Privacy Policy

1. Who is responsible for the information

Zahavi Digital Clarity provides website, lead and customer journey diagnostic services.

The business responsible for deciding why and how the personal information described in this policy is used is:

• Legal name: Yonatan Zahavi
• Business / brand name: Zahavi Digital Clarity
• Country of operation: Israel
• Website: zahavidigitalclarity.com
• Contact email: hello@zahavidigitalclarity.com

Privacy-related questions or requests may be sent to:

2. Who this policy applies to

This Privacy Policy may apply to:

• visitors to zahavidigitalclarity.com;
• people who submit a written diagnostic request;
• potential, current and previous clients;
• people who communicate by email, WhatsApp or another agreed channel;
• people who participate in an optional short final walkthrough or another project meeting;
• people whose information is provided in connection with a diagnostic project.

3. Whether providing information is required

You are not legally required to submit a diagnostic request or provide information merely because you visit this website.

Information marked as required in a form is requested because it is reasonably needed to review the request, understand the relevant business context or respond to you.

If you choose not to provide required information:

• the form may not be submitted;
• the request may not be reviewed;
• Zahavi Digital Clarity may be unable to contact you;
• the suitability or scope of a diagnostic may not be determined;
• an agreed service may not be completed.

You should provide only information that is relevant, accurate and reasonably necessary for the purpose for which it is requested.

4. Information collected through the request form

The written diagnostic request form may collect:

• your name;
• your email address;
• your phone or WhatsApp number;
• your business name;
• your website URL;
• a description of your business, service or product;
• information about how enquiries reach the business;
• information about advertising or traffic sources;
• what currently feels unclear or is not working well enough;
• what you want to understand through the diagnostic;
• other information you choose to include;
• confirmation that you have reviewed the applicable terms and privacy information.

You do not need to know the technical cause of a problem before submitting a request.

5. Information provided during a diagnostic

After a scope has been agreed, you may voluntarily provide additional information relevant to the written diagnostic, including:

• website and business information;
• analytics reports or screenshots;
• traffic and SEO information;
• advertising context;
• form and lead-capture information;
• WhatsApp, phone, email, booking or checkout context;
• customer journey information;
• lead response or follow-up processes;
• available conversion or business-performance information;
• documents, screenshots, reports or links;
• messages sent through agreed channels;
• information discussed during an optional short final walkthrough or another agreed project meeting.

Information requested for a project should be limited to what is reasonably relevant to the agreed scope.

6. Information you should not send unnecessarily

Do not send unnecessary sensitive information through the website, regular email, WhatsApp or another unsecured communication channel.

In particular, avoid sending:

• passwords;
• unrestricted administrator credentials;
• payment-card or bank information;
• billing credentials;
• government identification numbers;
• medical or health information;
• information about children;
• full customer, employee or lead databases;
• private conversations unrelated to the diagnostic;
• information outside the agreed scope.

7. Information collected automatically

When you visit the website, technical and usage information may be processed automatically through hosting systems, server logs, cookies, analytics technologies and similar tools.

Depending on the tools active at the time, this may include:

• pages viewed;
• date and approximate time of a visit;
• referring website or traffic source;
• device category;
• browser and operating-system information;
• approximate geographic area;
• IP address or related technical identifiers;
• website-performance information;
• selected interactions such as form submission or link clicks.

The website currently uses Google Analytics 4 and Google Tag Manager to support measurement of website use and selected conversion-related events.

Analytics tools are not intended to receive passwords, payment-card information or the content entered into diagnostic form fields.

More information is provided in the Cookie & Analytics Notice.

8. Why information may be used

Personal information may be used to:

• receive and review a written diagnostic request;
• understand the business context described by you;
• decide whether the service appears suitable;
• communicate about the request;
• define a package, scope, timeline, price or next step;
• provide the agreed diagnostic service;
• prepare findings, reports and project materials;
• conduct an optional short final walkthrough or another agreed project meeting;
• prepare priorities or a 90-Day Action Plan where included;
• respond to service-related questions;
• maintain reasonable business and administrative records;
• manage payments, invoicing or accounting records;
• protect the website, systems and legal rights;
• investigate misuse, fraud or security concerns;
• meet applicable legal or regulatory obligations;
• understand and improve website and service performance.

Depending on the circumstances and applicable law, information may be processed based on:

• your voluntary request or consent;
• steps requested before entering a service agreement;
• performance of an agreed service;
• reasonable business and security interests;
• compliance with legal obligations;
• another lawful basis available in the circumstances.

Information will not intentionally be used for a materially unrelated purpose without an appropriate legal basis, agreement or consent where required.

9. Information about customers, leads and other people

Zahavi Digital Clarity does not ask clients to provide unnecessary personal information about customers, employees, leads or other third parties.

Where possible, reports, screenshots and examples should be:

• anonymised;
• summarised;
• redacted;
• blurred;
• limited to information relevant to the diagnostic.

If you provide information about another person, you are responsible for having an appropriate right, permission or legal basis to provide it for the agreed purpose.

Zahavi Digital Clarity may ask that unnecessary personal information be removed before analysis.

10. Access and credentials

No account access is required to submit an initial request.

If access is reasonably needed for an agreed diagnostic, the required platform, role and purpose will be discussed separately.

Where available, Zahavi Digital Clarity prefers:

• read-only access;
• limited-role access;
• temporary access;
• provider-generated user invitations;
• access that can be independently revoked by the client.

Clients are encouraged to review permissions and revoke temporary access when it is no longer required.

11. Communication channels

Communication may take place through:

• website forms;
• email;
• WhatsApp;
• video-call services where an optional walkthrough or project meeting is agreed;
• shared documents or links;
• another channel agreed with the client.

These channels may be operated by third-party providers and may be subject to their own terms, security measures and privacy policies.

Do not send passwords or unnecessary sensitive information through these channels unless a more appropriate method has been separately agreed.

12. Service providers and recipients

Information may be processed by service providers that support the website or diagnostic workflow.

Depending on actual use, recipients or provider categories may include:

• website and hosting providers;
• domain and DNS providers;
• WordPress and relevant website plugins;
• form and email-delivery services;
• email and communication providers;
• video-call providers where an optional walkthrough or project meeting is agreed;
• analytics and tag-management providers;
• SEO, testing and QA tools;
• document, storage and productivity services;
• payment or invoicing providers where used;
• professional advisers where reasonably required;
• authorities where disclosure is legally required.

Information should be shared only to the extent reasonably necessary for the relevant purpose.

Zahavi Digital Clarity does not sell personal information as a commercial data product.

13. Other circumstances in which information may be disclosed

Information may also be disclosed:

• at your request;
• with your authorisation where required;
• to provide the agreed service;
• to comply with applicable law or a lawful request;
• to establish, exercise or defend legal rights;
• to investigate suspected fraud, abuse or security incidents;
• to protect safety or prevent serious harm;
• in connection with a dispute or legal process;
• in connection with a legitimate business transfer or succession, subject to applicable law.

14. International processing and transfers

Some hosting, analytics, communication, cloud, document or professional-service providers may process or store information outside Israel or outside the country in which you are located.

This may occur because a provider uses international infrastructure, support teams or data centres.

Where information is transferred internationally, Zahavi Digital Clarity aims to limit the information to what is reasonably needed and to use providers or arrangements appropriate to the circumstances and applicable law.

Privacy and data-protection standards may differ between countries.

15. Security

Zahavi Digital Clarity uses reasonable organisational, technical and practical measures intended to reduce the risk of:

• unauthorised access;
• unnecessary disclosure;
• loss or misuse;
• unauthorised alteration;
• unauthorised destruction.

Measures may include, where appropriate:

• limiting information to what is reasonably needed;
• limiting account and document access;
• preferring read-only or temporary access;
• using available account-security controls;
• avoiding unnecessary collection of sensitive information;
• encouraging revocation of temporary permissions;
• maintaining relevant systems and plugins;
• using reputable professional providers.

No website, hosting provider, form, email system, messaging platform, cloud service or internet transmission can be guaranteed completely secure.

Clients should therefore avoid sending unnecessary sensitive information and should use safer access arrangements where agreed.

16. Retention

Information may be retained only for as long as reasonably necessary for purposes such as:

• reviewing and responding to requests;
• providing the agreed service;
• maintaining project and communication records;
• maintaining payment, accounting or tax records;
• protecting systems and preventing abuse;
• resolving disputes;
• establishing or protecting legal rights;
• meeting applicable legal obligations.

Different categories of information may be retained for different periods.

Information that is no longer reasonably needed may be deleted, anonymised or securely archived, subject to legitimate retention needs and applicable law.

Backup systems may retain limited copies for an additional period until normal backup cycles are completed.

17. Your privacy requests

Subject to applicable law and the circumstances of the request, you may contact Zahavi Digital Clarity regarding personal information relating to you.

This may include a request to:

• review personal information held about you;
• correct information that is inaccurate, incomplete, unclear or outdated;
• update contact information;
• request deletion where a deletion right applies;
• withdraw consent where processing depends on consent;
• ask questions about how information is used or shared.

A request may be subject to:

• reasonable identity verification;
• applicable legal requirements;
• legitimate record-retention needs;
• accounting, tax or legal obligations;
• technical feasibility;
• the rights and privacy of other people.

Not every request can necessarily be fulfilled in every circumstance, but it will be reviewed in accordance with applicable law.

Send privacy requests to:

You may also have a right to contact the Israel Privacy Protection Authority or another competent privacy authority, depending on the circumstances and applicable law.

18. Service and promotional communications

Zahavi Digital Clarity may send service-related communications, including:

• confirmation that a request was received;
• questions required to review the request;
• scope, payment or access information;
• project updates;
• delivery and follow-up information;
• responses to your questions.

Submitting a diagnostic request does not automatically add you to a general marketing mailing list.

Promotional communications, where used, will be sent only where permitted and may be stopped by using an available unsubscribe method or contacting:

19. Case studies and testimonials

Zahavi Digital Clarity will not publish:

• a client's name;
• a client's logo;
• an identifiable testimonial;
• exact confidential data;
• an identifiable case study;

without the client's prior written permission.

Anonymised or generalised lessons may be used only where they do not reasonably:

• identify the client;
• reveal confidential information;
• disclose unnecessary personal information;
• misrepresent the work or outcome.

Anonymisation may include:

• removing the business name;
• describing only the general industry;
• removing exact figures;
• generalising technical details;
• removing identifying circumstances.

20. Security incidents

If Zahavi Digital Clarity becomes aware of a suspected security incident involving information under its control, reasonable steps may be taken to:

• understand what occurred;
• limit further exposure where reasonably possible;
• work with relevant providers;
• preserve relevant records;
• notify an authority or affected person where legally required.

Clients should promptly report a suspected security issue relating to information shared for a diagnostic.

21. Children's privacy

Zahavi Digital Clarity services are intended for business owners and are not directed to children.

Do not provide personal information about children unless it is genuinely necessary, legally appropriate and separately agreed for a specific purpose.

22. Third-party websites and services

The website may contain links to third-party websites, documents, tools or platforms.

Zahavi Digital Clarity does not control the privacy, security, content or data practices of those external services.

Visitors should review the relevant provider's own privacy information before providing information to it.

23. Changes to this Privacy Policy

Zahavi Digital Clarity may update this Privacy Policy to reflect changes in:

• website functionality;
• forms;
• services;
• business processes;
• technology;
• third-party providers;
• legal or regulatory requirements.

The date at the top of this page identifies the current version.

Where reasonably appropriate, material changes may be communicated through the website or another suitable method.

24. Contact

For privacy-related questions, concerns or requests, please contact:

This Privacy Policy describes the general privacy practices of Zahavi Digital Clarity. It is intended for transparency and does not replace individual legal advice.