Privacy policy.

01Who is responsible

Zstore AI is the studio of Zvi Moshe, an independent designer and developer based in Tel Aviv, Israel. I ("I", "me", "my") am the data controller for the personal data described in this policy, which means I decide why and how it is used.

Contact for anything privacy-related: zstore.ai295@gmail.com

02What I collect

When you send the contact form, I store:

• Your name, to address you properly.
• Your email address, to reply to you.
• Your message, including the type of project you picked, if any.
• The date and time the message arrived.

The form also sends two technical values (when the page loaded and how long the form took to fill in) and a hidden field that people never see. These exist only to filter out spam bots, are checked the moment the form arrives, and are never stored.

When you email me or message me on WhatsApp, I receive whatever you choose to send, together with your email address or phone number.

When you simply visit the site, my hosting provider processes standard technical data (such as your IP address, browser type and the page requested) so the site can be delivered and protected. I do not use this data to identify or profile you.

03Why I use it, and the legal basis

• To answer your enquiry and prepare a proposal. This is a step you asked me to take before a possible contract (GDPR Article 6(1)(b)).
• To follow up about a possible collaboration and keep a simple record of enquiries. This is based on my legitimate interest in running my studio (Article 6(1)(f)).
• To keep the form and the site free of spam and abuse. Also a legitimate interest (Article 6(1)(f)).
• To keep accounting and tax records if we work together. This is a legal obligation (Article 6(1)(c)).

I do not send newsletters or marketing emails, and I never add you to a mailing list. No decisions about you are made by automated means, and no profiling takes place.

04Who else handles it

Your personal data is never sold, rented or shared for advertising. It is handled only by the services that make the site and the form work:

• Google (Google Apps Script, Google Sheets and Gmail) receives, stores and delivers contact form messages.
• Netlify hosts the website and processes the technical visit data described above.
• WhatsApp (Meta), only if you choose to contact me there. WhatsApp handles those messages under its own privacy policy.

I may also disclose information if the law, a court or a public authority requires it, or where that is necessary to protect someone's rights or safety.

05International transfers

I work from Israel. The European Commission and the UK government both recognise Israel as providing an adequate level of protection for personal data, so data can move from the EU and UK to me without extra safeguards.

Google and Netlify may process data in the United States and other countries. Where they do, they rely on recognised safeguards such as the EU–US Data Privacy Framework (and its UK extension) or the European Commission's Standard Contractual Clauses.

06How long I keep it

• Enquiries that don't become a project are deleted within 24 months of our last contact.
• If we work together, I keep project correspondence for the duration of the project and afterwards only for as long as tax and accounting law requires (in Israel, generally up to 7 years).
• Technical visit data is kept by the hosting provider for a short period under its own retention settings.

You can ask me to delete your data sooner at any time (see section 09).

07Security

The site is served only over encrypted HTTPS, and form messages are stored in a Google account that only I can access. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed, but I take reasonable care and will notify you and the relevant authority of a breach where the law requires it.

08Cookies & analytics

This website sets no cookies and uses no analytics, advertising or tracking tools. Fonts and images are served from this domain, so loading a page does not contact any third party.

Your browser's own storage keeps two small preferences that never leave your device: whether you turned motion effects off, and a short note that stops the form from being sent twice by accident. You can clear them at any time in your browser settings. Because they are strictly necessary for features you use, they do not require consent.

If this ever changes, this policy will be updated before the change goes live.

09Your rights

Wherever you are, you can ask me to:

• Access the personal data I hold about you and receive a copy.
• Correct anything that is inaccurate or incomplete.
• Delete your data.
• Restrict how I use it, or object to uses based on my legitimate interests.
• Transfer the data you gave me, in a common machine-readable format.

Email zstore.ai295@gmail.com with your request. It is free, and I will reply within one month. I may ask you to confirm your identity first, so I only ever share data with the person it belongs to.

If you are unhappy with how I handle your data, please tell me first so I can put it right. You also have the right to complain to a data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner's Office (ICO); in Israel, the Privacy Protection Authority.

10Children

This site is meant for businesses and adults. I do not knowingly collect personal data from anyone under 16. If you believe a child has sent me their details, let me know and I will delete them.

11Changes to this policy

When this policy changes, the "Last updated" date at the top changes with it. If a change affects how I use data you have already sent, I will tell you by email.