Privacy
Last updated
Privacy
The device
BLINK has no account and holds no credential. It does not sign in as you, does not join your network, and stores nothing about you that could be handed over to anybody. Unplug it and nothing of yours is left on it.
This website, before and after you press Pay
Before you press Pay, nothing you type leaves your browser. Your cart and your delivery details are kept on your own machine while you fill them in. Filling in the form does not send it, and until you press the button we cannot read any of it.
Pressing Pay is the moment that changes. The order is sent to our server in Israel and stored there; it is passed on to us as a private message through a messaging service, which is how the person who packs it finds out it needs packing; and you are handed to Morning's payment page, run by Grow, where the payment is made. Your card details are typed on their page and go to them - never to us, and never through this site. Your browser keeps its own copy of the order so the site can show you the receipt: you can remove that copy from the receipt page, and clearing your site data removes it.
What we collect when you order
Placing an order sends us exactly what is needed to make it, deliver it and account for it:
- your name
- your email address
- your phone number
- your street and number, and any apartment, floor or entrance
- your city, and district or state if you give one
- your postal code if you give one
- anything you choose to write in the note field
- which case you chose, how many, and what you paid
- and, only if you ask for a different address on the receipt, that address and the name or business on it
That is everything you type. Alongside it, the order record keeps three things you do not:
- what your browser tells every website automatically - the browser and operating system it reports, and the time the order was placed
- a two-letter country code for where the order was sent from
- a fingerprint of the order itself: a hash of what was ordered and where it is going, so that the same order arriving twice - a retry after a card is declined - is recognised as the same order rather than packed and posted twice. It identifies an order, not you and not your device.
Our server keeps logs as every web server does, and those logs record the IP address a request came from, so that a flood of automated orders can be stopped. They sit with Google Cloud for a limited time and are then deleted, and they are not joined up with your order.
Giving the details above is voluntary - no law obliges you to - but without the address and a way to reach you we cannot deliver an order, so the practical answer is that an order needs it.
What we do with it
We use it to make and deliver your order, to write to you about that order if there is something to say, to handle a cancellation or a warranty claim, and to keep the accounting records the tax authority requires. Nothing else. We do not sell it, rent it, profile you with it, or send you marketing you did not ask for.
Who else sees it
- Google hosts this site and stores the orders, in its Tel Aviv region, so an order stays in Israel. Google holds it for us and does not use it for anything of its own.
- The courier gets your name, address and phone number on the day, because somebody has to carry the box to you.
- Morning (Green Invoice), with Grow behind it, takes the payment on its own pages and issues your receipt. It sees your name, your email, the amount and your card. We never see the card number at all - it is entered on their pages, not on ours. Both are Israeli companies and the records stay in Israel. Payment is switched on: pressing Pay hands you to their page, and that page is where the charge happens.
- A messaging service carries the order to us as a private message the moment it is placed - what was ordered, and the name, address, phone and email needed to pack and post it. It goes to one private channel that only we can read. This is how the people making your device find out it needs making. Nothing about you is sent anywhere else because of it.
- Microsoft, through Clarity, receives a recording of how the page was used - only if you agree to it. It never receives your name, your address, your card or anything you typed: those are hidden from the recording, and they never leave this site's own order record. See cookies and analytics, including how to say no.
- Plausible, the service that counts visits, receives which pages were opened and roughly which country from, with no cookie and no identifier - nothing that could pick you out of the total.
- Nobody else. No marketing platform, no advertising network and no data broker. Nothing here is sold, and nothing is shared for anybody else's purposes.
How long we keep it
Order and payment records are kept for seven years, because Israeli bookkeeping rules require a business to retain them for that long. Correspondence that is not part of an order - a question you asked, an email that went nowhere - is deleted when it is no longer needed, and immediately if you ask.
This is the one honest limit on deleting your details: we can remove you from everything except the record of a sale, and that record has to survive until the seven years are up.
Where it is held, and how
OK Technologies, in Israel, is responsible for it. One person reads the orders. There is no team it circulates inside and nobody outside it to hand it to. Access is limited to that person, and the accounts holding it use two-factor sign-in.
If a security breach ever exposes your details, we will tell you and the Privacy Protection Authority, as the data security regulations require.
If you are in the EU or the UK
Offering to ship to you is what brings the GDPR - and the UK GDPR - into play, and we would rather write that down than argue about it later. When you order from there, we act as the controller of the details you give us.
- Why we are allowed to hold it. Your name, address, phone and email are held to perform the contract you asked for: to make, send and support the device. There is no other purpose and no profiling. The session recording is the one thing held on a different basis - your consent - which is why it is asked for separately and can be withdrawn without affecting anything else.
- Where it goes. The order record itself is held in Israel, because that is where we are and where Google Cloud stores it. The European Commission has decided that Israel provides an adequate level of protection for personal data, so that transfer needs no separate safeguard from you. Two recipients sit outside it, and the adequacy decision says nothing about either. The messaging service that carries our order alert is not an Israeli company, so the alert that tells us an order needs packing - your name, address, phone, email and anything in the note - is transferred outside Israel to reach us; it goes to one private channel that only we can read, and we rely on that service's own data protection terms for it. Microsoft holds the session recording outside Israel under its own terms, and only if you agreed to that recording; it carries no name, address, email or card.
- What you can ask for. Access, correction, erasure, restriction, objection, and a copy of your details in a portable form. The list under your rights is how we handle all of them, and it does not matter which law you are relying on.
- Who you complain to. Your own supervisory authority - your national data protection authority in the EU, or the Information Commissioner's Office in the UK - as well as the Israeli Privacy Protection Authority. Write to us first if you can bear it. It is faster.
We hold no special-category data, run no automated decision-making, and have no establishment in the EU or the UK.
Your rights over your details
What the law gives you Under the Protection of Privacy Law, 5741-1981 - as amended by Amendment 13, in force since August 2025 - you may see the information a business holds about you, and you may require it to be corrected or deleted if it is wrong, incomplete, out of date, or was obtained in breach of the law.
In practice, you can ask us to:
- Show you everything we hold about you. We reply with the actual records, not a summary.
- Correct anything wrong in it.
- Delete it - everything except an order record still inside the seven-year bookkeeping period, which we must keep.
- Stop using it for anything you did not ask for.
Write to support@blink-buddy.com or call +972 54-215-3777. We answer within 30 days and we do not ask why - and we answer the same way whether you are relying on Israeli law, the GDPR, the UK GDPR or nothing at all. If you are unhappy with the answer, you can complain to your own data protection authority, or to the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice.
Marketing
There is no mailing list. We have nothing to send you and no box on the checkout asking to. If that ever changes it will be a box you have to tick yourself, unticked when the page loads, with an unsubscribe link in every message - which is what section 30א of the Communications Law requires, and the fine for getting it wrong is up to ₪1,000 per message.
Email about an order you actually placed - the receipt Morning sends, a dispatch notice, a date that moved - is not marketing, and it is not something there is an unsubscribe link for while the order is live.