Privacy policy

Last updated: 22.10.2026

1. Who we are

The controller of the personal data described here is Tmunati Information Systems, a sole proprietorship of Ofer Wiesglass, registered in Israel and trading as GrowFlow (see the legal notice for full details). Contact for any privacy question: info@growflowtech.digital.

2. What we collect

• Contact form: your name, phone number, email (optional), the package you are interested in and what your business does.
• Sign-up form: your name, business name, phone, email, country, number of users, VAT number, preferred payment method and any message.
• Messages you send us by email, WhatsApp or Viber, and notes from our calls.
• Technical logs: our hosting provider records IP addresses, browser type, date and time and the pages requested, for security and to keep the website running.

We do not collect special categories of data and we do not knowingly collect data about children. This website is for businesses.

3. Why we use it, and the legal basis

• To reply to your enquiry, hold the consultation and send you a proposal — steps taken at your request before a contract (Article 6(1)(b) GDPR).
• To deliver the services, send invoices and keep accounts — performance of the contract and our legal obligations under tax and accounting law (Article 6(1)(b) and (c)).
• To keep the website and our systems secure — our legitimate interest (Article 6(1)(f)).
• To follow up with you about our services after you have contacted us — our legitimate interest (Article 6(1)(f)). You can object at any time and we will stop.

Giving us your details is voluntary, but without them we cannot reply or provide the services. We do not use automated decision-making or profiling that has legal or similarly significant effects on you. We never sell your data or share it for advertising.

4. Who receives your data

• Our website hosting and email provider, which stores the website, form messages and email.
• Our CRM provider (HubSpot), where we manage enquiries and clients.
• Our bank and card-payment provider, when you pay an invoice, and our accountant and the tax authorities, as the law requires.
• WhatsApp (Meta) or Viber, only if you choose to contact us there. Their own privacy policies apply.

Each provider processes data only for the purpose described and under its own data protection obligations.

5. Where your data is processed

We work from Israel, which the European Commission and the UK recognise as providing adequate data protection. Some of our providers may store or access data in other countries, including the United States. Where data is transferred outside the EEA or the UK to a country without an adequacy decision, the transfer is protected by the EU–US Data Privacy Framework (where the provider is certified) or by the European Commission's Standard Contractual Clauses. You can ask us for details.

6. How long we keep it

• Enquiries that do not lead to a contract: up to 24 months after our last contact.
• Client, contract and billing records: for as long as tax and accounting law requires (currently up to 7 years).
• Technical logs: for a limited period set by our hosting provider, for security.

7. Cookies

This website uses no cookies, analytics or advertising pixels, and loads nothing from third-party servers. Fonts are served from our own server. That is why there is no cookie banner.

8. Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and — where processing is based on consent — to withdraw consent at any time. Email us at info@growflowtech.digital; we reply within one month.

You can also complain to the data protection authority in the EU country where you live or work, or, in the UK, to the Information Commissioner's Office (ICO).

9. Changes

We may update this policy. The date at the top shows the latest version.