Privacy policy.

Who is responsible

TOMER N. MARKETING AND SALES LTD, company number 516555604, trading as The Digital Kit, operates this website. Its registered address is 6 HaTapuach Street, Beit Shemesh, 9955606, Israel. The company is responsible for the personal information described in this policy unless another provider is identified as independently responsible. Questions and privacy requests can be sent to hello@thedigitalkit.co.

Information we collect

When you browse the site, our hosting and security provider may process standard request information such as your IP address, approximate country, device and browser details, requested page, time, referrer and security signals. We use the country signal to apply the appropriate analytics choice; our region endpoint returns only the applicable policy, not your country.

If analytics is on, Google Analytics 4 receives page and product views, tier choices, checkout starts and failures, checkout returns, newsletter conversions, and provider-confirmed purchases. These events can include a first-party analytics identifier, session and device information, approximate location, referrer origin, product, currency, value and an order identifier. We remove page query strings, keeping only standard campaign and ad-click identifiers such as utm tags and Google click IDs, and do not send Google your name, email address, full billing details, payment details or newsletter form contents. Network providers, including Google, necessarily receive technical request information such as an IP address when a request reaches them. When analytics is off, the site does not load or configure Google Analytics and does not send it analytics events.

If you join the email list, we collect the email address you submit, the time and context of the signup, the country your request came from, and the consent record. If you contact us, we receive your message and contact details. If you buy a product, Lemon Squeezy processes the transaction and provides the information needed for fulfilment, support and records, typically your name, email address, billing country, product, order identifier, price, currency, tax and order status. Where applicable, the checkout record also includes the exact statement by which you request immediate digital supply after payment and acknowledge the effect of activating the download or access link, the country observed for that consent, its time and policy version, and the legal name of an organisation receiving an extended licence. If you allowed analytics, it may also include the analytics client and session identifiers used to attribute a provider-confirmed purchase. We do not receive or store your full payment-card number.

Why we use information

We use personal information to operate and secure the site, deliver purchases, respond to requests, send emails you asked for, measure and improve the storefront, prevent fraud, enforce our terms, and meet tax, accounting and other legal obligations. We keep checkout consent records to document the exact immediate-supply request and link-activation acknowledgement. We keep named-organisation records to identify the holder and scope of an extended licence.

The legal basis depends on the activity and the law that applies: performing a contract or taking requested steps before one; your consent; our legitimate interests in security, support and limited site measurement where those interests are permitted and not overridden by your rights; or compliance with law. Where prior consent is required, we do not rely on legitimate interests instead. You can withdraw consent at any time without affecting earlier lawful processing.

Analytics, cookies and your controls

Required storage keeps checkout and security working and remembers your privacy choice. The first-party tdk_consent cookie stores the current analytics choice and whether it came from your site control or the applicable regional default for up to six months. Google Analytics may set first-party analytics cookies when analytics storage is allowed. We configure those analytics cookies to expire after no more than about 13 months and not to extend their expiry when you return.

In countries where prior opt-in is required, including the United Kingdom, analytics storage starts off and the site asks before enabling it. In other countries, including Israel, limited analytics starts on under a notice-and-opt-out approach. Advertising storage, advertising user data and ad personalization are denied worldwide. We do not use this setup for remarketing or cross-context behavioural advertising, and we do not sell personal information or share it for such advertising.

You can change analytics at any time with theprivacy choicescontrol. We also treat a browser Global Privacy Control signal as an instruction to leave analytics off. A browser's older “Do Not Track” signal has no consistent industry meaning; use Global Privacy Control or the site control for a dependable choice here.

Providers and international transfers

Cloudflare provides hosting, security, first-party delivery of the Google tag, and the database that holds our email list. Google processes analytics data. Lemon Squeezy is the merchant of record and independently handles payment, tax, receipts, refunds and chargebacks for your transaction and holds the checkout custom data described above. We handle unsubscribe requests ourselves. Where an external email-delivery provider is connected we use Resend, which receives the email address, subscription status and the content of the messages we send, so it can deliver and suppress our email. These providers may process information in Israel, the United States and other countries where they operate.

We use provider contracts and the transfer safeguards required by applicable law, and limit providers to the information needed for their role. Their own notices explain their independent practices: Cloudflare Privacy Policy, how Google uses information from partner sites, Lemon Squeezy Privacy Policy, and Resend Privacy Policy.

How long we keep it

We keep information only as long as reasonably needed for the purposes above. The privacy-choice cookie lasts up to six months. Email-list information remains until you unsubscribe or request deletion, subject to a minimal suppression record needed to honour the opt-out. Order, tax and accounting records remain for the period required by law and for resolving claims. Checkout withdrawal-consent and named-licence records remain with the related order for legal, licensing and dispute evidence. Support messages and security logs are kept according to their purpose and provider rotation schedules. User-level and event-level Google Analytics data is retained for 14 months; Google may keep aggregate reporting without those identifiers for longer. We may retain limited information longer where law, fraud prevention or an active dispute requires it.

Your rights

Depending on where you live, you may have rights to know or access personal information, correct it, delete it, restrict or object to processing, receive portable data, withdraw consent, opt out of certain uses, and appeal or complain to your local data-protection authority. We do not discriminate against anyone for exercising a privacy right.

Send a request to hello@thedigitalkit.co. Describe what you need and the email or order involved. We may ask for proportionate information to verify that the request is yours. Some records cannot be deleted immediately where retention is legally required or needed to establish, exercise or defend a claim. You may also complain directly to the regulator where you live.

Security, children and automated decisions

We use reasonable technical and organisational safeguards designed for the nature of the information, but no online system can promise absolute security. This site and its products are intended for adults and are not directed to children under 16. We do not knowingly collect children's personal information. Contact us if you believe a child submitted information. We do not make decisions about you solely by automated means that produce legal or similarly significant effects.

Changes to this policy

We may update this policy when our products, providers or legal obligations change. The effective date above will change. Where a change materially affects how we use information, we will provide any additional notice or request any new consent required by law.