Privacy Policy

Who we are

Our website address is: https://anistongroup.com

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to our third-party integration partners.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

We may also share limited data with service providers that help us operate the website (for example: hosting, security monitoring, spam filtering, analytics). These providers are only permitted to use your data to perform services for us and are expected to protect it.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Contact information

If you have questions about this Privacy Policy or want to request a data export/deletion, contact us at:
Email: privacy@anistongroup.com

GDPR / EEA & UK Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies.

Data Controller

For the purposes of applicable data protection law, the “controller” of your personal data is Aniston Group.

Contact: privacy@anistongroup.com

Personal data we collect (GDPR)

Depending on how you use the site, we may collect:

  • Identity & contact details (e.g., name, email) if you comment, register, or contact us
  • Technical data (e.g., IP address, browser type, device identifiers, pages viewed)
  • Content you provide (e.g., comment text, uploaded media)
  • Cookie data (preferences, login session, and potentially analytics/marketing cookies if enabled)

Purposes and lawful bases for processing (GDPR)

We process personal data under the following lawful bases:

  • Consent: when you opt-in (e.g., saving comment cookies, non-essential cookies where required)
  • Contract: to create/manage an account or provide requested services (if applicable)
  • Legitimate interests: to operate, secure, and improve the website (e.g., spam prevention, fraud/security monitoring)
  • Legal obligation: to comply with applicable laws and lawful requests

International data transfers

Your data may be processed outside your country of residence (for example, where our hosting, email, or security providers operate). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.

Your GDPR rights

Subject to certain limits/exceptions, you can request:

  • Access to your personal data
  • Rectification (correction) of inaccurate data
  • Erasure (deletion)
  • Restriction of processing
  • Data portability
  • Objection to processing (especially where we rely on legitimate interests)
  • Withdraw consent at any time (where processing is based on consent)

To exercise rights, email: privacy@anistongroup.com.

Supervisory authority complaints

If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

California Privacy Notice (CCPA/CPRA)

This section applies if you are a California resident and the California Consumer Privacy Act as amended by the CPRA (together, “CCPA”) applies to our processing.

Categories of personal information we collect

In the last 12 months, we may have collected the following categories (as defined by CCPA), depending on your interactions:

  • Identifiers (e.g., name, email, IP address)
  • Internet or network activity (e.g., browsing activity on our site, page views, interaction logs)
  • Geolocation data (approximate) (e.g., derived from IP address; not precise GPS unless you provide it)
  • User-generated content (e.g., comments, uploaded files)
  • Account credentials (if accounts are enabled)

Sources of personal information

We collect personal information from:

  • You directly (forms, comments, account registration)
  • Your device/browser (cookies and similar technologies)
  • Service providers (e.g., spam detection, hosting, security tooling), where applicable

Business purposes for collecting/using information

We use personal information for:

  • Operating and maintaining the website
  • Account creation and management (if enabled)
  • Security, fraud prevention, and spam detection
  • Analytics and site performance (if enabled)
  • Communications you request (e.g., responding to inquiries)

Disclosure of personal information

We may disclose personal information to:

  • Hosting and infrastructure providers
  • Security and fraud prevention services
  • Spam detection services (e.g., comment filtering)
  • IT and site administration tools
    These are typically service providers/processors acting on our behalf.

“Sale” or “Sharing” of personal information (CCPA)

  • We do not sell personal information in the traditional sense (for money).
  • If we use certain advertising/analytics cookies that may be considered “sharing” under CCPA (e.g., cross-context behavioral advertising), you may have the right to opt out.

Currently – We do not sell or share personal information.

Sensitive personal information (CPRA)

We do not intentionally collect sensitive personal information as defined by CPRA (e.g., government IDs, precise geolocation, financial account credentials) unless you explicitly provide it and it is necessary for a requested service. If we ever collect it, you may have the right to limit its use to what is necessary to provide services.

Your California rights

Depending on applicability and subject to exceptions, you may request:

  • Right to know/access: categories and specific pieces of personal information collected, used, and disclosed
  • Right to delete: personal information (with exceptions)
  • Right to correct: inaccurate personal information
  • Right to opt out: of sale/sharing (if applicable)
  • Right to non-discrimination: we will not discriminate for exercising your rights

Submit requests at: privacy@anistongroup.com

Verifying requests

To protect your information, we may need to verify your identity before completing a request (for example, confirming control of the email used on the site).

Authorized agent (California)

You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and may still ask you to verify identity directly.

Retention (California)

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including maintaining site security, complying with legal obligations, and resolving disputes. (Comment data may be retained indefinitely unless you request deletion, subject to legal/security exceptions.)

Minors

Our website is not directed to children under 13. We do not knowingly sell or share personal information of minors under 16.

Disclosures

Meta Products Privacy Notice (Facebook/Instagram/WhatsApp)

This section explains how Aniston Group (anistongroup.com) collects, uses, shares, and retains data when you interact with us through Meta products and developer tools provided by Meta Platforms, Inc., including Instagram messaging, WhatsApp Business API, Facebook Lead Ads, and the Meta Pixel / Conversions API.

1) What data we collect from Meta products

A. Instagram messaging (business messaging)

If you message our business on Instagram, we may receive and store:

  • Your profile identifiers (e.g., account/handle and related IDs)
  • Message content you send us (text, images, attachments you choose to share)
  • Timestamps and message metadata (e.g., delivery status)
  • Limited technical/security signals for abuse prevention

If we use automation (e.g., a chatbot) in this channel, we may display disclosures like “You are interacting with an automated experience.”

B. WhatsApp Business API

If you message us via WhatsApp, we may receive and store:

  • Your phone number and WhatsApp identifiers
  • Message content and media you send us (including any attachments)
  • Message metadata (timestamps, delivery/read status, routing info)
  • Conversation history needed for customer support and audit/troubleshooting

WhatsApp’s Business Terms place obligations on businesses to protect user information and comply with applicable privacy requirements.
(Separately, WhatsApp explains general retention/deletion controls for WhatsApp accounts in its privacy materials.)

C. Lead Ads (Instant Forms)

If you submit a lead form, we may receive the information you enter, such as:

  • Name, email, phone number
  • Company and role (if requested)
  • Any custom questions/answers you submit (e.g., “what services do you need?”)
  • Timestamp and campaign/form context

Meta allows advertisers to use lead data according to their own privacy policy and expects appropriate disclosures in the form experience (including optional custom disclaimers).

D. Meta Pixel and Conversions API (website/app events)

If we use the Meta Pixel and/or Conversions API, we may collect:

  • Event data (e.g., page views, form submissions, purchases, lead events, button clicks)
  • Technical data (e.g., IP address, user agent, device/browser signals, timestamps, URL/referrer)
  • Identifiers for matching (e.g., email/phone), where provided by you (such as when you submit a form) or where configured, typically sent in hashed form for matching

Meta’s documentation and terms describe that certain customer identifiers/contact info used for matching require hashing and define “customer information parameters.”

2) How we use this data

We use data from these Meta products to:

  • Respond to inquiries and provide customer support via Instagram/WhatsApp
  • Deliver requested information/services (quotes, demos, onboarding, scheduling)
  • Process and manage leads generated through lead forms
  • Measure marketing performance, attribution, and analytics (Pixel/CAPI)
  • Improve site experience and campaign effectiveness
  • Maintain security, prevent fraud/spam, and troubleshoot issues

3) How we share this data

We may share Meta-related data only as needed:

  • With service providers that support our operations (hosting, CRM, ticketing, analytics, security monitoring)
  • With professional advisors (legal/compliance) where necessary
  • With authorities if required by law or to protect rights/safety

We do not sell Platform Data in exchange for money.

4) Retention

We retain Meta-related data only as long as reasonably necessary for:

  • Providing support and fulfilling your request
  • Managing leads and business records
  • Security, fraud prevention, and troubleshooting
  • Legal/compliance obligations

Meta’s platform policies expect developers to delete user data when a user requests deletion (and to provide a clear deletion request method in the privacy policy).

5) Data Deletion Instructions (Meta requirement)

You can request deletion of personal data we hold that is associated with Meta products.

Option A — Request deletion from us (recommended)

Email: privacy@anistongroup.com
Subject: “Meta Data Deletion Request”
Include:

  • Your name and the best identifier for us to locate you (email / phone used / Instagram handle)
  • Which channel(s) you used (Instagram messaging, WhatsApp, Lead Ads, website events)
  • What you want deleted (all data, messages only, lead record only, etc.)

We may request additional information to verify your identity before completing the request.

Option B — Remove our app/integration access in Meta settings

You can also stop future sharing by removing our app/integration from your Meta account settings (commonly under Settings → Apps and Websites or “Apps and Websites” in Accounts Center, depending on the product/UI).

After you remove access:

  • We stop receiving new data via that connection.
  • You can still use Option A to request deletion of data we already received and retained (subject to legal/security exceptions).

6) Your choices and controls (Pixel/CAPI + ads)

  • Cookies/Tracking Controls: You can manage cookies via browser controls and (if we provide one) our cookie preferences banner.
  • Ad Preferences: You can also adjust ad preferences and related controls in your Meta account settings (where available).

7) California notice (sale/sharing)

If applicable under California law, some analytics/advertising uses (like Pixel-based cross-context behavioral advertising) may be considered “sharing.” If we engage in such “sharing,” we provide a mechanism to opt out (for example, through a cookie preference tool and/or a “Do Not Sell or Share My Personal Information” link).