automatic check | Generated by use |
4. What we do not store
Each product is designed to collect only the data it needs to work. When a piece of data is not needed, the application is built so that it is not stored: these are design choices, not settings that can be changed.
How this applies to Dr. Green
- The patient's phone number never enters our systems. The invitation is sent from the messaging application installed on the practice's phone, which opens its own contact picker.
- The text written by the patient is never saved. It is received, used to compose the text, returned to the patient's browser and discarded: it does not end up in the database, in technical logs or in error-monitoring systems.
- The text of the composed review is not saved.
- The text of reviews pasted in by the customer and the suggested replies are not saved.
- We do not collect data about patients' health.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service, managing access and support | Performance of the contract (art. 6.1.b GDPR) |
| Managing subscriptions, payments and invoices | Performance of the contract and legal obligations (arts. 6.1.b and 6.1.c) |
| Security, abuse prevention, technical logs | Legitimate interest in a secure service (art. 6.1.f) |
| Aggregate statistics on the use of the services | Legitimate interest in improving the service (art. 6.1.f) |
| Service emails to the customer | Performance of the contract (art. 6.1.b) |
How this applies to Dr. Green
The patient's answers are processed on behalf of the practice, on the basis of the practice's legitimate interest in gathering the opinion of those who received treatment; taking part is voluntary and the patient can simply not answer. Aggregate statistics also cover the quality of the composed texts, measured without storing their content.
6. How long we keep it
- Account data: for the duration of the subscription and for 12 months after closure, then deleted or anonymised.
- Usage data and statistics: 24 months.
- Technical logs: 30 days.
- Tax and payment documents: for the period required by applicable legal obligations.
How this applies to Dr. Green
Patients' free text, reviews and replies: not stored at all, as set out in section 4.
7. Who we share data with
We do not sell personal data and do not pass it on for third-party marketing. For all products we use the following providers, appointed as processors:
| Provider | Function | Where |
|---|---|---|
| Supabase | Database and authentication | European Union (Ireland) |
| Vercel | Application hosting | European Union (Ireland) · US company |
| Stripe | Payments, subscriptions and invoices | Ireland · United States |
| Resend | Sending service emails | European Union |
How this applies to Dr. Green
Dr. Green also uses:
| Provider | Function | Where |
|---|---|---|
| Anthropic | Automated text processing. It receives content only for the duration of the request; it is not used to train models | United States |
| Reading the public number of reviews and the average rating of the customer's listing | European Union · United States |
Transfers to third countries take place on the basis of the standard contractual clauses approved by the European Commission or other appropriate safeguards under chapter V GDPR. A copy of the safeguards can be requested at the contact details above.
8. Cookies and similar technologies
This website uses no profiling cookies, hosts no third-party analytics and does not track visitors: that is why no consent banner is shown. The applications reserved for customers use only technical cookies needed to keep you signed in: without them authentication does not work, and they do not require consent.
9. Security
Traffic is encrypted with HTTPS. Passwords are handled by the authentication provider and are not visible to us. Access to the database is restricted and protected by row-level security rules. Card details never pass through our systems: they are entered directly on Stripe pages, which operate under the PCI DSS standard.
10. Your rights
You may ask us at any time for access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest (arts. 15–22 GDPR). Write to support@softwareldv.com: we reply within one month. If you believe the processing breaches the law you may lodge a complaint with the supervisory authority of your country — in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
How this applies to Dr. Green
If you are a patient who received an invitation from a practice and wish to exercise your rights, contact the practice first, as it is the controller: we assist it for the part within our remit.
11. Changes
If we update this notice, including to add boxes for new products, we publish the new version on this page with its effective date; material changes are notified to customers by email.