Last updated: 19 October 2026
This policy explains what information Big Kid Steps collects, why, and what you can do about it.
Who we are
Big Kid Steps is a small family business owned and run by Refael Mordechay, Israel (the "data controller"). Contact for anything about your information: hello@bigkidsteps.com.
This site is for adults
The site, the emails and the shop are meant for parents and other adults aged 18 or older. They are not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe a child has sent us information, write to us and we will delete it.
What we collect and why
- Email address, when you sign up for a free kit or our emails. Why: to send what you asked for and, only if you ticked the optional box, our weekly emails. Legal basis: your request for the kit, and your consent for the weekly emails. Without an email address we can't send the kit.
- Order details (name, email, what you bought), when you buy a printable. Why: to deliver the file, give support and keep records the law requires. Legal basis: our contract with you and our legal duties. Payments are processed by Payhip and PayPal; we never see or store card numbers.
- A child's first name, only if a parent orders a personalized printable. Why: to print it on the file. We delete it within 30 days.
- Visit statistics that do not use cookies and do not identify you (pages viewed, country, device type). Why: to see what helps parents. Legal basis: our legitimate interest in running the site.
- Messages you send us. Why: to answer you.
What we never do
- We do not sell, rent or trade your information.
- We do not use advertising or tracking cookies or pixels on this site.
- We do not send your information to advertisers.
Who receives information
Only the services that help us run the business, each under its own privacy terms: our email service provider (sends our emails), Payhip and PayPal (checkout and payment), Netlify (hosts the site). Some of them store data outside Israel and the EU, for example in the United States. We use services that protect this data with standard contractual clauses or similar safeguards. Books are sold by Amazon, which handles your Amazon order under its own privacy policy. We may also share information if the law requires it.
How long we keep it
- Email list: until you unsubscribe.
- Order records: up to 7 years, as tax law requires.
- A child's first name for a personalized file: up to 30 days.
- Messages: as long as needed to help you, then deleted.
Your rights
You can unsubscribe with one click in any email. You can ask to see, correct or delete your information, or ask us to stop using it, by writing to hello@bigkidsteps.com. We answer within 30 days. If you are in the EU or UK you also have the rights given by the GDPR, including the right to data portability and to complain to your local data protection authority. In Israel you may contact the Privacy Protection Authority.
Security
We use trusted providers, secure connections (HTTPS) and limited access to keep your information safe. No system is perfect, and if something goes wrong we will act quickly and tell you when the law requires it.
Changes
If we change this policy we will update the date above, and tell subscribers by email if the change is important.