1. Who we are
1.1. This Privacy Policy explains how The Ness Within 26, Inc., doing business as "Revital Levine Keren" ("we", "us", "our"), collects, uses, shares and protects personal information when you use www.revitallevinekeren.com, its member account area, and the installable web app (together, the "Site"), and when you buy an event ticket or book a session.
1.2. The Site offers Feng Shui, BaZi, Kua, Kabbalistic candle and Bio-Orgonomy services, personal maps generated from birth details, workshops and events, and member accounts.
1.3. We are the party that decides how and why your personal information is used (in EU and UK terms, the "controller").
1.4. Contact details for privacy questions:
- Email: revital@revitallevinekeren.com
- Privacy and erasure requests: ariel@peacockautomations.com
- Postal address: 10790 Breezeway Ln., Davie, FL 33324
- WhatsApp: +1 786-449-7146
2. Scope
2.1. This policy applies to personal information we process through the Site, through event ticket purchases, through email and text messages we send, and through the records we keep of private sessions.
2.2. Sessions are booked by WhatsApp. Messages you exchange with us on WhatsApp are also governed by WhatsApp's own terms and privacy policy.
2.3. Our Cookie Policy (/cookies) forms part of this Privacy Policy. Our Terms and Conditions (/terms), Refund and Cancellation Policy (/refunds), Disclaimer (/disclaimer) and Accessibility Statement (/accessibility) are separate documents.
2.4. This policy does not apply to websites and services we link to but do not operate, such as Instagram, Facebook, TikTok, WhatsApp, Zoom and YouTube. The Site links to our social media profiles; it does not embed social media plugins or advertising pixels.
3. The information we collect
3.1. Account information. Your name, first name, last name, email address, profile image if you upload one, and your password. We store your password only in a one-way encrypted (hashed) form. We also store email verification codes and password reset tokens, each with an expiry time, and account records such as your account type (standard, premium or administrator), the services and purchases linked to your account, the date your account was created, and whether it is a temporary guest account. If you add extra email addresses to your account, we store each one, whether and when you verified it with a code we email to that address, and the verification code in a one-way protected (hashed) form until it is used or expires. An address you have verified belongs to one account only.
3.2. Contact information. Your phone number or numbers, with the labels you give them and which number is primary.
3.3. Birth details. Your date of birth, time of birth, birth time zone, birth place (for some events) and gender. If you add a birthplace to your profile, we store the birthplace you choose, and, where available, its location.
3.4. Home or property address and location. The address you enter for a Feng Shui or Kua map, and the latitude and longitude we obtain for that address from our mapping provider. The address is saved in your profile; the address and coordinates are saved inside the map. If you enter a home address in your profile, the address text is checked with Mapbox address lookup, and we keep the confirmed address text and the date it was confirmed.
3.5. Maps. The personal maps generated from your details (BaZi, Kua and Feng Shui), including the details used to generate them (name, email, date and time of birth, time zone, gender and, for Kua and Feng Shui maps, the address and coordinates), and the share and claim links attached to them.
3.6. Information about other people. If you create a map for another person, you give us that person's name, birth details, gender and, if you include it, an address, together with your confirmation that you have their permission or are their parent or legal guardian. See section 6.
3.7. Event ticket information. When you buy a ticket we collect your name, email, phone number and preferred language, and, depending on the event, your date of birth, time of birth, birth place, gender and address. We also store the payment status, the amount paid, payment reference numbers from our payment processor, and your acceptance of the Terms and Conditions and the Refund and Cancellation Policy at checkout and, if you tick the optional media release box, your consent to our use of photographs and video of you at the event. The media release is optional and is not a condition of purchase. We record it with the date and time and keep the record as proof of your consent, on the same terms as our other consent records (section 11). We do not receive or store your full card number.
3.8. Saved payment methods. If you save a card to your account wallet, the card is stored by our payment processor, Stripe. We store only a Stripe customer reference.
3.9. Session records. If you book a private session with us (bookings are made by WhatsApp), we record the session ourselves, whether or not you have an account: your name, contact details, the type of session, date and time, location type (in person, video, phone or home visit), price, follow-up links, tasks, notes we choose to share with you in your account, and internal notes made by Revital Levine Keren that are not shown to you in your account.
3.10. Marketing and texting preferences. Whether you have agreed to receive marketing emails, and when, and the contact reference our email provider assigns to you; whether you have agreed to receive text or WhatsApp messages, the exact consent wording you agreed to, the number you opted in with, and when; and your reminder choices by channel.
3.11. Terms, age and consent records. The version of the Terms and Conditions and this Privacy Policy you accepted, and when; your confirmation that you are 18 or older; and the current position of the map-use switch described in section 5, with the date and time of each change; for each event attendee, the version of the recording policy they agreed to and when (kept with the attendee's record for the event); and, if you tick the optional media release box, your media release consent (see 3.7 and 3.18).
3.12. Security and sign-in records. For each sign-in attempt: the email entered, your account reference if known, your IP address, your browser type (user agent), whether the attempt succeeded, and the reason if it failed. Your IP address is also used, briefly, to limit repeated requests.
3.13. Usage information. Only if you accept analytics cookies: a random identifier stored in your browser, a session identifier, your account reference if you are signed in, the pages you view, the referring page, your language, your browser type, and actions such as submitting the calculator, generating, viewing, sharing or downloading a map, creating an account, and clicking on or buying premium content. We do not store your IP address with this information. If you are signed in, this information is linked to your account, so it is not anonymous.
3.14. Email delivery information. For bulk emails we send, your email address and the delivery status information returned by our email provider, such as whether an email was delivered or bounced and why.
3.15. Birth details and sensitive information
Your birth details, gender, home address and the maps generated from them are personal to you. Our readings use them to offer reflection and guidance about personality, relationships and well-being. Session notes may also record things you choose to tell us about your health or personal life. We treat all of this information as sensitive, whether or not a particular law classifies it that way. We use it only for the purposes in section 4, we do not use it for advertising, and we do not sell it. Our services are not medical, psychological or other professional care; see our Disclaimer (/disclaimer).
3.16. Where we get your information
We collect information:
- from you, when you create an account, generate a map, buy a ticket, fill in a form, change your settings or contact us;
- from another member, when that member creates a map for you (section 6);
- from Revital Levine Keren, who records private sessions booked by WhatsApp or in person (3.9);
- automatically, from your browser, when you sign in or, if you accept analytics cookies, when you use the Site (3.12 and 3.13);
- from our service providers, such as the payment status from Stripe, map coordinates for an address from Mapbox, and email delivery status from Brevo.
3.17. Information you must give us, and the notice on our forms
3.17.1. You do not have a legal obligation to give us any personal information. Some information is needed to provide a service: an email address and password to create an account; birth details to generate a map; an address for a Kua or Feng Shui map; and, for an event ticket, the details the event asks for. If you do not provide it, we cannot provide that service. Marketing emails, text messages and analytics are always optional.
3.17.2. The map form, the account details form and the event checkout form show the following short notice next to the birth-details fields:
"Your birth details are used only to calculate your map. You aren't legally required to give them, but we can't create a map without them. We store them with your map, never sell them, and share them only with the service providers listed in our Privacy Policy."
3.18. Recordings
3.18.1. What. Audio and video recordings of private sessions, meetings and events, and clips used under the media release (see 3.7). A recording can include your voice, your image, your name as shown on screen, and anything you say or share during the recording.
3.18.2. Why. Revital Levine Keren records for her own development. A recording is used publicly only if you gave the separate, optional media release. See our Terms and Conditions at /terms#event-recording.
3.18.3. Who sees them. Revital Levine Keren. Paid attendees may be given access to a recording of an event, at her discretion and for a limited time only.
3.18.4. Processors and storage. Zoom delivers online sessions and events and makes the recording. Recordings are then stored by us with our hosting and storage providers (section 7).
3.18.5. Attendees may not record. Attendees may not record, screenshot or copy any session, meeting or event, as set out in our Terms and Conditions (/terms#event-recording).
3.18.6. How long. We keep a recording until Revital Levine Keren deletes it. On request we erase a recording of you, except where we must keep it (see 11 and 12.3). Closing your account does not by itself delete recordings (see 12.2).
4. How we use your information and our legal bases
Where the law requires a legal basis for processing (for example the GDPR or UK GDPR), we rely on the bases listed below.
| Purpose | Information used | Legal basis |
|---|---|---|
| Create and run your account, let you sign in, verify your email, reset your password | Account, security records | Performance of our contract with you |
| Confirm that you meet the minimum age of 18 | Your age confirmation and, for your own account, your date of birth | Performance of our contract with you; legal obligation |
| Generate, store and display your maps, and generate map PDFs when you download them | Birth details, address, location, maps | Performance of our contract with you |
| Sell event tickets, admit you to events, send you the event link, reminders and your event map | Event ticket information, birth details where the event requires them | Performance of our contract with you |
| Provide and record private sessions | Session records | Performance of our contract with you; our legitimate interest in keeping accurate client records |
| Use your maps in sessions and workshops (section 5) | Maps, birth details | Your agreement when you accept the Terms and Conditions, which you can withdraw at any time in Settings |
| Send marketing emails | Name, email, and the details listed in section 7 | Your consent, given separately from any other agreement |
| Send text or WhatsApp reminders and updates | Mobile number, texting consent record | Your consent |
| Keep the Site secure, prevent abuse and limit repeated requests | Security records, IP address, bot-check signals | Our legitimate interest in protecting the Site and our members |
| Understand how the Site is used and improve it | Usage information, Vercel Analytics page counts | Your consent (given through the cookie banner) |
| Process payments and refunds, keep financial records | Event ticket information, Stripe references | Performance of our contract with you; legal obligations (tax and accounting) |
| Record sessions, meetings and events for Revital's own development, and use media-release clips publicly | Recordings (3.18), media release consent | Our legitimate interest in Revital's professional development; for public use of a clip, your consent through the optional media release |
| Respond to your requests and messages | Contact details, your message | Performance of our contract with you; our legitimate interest in answering you |
| Comply with the law and defend legal claims | Any relevant information | Legal obligation; our legitimate interest |
4.1. Guest maps. You can generate a map without an account. To do so you must tick a box agreeing to the Terms and Conditions and this Privacy Policy. A separate box lets you choose to receive occasional updates and event news by email. That box is optional and unticked, and you can generate a map without ticking it. If you tick it, we record your consent, with the date and time, on the temporary account described below. We then create a temporary account holding the details you entered and email you a link, valid for 3 days, to claim the map into a full account. The temporary guest account is deleted automatically 30 days after it is created. Your browser keeps a signed cookie listing your guest maps (see the Cookie Policy).
4.2. Accounts created by ticket purchase. At event checkout you must tick a box agreeing to the Terms and Conditions and the Refund and Cancellation Policy before you pay. The checkout form also tells you: "We'll create an account with this email so you can see your ticket and any map included with it." If you do not already have an account, we create a member account for you using the details you gave at checkout, so that you can see your ticket and event map.
4.3. Automated processing. Maps are generated automatically from the details you enter, using fixed calculation rules. We do not use your information to make decisions that have legal or similarly significant effects on you.
5. Use of your maps in sessions and workshops
5.1. When you accept the Terms and Conditions, you agree that Revital Levine Keren may use your maps in private sessions and workshops. This is one setting that covers both sessions and workshops. It is on by default once you accept the Terms and Conditions.
5.2. This means: your maps may be shown on screen during your own session, shown to the group at workshops, and used in anonymised form as examples in teaching.
5.3. What the setting never covers. The setting applies only to maps of you. It never applies to a map you create for another person (section 6), and it never applies to archived maps. We do not use those maps in sessions or workshops.
5.4. How to switch it off. You can switch this off at any time in your account under Settings, Map use consent, by turning off "Revital may use my maps in sessions and workshops." Once you switch it off, we will not use your maps in future sessions or workshops. Switching it off does not affect any use made before you switched it off, and does not affect the rest of your account. You can switch it on again at any time. We record each change with its date and time.
5.5. If you do not have an account, you can ask us to stop this use by contacting us using the details in section 1.4.
6. Maps you create for other people
6.1. You may create a map for another person. Before you do, the map form asks you to tick a box confirming: "I have this person's permission to enter their details, or I'm their parent or legal guardian." You cannot create the map without ticking it.
6.2. We use that person's information only to generate and store the map you asked for. We do not add them to any mailing list, we do not contact them, and we do not use their map in sessions or workshops (section 5.3). A map made for another person does not copy their address onto any profile.
7. Who we share your information with
7.1. We do not sell your personal information. We do not share it with third parties for their own marketing, and we do not use advertising cookies or advertising pixels.
7.2. We share personal information only with the service providers below, who process it on our behalf to run the Site, and only as needed for the services they provide.
| Provider | What they do for us | What they receive |
|---|---|---|
| Vercel Inc. | Hosting, file storage, and page-count analytics | All Site traffic, including IP addresses in server logs; uploaded files; page counts only if you accept analytics cookies |
| Neon | Database hosting | All information described in section 3 |
| Stripe, Inc. and its affiliates | Payment processing, saved cards, refunds | Payment details you enter directly into Stripe's payment form; and, from us, only your name, your email address and the event ID. We do not send Stripe your birth details, gender, phone number or address |
| Brevo | Sending all emails, including account, ticket and reminder emails; managing the marketing list; reporting delivery status | Your email, name and the content of each email we send you. If you agree to marketing emails: your first name, last name, phone number, date of birth and account reference. If you opt in to texting only, we send your mobile number (as an SMS attribute) and your email address to Brevo |
| Mapbox, Inc. | Converting an address into map coordinates; checking a home address you enter in your profile; map display | The address you enter; map requests from your browser |
| OpenStreetMap Overpass API (the Overpass API service at overpass-api.de) | Showing the surroundings of a property on a map | Map coordinates near the property |
| Upstash, Inc. | Limiting repeated requests | Your IP address, briefly |
| Cloudflare, Inc. (Turnstile) | Checking that sign-ups are made by a person, not a bot | Browser and device signals during sign-up |
| Google LLC (Google Fonts) | Supplies a font inside the Stripe payment form | Your IP address and browser type when the payment form loads |
| Google LLC (YouTube, privacy-enhanced mode) | Showing videos on the About page | Your IP address and browser information when a video loads |
| Anthropic PBC | Translating event descriptions from English to Hebrew or Hebrew to English, used only by the Site administrator | The event text the administrator writes. The Site does not send member account information |
| Twilio Inc. | Sending text and WhatsApp messages you opted into | Your mobile number and the message content |
| Zoom Video Communications, Inc. | Delivering online sessions and events, and recording them (3.18) | Your name, your image and voice if you turn them on, and what you say or share during the session |
7.3. Zoom and WhatsApp. Online events run on Zoom, and bookings happen on WhatsApp. When you use those services, their own privacy policies apply.
7.4. Shared map links. If you create a share link for a map, anyone who has the link can view that map until the link expires or you revoke it. You can see all your active share links, and revoke one or all of them, in your account under My maps, Shared links.
7.5. Map PDFs and uploaded files. We do not store map PDFs: a PDF is generated when you download it. Photos of candles you or we upload are kept in private storage. Images the administrator uploads for products, events and maps are publicly accessible.
7.6. Legal and business transfers. We may disclose information if required by law, court order or a government authority, to protect our rights or the safety of any person, or to a successor if the practice or the Site is sold or transferred, in which case this policy will continue to apply to your information.
8. Text messages and WhatsApp
8.1. Off unless you opt in. Text and WhatsApp messages are sent through our administration portal, which sends automated messages using our messaging provider, Twilio, and are also sent manually by us. We send text (SMS) or WhatsApp messages only if you choose to receive them. Texting is off by default. You can turn it on in your account under Settings, Texting preferences, where you choose which messages you want (event and session reminders, and updates) and on which channel.
8.2. The consent you give. When you opt in, you tick a box next to this wording, and we record it, with the date and time and the number you opted in with. The sender name in the wording is The Ness Within 26, Inc. (Revital Levine Keren). Messages come from a number we will tell you when you opt in:
"I agree to receive recurring text and WhatsApp messages from The Ness Within 26, Inc. (Revital Levine Keren) at the number above, including event and session reminders and updates. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel and HELP for help. See the Privacy Policy and Terms."
8.3. Consent is not a condition of purchase. You do not need to agree to text messages to buy a ticket, book a session or use the Site.
8.4. Message frequency. Message frequency varies. Message and data rates may apply.
8.5. How to stop. Reply STOP to any text message to stop receiving texts. You can also turn texting off at any time in Settings, Texting preferences. After you opt out, we will send one message confirming it, and no further messages. Reply HELP for help, or contact us using the details in section 1.4.
8.6. Reminders are separate from marketing. Turning off marketing emails does not turn off reminders you asked for, and turning off reminders does not change your marketing email choice.
8.7. No sharing of mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with the messaging provider that delivers our messages on our behalf. Information sharing to subcontractors in support services, such as customer service, is permitted. All other categories of information exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
8.8. Carriers are not liable for delayed or undelivered messages.
9. Marketing emails
9.1. We send marketing emails only if you agree to receive them. Your agreement is always separate from accepting the Terms and Conditions and this Privacy Policy, and is never a condition of creating an account, generating a map or buying a ticket. You can agree by ticking the optional, unticked box "Send me occasional updates and event news by email." on the sign-up form or the map generator, or through the "Stay Connected" form, and you can change your choice at any time in your account settings. When you agree, we record the date and time on your account and add the details listed in section 7 to our marketing list with Brevo. When you withdraw, we remove you from that list.
9.2. Every marketing email includes an unsubscribe link and our postal address. If you unsubscribe, we will stop sending you marketing emails within 5 business days and remove you from our email provider's marketing list.
9.3. We will still send you service emails about your account, tickets, refunds, maps and security, because these are needed to provide the services you asked for.
10. Cookies and similar technologies
10.1. We use a small number of cookies and similar technologies. Some are strictly necessary: they keep you signed in, remember your language, remember guest maps and record your cookie choice. Analytics cookies are used only if you click Accept in the cookie banner. We do not use advertising cookies.
10.2. You can change your choice at any time with the Cookie settings link in the footer of every page. If you decline after accepting, we delete our analytics cookies from your browser.
10.3. Our Cookie Policy at /cookies lists the cookies and storage items we set, their purpose and how long they last, and the other companies whose features may set their own.
10.4. Do Not Track and Global Privacy Control. We do not sell or share personal information for advertising, so there is nothing for these signals to switch off in that respect. The Site does not currently respond to Do Not Track signals.
11. How long we keep your information
11.1. We keep personal information only for as long as we need it for the purposes in section 4, including to meet legal, tax and accounting obligations and to resolve disputes.
| Information | How long we keep it |
|---|---|
| Account information | Until you close your account. After that we keep the information listed under "Closed accounts" below (see 12.2) |
| Closed accounts | We keep your name, email address and any extra email addresses you added (they stay reserved to your account and cannot be added to another one), birth date and birth time, the birthplace you chose and, where available, its location, time zone, gender, address (including the confirmed home address text and the date it was confirmed), profile image, the record of your services and purchases, your maps, your candle and people records (including records of disconnections and the phone number on those records), your session records, your paid event tickets (including the details and phone number you gave at checkout) and your account's history. We also keep your PDF layout preferences, your merchant reference, the date your email address was confirmed, your account type, whether you had online access and, if we blocked the account from being restored, when we did so and who did it. Standard (non-premium) maps are the exception: they are still deleted 14 days after they are saved, even on a closed account, unless a map is linked to a paid event ticket, in which case it is kept with the ticket record. Recordings are also kept (see the recordings row below). There is no automatic end date: we keep this information for record keeping, bookkeeping and tax, and so that you can come back (see 12.2 and 12.3) |
| Guest maps that are not claimed into an account | 3 days, then deleted automatically |
| Temporary guest accounts | 30 days after they are created, then deleted automatically, except where the account has paid or event records |
| Maps saved to a standard (non-premium) account | 14 days, then deleted automatically, including on a closed account |
| Maps linked to a paid event ticket | Kept with the ticket record, with no fixed end date |
| Recordings of sessions, meetings and events, and media-release clips | Kept until Revital Levine Keren deletes them. Erased on request, except where we must keep them (see 12.3). Closing your account does not by itself delete them |
| Maps saved to a premium account | Until you delete them. If you close your account, your maps are kept as part of your account's record, with every share and claim link to them revoked (see 12.2) |
| Event map PDFs | Not stored. A PDF is generated when you download it |
| Sign-in records, including IP addresses | 90 days, then deleted automatically |
| IP addresses used to limit repeated requests | Briefly: for the length of the limit, between 1 minute and 1 hour |
| Event ticket and payment records, including the details you gave at checkout | Kept for bookkeeping and tax purposes, with no fixed end date |
| Payment records held by Stripe | Under Stripe's own retention rules, which we do not control |
| Session records | Kept as our service records. Erased on request, except where we must keep them (see 12.3) |
| Usage (analytics) information | 14 months, then deleted |
| Email delivery records | Kept as a record of what we sent. Erased on request, except where we must keep them (see 12.3) |
| Texting consent records | Kept as proof of your consent. Erased on request, except where we must keep them (see 12.3) |
| Photos of candles | 5 years, then deleted automatically |
| Terms acceptance, age confirmation and consent records | Kept as proof of what you accepted, for as long as your account exists and after it is closed. Erased on request, except where we must keep them (see 12.3) |
12. Your rights and choices
12.1. In your account. You can do the following yourself, at any time:
- See and correct your profile, phone numbers, birth details and address in your profile.
- Download my data, in Settings. This gives you a copy of your profile, your map details, your session records and your tickets. It does not include sign-in records, usage information or email delivery records; you can ask us for those under 12.4.
- Close account, in Settings. See 12.2.
- Change your choices for marketing emails, texting, reminders, and use of your maps in sessions and workshops, in Settings.
- Revoke share links to your maps, in My maps, Shared links.
- Change cookie choices, with the Cookie settings link in the footer.
12.2. What happens when you close your account. When you close your account:
- we close your account: you can no longer sign in, and we sign you out on all devices;
- we opt you out of every message channel: marketing emails, texts (SMS), WhatsApp messages, reminders and candle updates. We record each opt-out. After you close your account, we do not contact you again, except for restore emails (described below) and the receipt for a refund. Ticket confirmations are not sent automatically to a closed account. You can buy tickets with another email address or restore your account first, and if you ask us, we can resend a ticket you paid for. We never send you marketing or any other message you did not ask for;
- we revoke all share and claim links to your maps, and stop using your maps in sessions and workshops;
- your maps can no longer be opened through your account or through any link we sent you (map PDFs are generated when downloaded and are not stored);
- we delete the phone numbers saved in your profile (your phone list). We keep the phone number on your candle and people record and the phone numbers you gave at checkout for event tickets, so that we never contact you by mistake (we check new contact details against them) and for our records;
- we ask Stripe to delete your customer record and saved cards, and ask our email provider to remove you from our contact list;
- we keep your name, email address, birth date and birth time, time zone, gender, address, profile image, the record of your services and purchases, your maps, your candle and people records (including records of disconnections and the phone number on those records), your session records, your paid event tickets (including the details and phone number you gave at checkout) and your account's history. We also keep your PDF layout preferences, your merchant reference, the date your email address was confirmed, your account type, whether you had online access and, if we blocked the account from being restored, when we did so and who did it. We keep them with no automatic end date, for record keeping, bookkeeping and tax, and so that you can come back (see section 11);
- maps: premium maps are kept until deleted. Standard (non-premium) maps are deleted 14 days after they are saved, even on a closed account. A map linked to a paid event ticket is kept with the ticket record, with no fixed end date. A temporary account is deleted after the stated period (30 days), except where the account has paid or event records;
- recordings of sessions, meetings and events are not deleted by closing your account; we keep them until Revital Levine Keren deletes them, and we erase a recording of you on request, except where we must keep it (3.18);
- usage information already collected stays linked to your account reference until it is deleted under section 11.
If you sign up again later with the same email address, we reconnect you to the same account and your history. Before we do, we email you a link to confirm the address is yours. All message choices stay off until you turn them on again. We send a restore email only when you ask for one, by signing up again with the same email address, or when we send one because you asked us to. We limit how often restore emails can be sent.
If we close an account ourselves, for example because of misuse, or find misuse on an account that is already closed, we may block it from being restored. A blocked account gets no restore email.
12.3. Rights you may have by law. Depending on where you live, you may have the right to:
- know and access the categories and specific pieces of personal information we hold about you;
- correct or complete it;
- delete or erase it;
- opt out of the sale or sharing of your personal information (we do not sell or share personal information);
- limit the use of your sensitive personal information;
- appeal a refusal of your request (see 12.4);
- ask us to restrict or object to how we use it, including objecting to use based on our legitimate interests;
- receive your information in a portable format;
- withdraw your consent at any time, without affecting use made before you withdrew it;
- not be discriminated against for exercising your rights;
- complain to a data protection authority, such as the supervisory authority in the EU or UK country where you live.
There is no automatic or self-service erase tool, and closing your account does not erase the records listed in 12.2. Instead:
- To close your account, go to Settings and choose Close account. Closing keeps the records listed in 12.2.
- To restore your account, sign up again with the same email address. We email you a link to confirm the address is yours, and then reconnect you to the same account and your history (see 12.2).
- To ask us to erase your information, email ariel@peacockautomations.com (see 12.4).
- For other questions or requests about your information, contact us using the details in section 1.4.
12.4. To make a request that you cannot complete in your account, including a request to erase your information, email ariel@peacockautomations.com. We answer within 30 days.
- Receipt. We acknowledge receiving your request.
- Identity. We verify your identity before we act, so that we do not give or erase information for the wrong person.
- More time. Where the law allows, we may extend the response time, and we will tell you if we do.
- Erasure. We erase the information you ask us to erase, except records we must keep for tax or legal reasons.
- Appeal. If we refuse or only partly act on your request, you may appeal by emailing ariel@peacockautomations.com with the word "Appeal" in the subject line. We will answer the appeal in writing.
13. International transfers
13.1. We are based in Florida, United States. Our clients are in the United States and other countries.
13.2. Our service providers store and process information in the United States, in the European Union (our email provider, Brevo) and possibly in other countries. If you use the Site from the European Union, the United Kingdom or another country, your information will be transferred to the United States, where data protection laws may differ from those in your country.
13.3. Where the law requires it, we protect these transfers with appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework where the provider is certified.
14. Minimum age and children
14.1. The Site and our services are intended for adults. You must be at least 18 years old to create an account, buy a ticket or generate a map. This is the same minimum age as in our Terms and Conditions, Refund and Cancellation Policy and Disclaimer.
14.2. When you create an account, you must confirm that you are 18 or older. If the date of birth you enter for your own account shows that you are under 18, we will not create the account.
14.3. We do not knowingly collect personal information from children under 13 (or under 16 in the EU and UK, or the higher age required where you live), except as described in 14.4. If we learn that we have collected information from a child without the required consent of a parent or guardian, we will delete it. If you believe this has happened, contact us using the details in section 1.4.
14.4. A parent or legal guardian may create a map for their own child. In that case the parent or guardian gives us the child's information and confirms that they are the child's parent or legal guardian, and section 6 applies.
15. Security
15.1. We use reasonable technical and organisational measures to protect your information, including:
- encrypted connections (HTTPS) for all pages;
- passwords stored only in hashed form;
- sign-in sessions that end after 7 days without use, with an absolute maximum length of 30 days from sign-in;
- limits on repeated sign-in attempts and other repeated requests;
- the ability to end every sign-in session on an account at once, which happens automatically when you close your account;
- photos of candles you or we upload kept in private storage; images the administrator uploads for products, events and maps are publicly accessible (map PDFs are generated when downloaded and are not stored);
- access to administrative functions limited to accounts with the administrator role, with an audit log designed to record actions without recording personal details;
- payment card details handled by Stripe and never stored on our servers.
15.2. No method of transmission or storage is completely secure. If a data breach affects your personal information, we will notify you and the relevant authorities where the law requires it.
16. Language and accessibility of this policy
16.1. Our legal pages are published in English and Hebrew only. The Hebrew version of each legal page is a translation of the English version. If the English and Hebrew versions differ or conflict, the English version controls.
16.2. If you need this policy in another format, contact us using the details in section 1.4.
17. Changes to this policy
17.1. We may update this policy from time to time. The version number and "last updated" date at the top show when it last changed.
17.2. If we make a material change, we will tell members by email and, where appropriate, ask you to review and accept the updated version the next time you sign in or create a map. Where the law requires your consent to a change, we will ask for it.
17.3. The previous version of this policy is available on request.
18. Contact
For questions about this policy or your information, contact The Ness Within 26, Inc., doing business as "Revital Levine Keren":
- Email: revital@revitallevinekeren.com
- Postal address: 10790 Breezeway Ln., Davie, FL 33324
- WhatsApp: +1 786-449-7146