Last updated: October 24, 2026
This policy explains what personal information OVA Solutions collects through ovasolutions.com and through our call booking pages on lisavoronkova.com, why we collect it, who else touches it, and what you can ask us to do with it. The short version: we collect what you send us, we count page visits unless you say no, we do not run ads, and we do not sell anyone’s data.
Who we are
OVA Solutions LLC, 430 Park Ave, New York, NY 10022, USA (“OVA Solutions”, “we”, “us”) runs this website and decides how the information collected here is used. We have offices in New York, Florida, the United Kingdom, Estonia and Ukraine. OVA Solutions also runs the pages where you book a call with our CEO, Lisa Voronkova, on lisavoronkova.com, and this policy covers them too. OVA Solutions is part of a group of companies that work under one quality management system, including Canyon Medical Inc. and Alnicko Lab OÜ (Estonia). For any privacy question or request, write to info@ovasolutions.com or call +1 (862) 682-4568.
What we collect
Information you give us
- Through the contact form, you send us your name, email, phone number, company name, and what you tell us about your project: description, stage, goals, approximate budget, timeline, notes, and how you heard about us. Only fill in what you are comfortable sharing. Each entry is emailed to us and also stored in the website’s database on our hosting (Hostinger).
- If you subscribe to our newsletter (No Mercy MedTech) or request a free resource, we receive your email address. The sign-up form at the bottom of every page is a Beehiiv form (it loads from subscribe-forms.beehiiv.com), and the free tools link to our Beehiiv sign-up page at medsdev.beehiiv.com/subscribe.
- If you book a call, we receive your name, email, the time you choose and any answers to the booking questions. The next section explains how booking works.
- We also receive whatever you send us directly by email or tell us on a call.
Booking a call
Calls are booked on lisavoronkova.com/booking (a consultation) and lisavoronkova.com/meet (a catch-up). OVA Solutions runs these pages, and Netlify hosts them. The booking itself runs on a Google Apps Script web app in our Google Workspace. It reads free and busy times from Lisa’s calendar so the page can show open times. When you book, it creates a Google Calendar event with a Google Meet link, and Google sends you the invitation. It also records the booking (your name, email, answers to the booking questions and the chosen time) in a Google Sheet in our Google Workspace.
The same app emails Lisa when a call is booked, changed or cancelled, and emails you reminders 24 hours and 1 hour before the call. Each booking has a private link that you can use to reschedule or cancel.
Free tools and the cost calculator
The eight free tools and the cost calculator run in your browser. Your answers are not sent to us and are not stored on our server or in your browser. “Email it to myself” and the calculator’s email options open your own email program with the text filled in, so nothing passes through OVA unless you send it to us. If you allow analytics, Google Analytics 4 receives the tool events listed in the next section, but not your answers. The calculator sends no events of its own; analytics only counts the page view.
Information collected automatically
- Unless you decline cookies, Google Analytics 4 records which pages you view, how you arrived (for example from a search engine or an AI assistant), your approximate location (country and city level), device and browser type, and events such as starting or submitting a form. Google Analytics 4 does not log or store IP addresses.
- Two of these events record clicks on a call booking link (book_call_click) or on an email address (email_click), with the link address, the link text and the page path.
- In the free tools, Google Analytics 4 receives these events: tool_start, tool_complete (with the tool name and the category of the result, not your answers), tool_share, tool_email_self, tool_cta_booking, tool_to_calculator, tool_subscribe and tool_jump_result.
- The contact form uses Google reCAPTCHA v3 for spam protection. It looks at how the page is used to tell people from bots.
- Our hosting provider and its content delivery network keep server and security logs with technical data such as IP address, browser type, and the pages requested, to deliver the site and protect it from attacks.
Sensitive information
Please do not send us patient data or other health information about identifiable people, whether through the contact form, the booking questions, email or a call. We do not need it to discuss a device project.
How we use it
| Purpose | Information | Legal basis (EU, UK, Brazil) |
|---|---|---|
| Answer your inquiry, prepare a proposal, run a project | Contact form, emails, calls, bookings | Steps you asked for before a contract; performing a contract |
| Schedule the call you booked, send the invitation and reminders, let you reschedule or cancel | Name, email, booking answers, chosen time | Steps you asked for before a contract |
| Send the newsletter or a resource you requested | Email address | Your consent, which you can withdraw at any time |
| Understand which pages and tools are useful and improve the site | Analytics data, including click and tool events | Our legitimate interest; you can switch it off under “Manage cookies” |
| Keep the site and forms secure, block spam | reCAPTCHA signals, server logs | Our legitimate interest in security |
| Meet legal, tax, and accounting obligations | Business records | Legal obligation |
We do not use your information for advertising, we do not build advertising profiles, and we do not make automated decisions that have legal or similarly significant effects on you.
Cookies
When you first visit, a notice tells you that we use cookies. Analytics cookies are on unless you switch Analytics off under “Manage cookies”. After that, Google Analytics is switched off for your browser and its cookies are deleted. If your browser sends a Global Privacy Control signal, we treat it as a “no” automatically. Change your cookie choice.
| Cookie | Set by | What it does | Kept for |
|---|---|---|---|
| ova_cookies | OVA Solutions | Remembers your cookie choice | 1 year |
| _ga, _ga_* | Google Analytics | Tells visits apart for statistics | up to 13 months |
| pum-* | Popup Maker | Remembers that you closed a pop-up, so it does not reappear | 1 month |
| pll_language | Polylang | Remembers the site language you chose | 1 year |
| ova_lang_auto, ova_lang_pref | OVA Solutions | Remembers that the site already opened in Portuguese for you once, or which language you picked in the switcher, so it does not change the language again | 1 year |
| _GRECAPTCHA | Google reCAPTCHA (google.com) | Spam and bot protection on the contact form | up to 6 months |
| hcdn | Hostinger | Content delivery and protection against bots | until you close the browser |
Two embedded services can set their own cookies, outside the table above and outside the “Manage cookies” switch. The embedded newsletter form from Beehiiv sets its own security cookies (bot protection). Podcast pages and some articles embed YouTube players (youtube.com/embed). When such a page loads, YouTube, a Google service, receives your IP address and may set its own cookies or similar storage, under Google’s privacy policy. You can block or delete these cookies in your browser settings.
Who we share it with
We do not sell personal information and do not share it for cross-context behavioral advertising. We share it only with service providers that work for us under contract, and only as much as they need:
- Hostinger: website hosting (including the database that stores contact form entries), content delivery network, and security.
- Netlify: hosting of the booking pages on lisavoronkova.com.
- Google: Analytics, reCAPTCHA, and Google Workspace (email, Google Calendar, Google Meet, Google Sheets and the Apps Script web app that runs call booking).
- Google also runs YouTube. On pages with an embedded video, YouTube receives your IP address directly and handles it under Google’s own privacy policy.
- Beehiiv: newsletter sign-up forms, sending, and subscriber management.
- Our group companies and engineers who work on your inquiry or project, bound by confidentiality.
We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to apply.
International transfers
Our team works from the United States, the United Kingdom, Estonia and Ukraine, and our service providers may process data in the United States and other countries. When information about people in the European Economic Area, the United Kingdom, or Brazil leaves those regions, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU-U.S. Data Privacy Framework.
How long we keep it
- Inquiries that do not turn into a project, including contact form entries and call bookings: up to 3 years after our last contact, so we can pick up the conversation if you come back.
- Client project records: as long as the contract and medical device regulations require. Design history files can have retention periods tied to the life of the device.
- Newsletter: until you unsubscribe. Every email has an unsubscribe link.
- Analytics: event-level data for the retention period set in Google Analytics, no longer than 14 months; after that only aggregated reports remain.
Your choices
- You can switch Analytics off or back on at any time in the cookie settings: Change your cookie choice.
- If you turn on Global Privacy Control in your browser or a privacy extension, we treat the signal as a “no” to analytics, and the cookie notice does not appear.
- Your browser settings let you block or delete cookies, including those set by YouTube and Beehiiv.
- To stop the newsletter, use the unsubscribe link in any issue.
- For anything else, including a request to see, correct or delete your data, write to info@ovasolutions.com.
Your rights
Depending on where you live, you can ask us to tell you what we hold about you, give you a copy, correct it, delete it, restrict or object to how we use it, or move it to another provider. You can withdraw consent at any time without affecting what happened before. Specifically:
- In the EU and the UK (GDPR, UK GDPR), you have all the rights above and the right to complain to your local data protection authority. In Spain, that is the Agencia Española de Protección de Datos (AEPD); in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).
- In California (CCPA/CPRA) and other US states with privacy laws, you have the right to know, delete, and correct, the right to opt out of sale or sharing (we do neither), and the right not to be treated differently for using these rights.
- In Brazil (LGPD), you have the right to confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent. You can also contact the ANPD.
- In Mexico (LFPDPPP, the federal law issued in March 2025), you have the rights of access, rectification, cancellation, and opposition (ARCO). You can file a complaint with the Secretaría Anticorrupción y Buen Gobierno, which replaced the INAI as the authority.
- In Chile, you have the rights your local law grants. Law 21.719, which updates Chile’s data protection law and creates the Agencia de Protección de Datos Personales, applies from December 1, 2026.
- In Argentina, Colombia, Peru and other Latin American countries with data protection laws, you have the rights your local law grants, including the right to complain to your national data protection authority.
To use any of these rights, email info@ovasolutions.com with the subject “Privacy request”. We may ask you to confirm your identity and will answer within the time the law sets, usually 30 days or less.
Security
The site runs over HTTPS, access to our systems is limited to people who need it, and our engineering work follows an ISO 13485:2016 certified quality management system. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.
Children
This site is for businesses and professionals. We do not knowingly collect information from anyone under 16.
Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. Significant changes will be announced on the site.