Privacy policy

This policy explains what personal data digitalstep.biz collects, why we collect it, and what choices you have. It is short because we collect very little.

Who we are

DigitalStep is run by Moshe Machlav, a sole proprietor (osek murshe) registered in Israel. We help companies that already use Docebo with setup, administration and integrations.

DigitalStep is responsible for the personal data described in this policy. Under the GDPR this makes us the controller; under Israeli privacy law, the database controller.

Contact: Moshe@digitalstep.biz. Postal address: 1 Moshe Nakash St., Petah Tikva, Israel.

What this policy covers

This policy covers the website digitalstep.biz in English and Hebrew, our newsletter, and messages and call bookings that reach us through the site.

It does not cover work we do for clients inside their Docebo platforms. That work is governed by our client contracts and their data processing terms.

The short version

  • There are no user accounts, payments or ads on this site.
  • Analytics run only if you choose "Allow analytics" in the cookie banner.
  • You get the newsletter only if you sign up, and you can unsubscribe at any time.
  • We do not sell your data and we do not profile you.

Do you have to give us data?

No. You are not legally required to give us any personal data. You can browse the site without allowing analytics.

Without an email address we cannot send you the newsletter. Without booking details we cannot schedule a call.

When you visit the site

Our site is hosted by Netlify in the United States. Like any web server, it records basic technical data each time a page loads: your IP address, your browser type (user agent), the page requested and the time.

We use this data to deliver the site, keep it secure and fix errors. Lawful basis: our legitimate interest in running a working, secure website.

Netlify keeps these logs for a limited period under its own policies. We do not use them to identify you.

Analytics, only with your consent

We use Google Analytics 4 to understand which pages are useful. It loads only after you click "Allow analytics" in the cookie banner. If you decline, or make no choice, it does not load.

When it runs, Google Analytics collects data such as the pages you visit, time on page, approximate location based on your IP address, device and browser type, and how you reached the site. We look at this data in aggregate. We do not use it to identify you or for advertising.

Lawful basis: your consent. You can withdraw it at any time through "Cookie settings" in the site footer. Withdrawing does not affect data collected before.

Newsletter

If you sign up, we collect your email address through Kit (ConvertKit), our email provider. We send one email whenever we publish a new recipe, guide or journal entry. Nothing on the site requires you to sign up.

Kit may record basic delivery data, such as whether an email was delivered or opened and whether a link was clicked.

Lawful basis: your consent. Every email has an unsubscribe link, or you can email us and we will remove you. After you unsubscribe, Kit may keep your address on a suppression list so you are not emailed again by mistake.

Booking a call

The "Book a call" button opens a Google Calendar booking page. Google collects the details you enter (name, email address and any notes) and sends them to us with a calendar invitation.

We use these details to prepare for the call, hold it and follow up. Lawful basis: taking steps you ask for before a possible contract, and our legitimate interest in answering business enquiries.

Google also processes booking details under its own privacy policy.

When you email us

If you email Moshe@digitalstep.biz, we receive your email address, your name and whatever you choose to write. We use it to reply and, if we work together, to run the engagement.

Lawful basis: steps before a contract, the contract itself, or our legitimate interest in answering messages.

Fonts and embedded videos

The fonts on this site are served from our own website. Loading a page does not connect you to Google Fonts or any other font service.

Some articles include YouTube videos. They do not load until you press play: until then, nothing is sent to YouTube. When you press play, the video loads from YouTube in privacy-enhanced mode (youtube-nocookie.com), which is owned by Google. From that point YouTube may set cookies or similar storage, and Google's privacy policy applies.

Cookies and similar technologies

We keep these to a minimum:

  • ds_analytics_consent (your browser's local storage): remembers whether you allowed analytics. It is strictly necessary, holds only "yes" or "no", and stays until you clear your browser data.
  • Google Analytics cookies (_ga and _ga_<ID>): set only after you allow analytics. They tell visits apart and usually last up to 2 years.
  • YouTube: may set cookies or similar storage after you press play on an embedded video.
  • To change your choice, click "Cookie settings" in the site footer. You can also delete cookies and site data in your browser settings.

Who receives your data

We do not sell or rent personal data, and we do not share it for advertising. We use these service providers:

  • Netlify: website hosting and server logs (United States).
  • Google: Google Analytics (only with consent), Google Calendar booking, and YouTube videos (only after you press play).
  • Kit (ConvertKit): newsletter sign-up and delivery.
  • We may also disclose data if the law requires it, or to protect our legal rights.

International transfers

Our providers are based in, or store data in, the United States and other countries. Data protection law there may differ from the law where you live.

For data from the EU or UK, we rely on recognised safeguards. These include the EU-U.S. Data Privacy Framework and its UK extension where the provider is certified, or Standard Contractual Clauses (with the UK Addendum for UK data). For data from Israel, we follow the Israeli rules on transferring data abroad.

You can ask us for more information about these safeguards.

How long we keep data

  • Server logs: kept by Netlify for a limited period under its own policies.
  • Analytics data: kept for up to 14 months, then deleted automatically by Google Analytics.
  • Newsletter: until you unsubscribe. A suppression record may be kept afterwards so you are not emailed again.
  • Bookings and emails: as long as we need them to handle your enquiry. If we work together, for the length of the engagement and any period required by tax and accounting law.
  • We review old correspondence regularly and delete what we no longer need.

Your rights

Your rights depend on where you live. Under Israeli law, you can see the data we hold about you and ask us to correct or delete it. Under the GDPR and UK GDPR, you also have these rights:

  • Access: get a copy of your data.
  • Correction: fix data that is wrong or incomplete.
  • Deletion: ask us to erase your data.
  • Restriction: ask us to limit how we use your data.
  • Objection: object to use based on legitimate interest, and to direct marketing at any time.
  • Portability: receive data you gave us by consent or under a contract, in a common format.
  • Withdraw consent: at any time. This does not affect earlier use.
  • Removal from mailing lists: at any time, under Israeli law as well.
  • We do not make decisions about you based solely on automated processing, and we do not profile you.

How to make a request or complaint

Email Moshe@digitalstep.biz with "Privacy request" in the subject line. We may ask you to confirm your identity. We will reply within 30 days. Requests are free unless they are clearly unfounded or excessive.

If you are not satisfied, you can complain to the Israeli Privacy Protection Authority (on gov.il). In the EU, you can complain to the data protection authority where you live, where you work, or where the issue happened. In the UK, you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve it with you first.

Security

We use reasonable technical and organisational measures to protect personal data. The site is served over an encrypted connection (HTTPS), access to our provider accounts is restricted, and we work with established providers. No method is completely secure, but we take security seriously.

Children

This site is for business visitors. It is not directed at anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy when the site or the law changes. We will update the date on this page, and for significant changes we will also post a notice on the site.

Contact

DigitalStep, Moshe Machlav. Email: Moshe@digitalstep.biz. Postal address: 1 Moshe Nakash St., Petah Tikva, Israel.