Privacy Policy

1. Introduction & Data Controller

At TechSuit, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit techsuit.io, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Israeli Privacy Protection Law, 1981 and its regulations.

The data controller responsible for your personal data is Lior Refael (trading as “TechSuit”), Eforni 6, Kfar Saba, Israel 4424616. You can reach us at office@techsuit.io or +972 54-569-6033.

2. Data We Collect

We only collect data that is necessary to provide our services and improve your experience:

• Contact Information: Name, business name, email address, and any details you include when you submit our consultation or booking form.
• Scheduling Data: When you book a call, our scheduling provider processes the information you enter to arrange the meeting.
• Usage Data: IP address, browser type, device information, and page interactions (collected via Google Analytics, property G-6M6FVSDC38, only with your explicit consent).

3. Legal Basis for Processing

Under Article 6 of the GDPR, we rely on the following lawful bases:

• Consent (Art. 6(1)(a)): for analytics cookies and any optional marketing communications. You may withdraw consent at any time.
• Performance of a contract / steps prior to a contract (Art. 6(1)(b)): to respond to your enquiries, schedule calls, and deliver our services.
• Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve our website and to communicate with prospective business clients, balanced against your rights.
• Legal obligation (Art. 6(1)(c)): to retain certain records (e.g., for tax and accounting purposes).

4. Data Retention

• Consultation / contact form submissions: retained for up to 24 months after our last interaction, unless a client relationship begins.
• Client and billing records: retained for the period required by applicable Israeli tax and accounting law (generally 7 years).
• Analytics data: retained according to Google Analytics' configured retention period (up to 14 months).

When data is no longer needed for these purposes, it is securely deleted or anonymised.

5. Third-Party Processors

We share data only with trusted service providers who process personal data on our behalf under data-protection terms:

• Netlify (hosting & form processing) - serves the website and processes consultation requests.
• Google Analytics (Google) - website performance tracking, only with your explicit consent.
• Calendly (scheduling) - processes the details you enter directly into its booking tool when you book a call.
• Supabase (backend infrastructure) - relays calendar-availability requests to Calendly; it does not receive your name or contact details.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

6. International Data Transfers

TechSuit is based in Israel - a country recognised by the European Commission as providing an adequate level of data protection. Our processors may store and process data within the EU or the United States. Where personal data is transferred outside the EEA to a country without an adequacy decision, the transfer is protected by the European Commission's Standard Contractual Clauses (SCCs) incorporated into our processors' data-processing terms.

Specific disclosure for Israel: by submitting your data, you acknowledge and agree that your information may be processed and stored in the EU or the US, outside the borders of the State of Israel.

7. How We Protect Your Data

We take the security of your data seriously and apply technical and organisational measures appropriate to the risk and to the size of our business. These include serving this website over encrypted connections (HTTPS/TLS), limiting access to personal data to those who need it, and relying on established service providers (such as Netlify, Google, and Calendly) that maintain their own security programmes. No method of transmission or storage is completely secure, so while we work to protect your data, we cannot guarantee absolute security. In the event of a personal-data breach that is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where required, affected individuals without undue delay.

8. Children's Privacy

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.

9. Your Rights

Under the GDPR and Israeli law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”);
• Restrict processing in certain circumstances;
• Object to processing based on legitimate interests or direct marketing;
• Data portability - receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at office@techsuit.io. We will respond within the timeframes required by applicable law (generally within one month).

10. Right to Lodge a Complaint

If you believe your data has been handled improperly, you have the right to lodge a complaint with a supervisory authority - in Israel, the Israeli Privacy Protection Authority (PPA); in the EU, your national Data Protection Authority.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time via the “Cookie Settings” link in the footer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “last updated” date below and, where appropriate, by notice on this page.