Privacy Policy

1. What data we collect

Contact form

When you submit the contact form, we collect:

• full name;
• telephone number;
• email address;
• business name, if provided; and
• any information you choose to include in the free-text message field.

Full name, telephone number and email address are required. Business name and the message field are optional.

Checklist and resource forms

When you submit the checklist form or another similar resource form, we collect your email address.

Submitting such a form does not currently subscribe you to an ongoing advertising or marketing mailing list.

If Kargraft introduces promotional mailing activity in the future, any consent required by applicable law will be obtained separately.

Attribution information

When a form is submitted, we may also store:

• UTM source;
• UTM medium;
• UTM campaign;
• UTM term;
• UTM content;
• referring URL;
• the page from which the form was submitted; and
• general device type, such as mobile, desktop or tablet.

This information may be stored together with the relevant form submission.

Analytics

Kargraft uses Google Analytics 4 (GA4) through Google Tag Manager (GTM) to understand how visitors use the website.

Google Tag Manager and Google Analytics are loaded only after a visitor accepts analytics cookies through the website's consent banner.

If you decline analytics cookies, Kargraft does not load GTM or GA4 for that visitor.

Where consent has been given, analytics information may include:

• page views and sessions;
• browser and device information;
• approximate geographic information;
• traffic and referral sources;
• form-start events;
• form-submission events;
• button clicks;
• scroll depth;
• outbound-link clicks; and
• clicks on telephone, email and WhatsApp contact links.

Cookies

The website uses a first-party cookie named kg_consent.

This cookie is used solely to remember whether you accepted or declined analytics tracking.

The cookie:

• remains valid for up to one year;
• uses Path=/;
• uses SameSite=Lax; and
• is marked Secure when served over HTTPS.

The kg_consent cookie is not used by Kargraft to track browsing behaviour.

Where analytics consent has been provided, Google Analytics may set its own analytics cookies.

Kargraft does not currently use Meta Pixel, remarketing tags, advertising-network trackers or similar advertising trackers.

IP addresses

Kargraft does not store visitors' IP addresses in its lead database.

An IP address may be processed temporarily in server memory for up to approximately 60 seconds for spam and abuse prevention. The website currently permits a maximum of five form submissions per minute from the same IP address.

The IP address used for this purpose is not written by Kargraft to the lead database or associated with a lead record.

Hosting and infrastructure providers may independently process technical request information as part of their ordinary security, infrastructure and logging activities.

Information we do not collect

The public website does not currently:

• collect credit-card details;
• collect payment or financial information;
• process online payments;
• allow visitors to create user accounts;
• provide visitor login functionality; or
• sell personal information to data brokers or advertising networks.

2. How we use the information

We may use information collected through the website to:

• receive and respond to enquiries;
• contact people who requested contact;
• understand prospective clients' needs;
• handle requests for checklists or other resources;
• manage and follow up on business enquiries;
• understand which sources and campaigns generate enquiries;
• analyse website usage where analytics consent has been provided;
• improve the website, its content and user experience;
• identify and resolve technical problems;
• prevent spam, abuse and automated submissions;
• maintain records reasonably required for business administration;
• establish, exercise or defend legal rights; and
• comply with applicable legal obligations.

We will not knowingly use personal information for a materially different purpose without an appropriate legal basis and, where required, appropriate notice or consent.

3. Third parties

Kargraft uses third-party service providers to operate the website.

Google

Google Analytics 4 and Google Tag Manager may receive analytics and device information after the visitor has accepted analytics tracking.

Purpose: website analytics and measurement.

Resend

Information submitted through forms may be processed by Resend in order to send Kargraft an email notification concerning the submission.

Purpose: transactional email delivery and internal lead notification.

Neon

Website form submissions are stored using Neon database infrastructure.

The Kargraft database is currently hosted in the EU eu-central-1 region.

Purpose: application and database storage.

Vercel

Kargraft uses Vercel to host and operate the website.

Vercel may process technical request and infrastructure information as part of ordinary website hosting, security and logging.

Purpose: website hosting and application operation.

International processing

Some of these service providers operate internationally. Personal information may therefore be processed or transferred outside Israel as part of the services they provide.

Kargraft uses such providers subject to applicable Israeli privacy requirements and the relevant contractual arrangements with those providers.

Kargraft does not sell personal information.

4. Retention period

Personal information collected through contact and checklist forms is normally retained for 24 months from Kargraft's last substantive interaction with the relevant person.

Information may be retained for a longer period where reasonably necessary for:

• an active client relationship;
• an ongoing enquiry;
• compliance with a legal obligation;
• accounting or other records required by law;
• resolving a dispute; or
• establishing, exercising or defending legal claims.

Information that is no longer reasonably required will be deleted or anonymised where appropriate.

The kg_consent cookie is retained for up to one year, unless deleted earlier by the user.

Kargraft's Google Analytics property is configured to retain applicable event-level and user-level data for 14 months.

Third-party providers may retain technical, backup, security or operational information in accordance with their own systems and contractual terms.

5. User rights

Subject to the Israeli Privacy Protection Law, 5741-1981, as amended, and other applicable law, individuals may have the right to inspect personal information relating to them that is held in a database controlled by Kargraft.

Where information relating to you is incorrect, incomplete, unclear or not up to date, you may request its correction or deletion in accordance with applicable law.

You may also ask Kargraft to delete personal information that is no longer required. Each request will be considered in accordance with applicable law and any legitimate or legally required record-retention obligations.

You may decline analytics tracking through the website's cookie-consent interface.

Cookies already stored on your device may also be removed through your browser settings.

Kargraft may request reasonable information necessary to verify the identity of a person making a privacy request before disclosing, correcting or deleting personal information.

6. Privacy contact

The person responsible for Kargraft and for personal information processed through the website is:

Requests regarding access, correction, deletion or other privacy matters may be submitted using these contact details.

Kargraft may update this Privacy Policy as its website, services, data-processing practices or applicable legal requirements change.

The "Last updated" date will be revised whenever this Policy is materially updated.