Privacy Policy
Last updated: 14 May 2025
1. Introduction
Web Coconuts ("we", "us", "our") is operated by Sveta Blekher. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit web-coconuts.com (the "Website"), and what rights you have regarding that data.
This policy is written to comply with the EU General Data Protection Regulation (GDPR) 2016/679 and Israel's Protection of Privacy Law 5741-1981 and its Amendment No. 13 (2024). If you are located in the European Economic Area (EEA) or Israel, you benefit from the rights described below.
2. Data Controller
The data controller responsible for your personal data is:
Sveta Blekher — Web Coconuts
Email: sveta@web-coconuts.com
3. Data We Collect
3.1 Data you provide directly
When you fill out the contact form on this Website, we collect the following information:
- Your name
- Your email address
- The content of your message or project description
This data is sent directly to our email inbox via your email client. We do not store it in any database on our servers.
3.2 Data collected automatically
When you visit the Website, standard technical data may be automatically recorded, including:
- IP address (anonymised where possible)
- Browser type and version
- Operating system
- Pages visited and time spent
- Referral source (how you arrived at the Website)
This data is only collected if you have given consent for Analytics cookies (see Section 6 — Cookies).
3.3 Data we do not collect
We do not collect:
- Sensitive personal data (health, religion, ethnicity, etc.)
- Financial or payment information
- Data from children under 16
- Data through social login or third-party accounts
4. Legal Basis for Processing
Under GDPR and the Israeli PPL, we must have a lawful basis for processing your personal data. We rely on the following:
5. How We Use Your Data
- To respond to enquiries and project requests submitted via the contact form
- To improve the performance and content of the Website (analytics only, with consent)
- To comply with legal or regulatory obligations
We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
6. Cookies
Cookies are small text files placed on your device. We use the following categories:
Essential for the Website to function (e.g., remembering your cookie consent choice). These cannot be disabled.
Help us understand how visitors use the Website so we can improve it. No personal data is sold or shared. Only active if you accepted this category.
Used to track visits for the purpose of displaying relevant advertisements on other platforms. Currently not in use but may be activated in future.
You can manage or withdraw your cookie consent at any time using the panel, accessible in the footer of every page.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy:
- Contact form enquiries: retained in email correspondence for up to 3 years, or until the project relationship ends
- Analytics data: aggregated and anonymised; raw session data is not retained beyond 26 months
- Cookie consent records: stored locally in your browser (localStorage) until you clear your browser data or change your preferences
8. Third Parties and Data Sharing
We may use the following third-party services that may process data on our behalf:
- ImageKit — image delivery CDN (images served from their servers; no personal data shared)
- Google Fonts — font delivery (your IP may be logged by Google to serve fonts)
- Email client (e.g. Gmail) — receives contact form submissions
We do not share your personal data with any other third party. All processors are required to handle your data in accordance with applicable privacy law.
If we are required to disclose personal data by law, court order, or government authority, we will do so only to the extent legally required and will notify you where possible.
9. International Data Transfers
Some third-party services (such as Google Fonts) may transfer your data outside the EEA or Israel. Where this occurs, appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) or adequacy decisions recognised by Israel's Privacy Protection Authority.
10. Your Rights
Depending on your location, you have the following rights regarding your personal data:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, machine-readable format (GDPR, EEA users).
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent (e.g. cookies), withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: File a complaint with your local data protection authority (EU: your national DPA; Israel: the Privacy Protection Authority).
To exercise any of these rights, contact us at sveta@web-coconuts.com. We will respond within 30 days.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. The Website is served over HTTPS. Contact form data is transmitted directly to our email client without being stored on third-party servers.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take reasonable steps to protect your data.
12. Children's Privacy
This Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us immediately and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always reflect the most recent version. For significant changes, we will notify users via a banner on the Website.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Sveta Blekher — Web Coconuts
Email: sveta@web-coconuts.com
This Privacy Policy was prepared for informational purposes and does not constitute legal advice. For jurisdiction-specific compliance questions, consult a qualified data privacy attorney.