Who is responsible
This website is operated by Meirav Caspi, doing business as Digital Brain, who designs and builds websites and landing pages and provides related services, including maintenance and hosting (the "Business"). Meirav Caspi is the controller of the information about inquiries to the Business and its client relationships. For any privacy question or request: meirav@digitalbrain.co.il.
Personal information is information about a person who is identified, or who can reasonably be identified, even if their name does not appear in it. Displaying this policy does not, by itself, count as consent to any use of your information. Where consent is needed, it will be requested separately.
What information is collected
Information you provide. When you send the contact form, the Business receives your name, email address, phone number (optional), the service you need and your message, together with your confirmation that you would like to be contacted about your inquiry. When you reach out by email, phone or WhatsApp, the Business receives the information you choose to send. If you become a client, project details, correspondence, proposals, agreements, work materials and billing details are also kept.
Technical information. When you use the website, information such as your IP address, the time of your visit, your browser, device and operating system, the page you requested and error data is recorded, including in server and security logs. Subject to your choice in the cookie banner (section 6), analytics and advertising tools also collect browser identifiers, how you arrived at the site, the pages you viewed, clicks, scrolling and conversions. This data is not anonymous just because it does not include your name, and it may count as personal information.
Please do not send passwords, full credit card numbers, medical information or anything not needed for your inquiry. Access to your systems, when a project needs it, will be arranged separately and securely. If you share information about another person, you are responsible for making sure you are allowed to do so.
How it is used
Information is used to reply to your inquiry and set up a call, to prepare a proposal and plan your project, to deliver the service, support and maintenance, to manage the relationship and payments, to operate and secure the website, and to keep records the law requires. The Business does not use it for marketing emails (section 7). Analytics, campaign measurement and personalized advertising run according to your choice in the cookie banner (section 6). Information will not be used for a new purpose that does not fit the reason it was collected without telling you first, and without your consent where consent is required.
Do you have to provide it
No law requires you to provide your details. You share them voluntarily, but without contact details the Business cannot reply to you or provide the service. Required fields are marked on the form, and so is the box confirming you would like to be contacted about your inquiry, which is the purpose of the form. Agreeing to non-essential cookies is never a condition for contacting the Business or receiving a service. Information the law requires during a project, for example to issue an invoice, will be requested as needed.
Service providers and transfers abroad
The Business does not sell personal information and does not hand inquiry details to anyone for their own marketing. Information is available to service providers only as far as their service requires: Vangus for website hosting and security, WordPress and Elementor for storing form submissions on the site, Google Workspace for email, Make and Google Sheets for managing inquiries, Morning (Green Invoice) for issuing invoices, CookieYes for cookie consent, UserWay for the accessibility menu, and the analytics and advertising tools listed in section 6. If you contact the Business on WhatsApp, WhatsApp's own privacy policy also applies.
The Business also uses AI tools such as Claude and ChatGPT in its work on inquiries and projects, and inquiry details and correspondence may be entered into them for that purpose only, and only as far as needed.
Some providers process information outside Israel, including in the United States and the European Union. Such transfers follow Israel's Privacy Protection Regulations on transferring data to databases abroad, 5761-2001. Information may also be disclosed to an authority where the law or a court order requires it, and only as far as required.
Cookies, analytics and advertising
Cookies and similar technologies store information in your browser. On your first visit a banner lets you accept all non-essential uses, reject them all, or choose by category. Continuing to browse without choosing does not count as consent, and rejecting cookies does not limit your use of the site or your ability to get in touch. You can change your choice at any time with the button.
Before you consent, and after you reject, no analytics or advertising cookies are stored, and Microsoft and Meta tools do not run. Google tools run in "consent not granted" mode: they store no cookies and omit advertising identifiers, but they send Google basic signals about the visit, which naturally include your IP address and browser details, for aggregated measurement. The UserWay accessibility menu always runs and stores your accessibility settings and a technical identifier in your browser.
| Category | Tools and purpose | When they run |
|---|---|---|
| Necessary | Saving your cookie choice (CookieYes), the accessibility menu (UserWay) | Always |
| Analytics | Visit analytics (Google Analytics), heatmaps and session recordings (Microsoft Clarity) | Only with consent |
| Performance | Performance measurement by Microsoft | Only with consent |
| Advertising | Conversion tracking and personalized ads (Google Ads, Microsoft Advertising, Meta Pixel) | Only with consent |
Tags are managed with Google Tag Manager. Microsoft Clarity hides text typed into form fields by default. These platforms may combine activity data with information they already hold, under their own settings and the consents that apply to their services. The full list of cookies and their duration is in the cookie settings window. Changing your choice applies from then on and does not delete data already sent. You can also delete cookies in your browser settings.
Marketing emails
The Business does not currently send newsletters or marketing messages. Details sent through the forms are used only to get back to you about your inquiry and to set up a consultation. If marketing messages are introduced in the future, they will be sent only to people who give separate, explicit consent that is not pre-checked and is not a condition of service, in line with section 30A of Israel's Communications (Telecommunications and Broadcasting) Law, 5742-1982, and every message will include a way to unsubscribe.
Data security
The Business uses security measures suited to the type and amount of information, in line with Israel's Privacy Protection (Data Security) Regulations, 5777-2017. Connections to the site are encrypted (HTTPS), the site is protected by a security system and backed up regularly, and access to information is limited to the Business owner and to service providers as far as their role requires. No system is completely immune. If a security incident occurs, the Business will investigate it, limit the harm, and report or notify where the law requires.
How long data is kept
An inquiry that does not turn into a project is kept for up to two years from the date of the inquiry and then deleted. Information related to a project is kept for the length of the engagement and for ongoing service and support. Accounting records are kept for the periods the law sets. Information needed for an existing dispute is kept only as far and as long as necessary. Security logs, analytics data and information held by service providers are kept according to each system's settings. Deleting information from a live system does not immediately remove it from backups. Backups are replaced on a regular cycle and are not used to bring deleted information back into everyday use.
Your rights
Subject to the law, you may access the information held about you. If it is incorrect, incomplete, unclear or out of date, you may ask for it to be corrected or deleted under section 14 of the Protection of Privacy Law. You may also ask for other information to be deleted, withdraw a consent you gave, or ask the Business to stop a particular use, including contacting you again. Such requests are reviewed under the law and the circumstances, taking into account information that must be kept.
Send your request to meirav@digitalbrain.co.il with the contact details you used and what you are asking for. You may be asked to verify your identity in a reasonable way. Please don't send a copy of an ID unless asked. Requests are handled within the time limits set by law, and if a request is refused you will receive the reasons. You can also contact Israel's Privacy Protection Authority.
Data on client websites
When building, maintaining or hosting client websites, the Business may have access to personal information on those sites, such as inquiries or user accounts. That information is handled on the client's behalf and under the client's instructions, and is never used for the Business's own marketing. The scope of access and how the information is handled are set in the agreement with the client. A request about information on a client's website will be handled together with that client, who is responsible for the site.
Children
The services are meant for business owners, and the Business does not knowingly collect information about children. If a child's information was provided, please get in touch so it can be handled.
Links and the portfolio
Links to client websites, social networks and WhatsApp lead to services with their own terms and privacy policies. Reviews on this site come from reviews their authors published on Google, or were sent to the Business and published with their authors' permission.
Changes to this policy
This policy may be updated as the Business or the law changes. The date of the last update appears on this page. A material change will be published on the site before it takes effect, and a new use of information already collected that requires consent will happen only after consent is given. This English policy is a translation of the Hebrew policy. If they differ, the Hebrew version applies.
