Who is responsible
The controller of the personal data described here is IDEX Online S.A. ("IDEX", "we"), 8 Shoham St., P.O. Box 3107, Ramat Gan, Israel. Questions about this notice or your data: support@idexonline.com.
This notice covers the website pricing.idexonline.com. When IDEX approves a request and you use the IDEX Retailer Hub, the Hub's own terms and privacy information apply there.
What we collect
When you request access
- Your first and last name, business email address and, if you give it, your phone number.
- Your company's name, country of registration and type, and its VAT or tax identification number, or your reason why it has none.
- Your message about what you want to use IDEX for, if you write one.
- That you acknowledged this notice (with its version and the time) and whether you want market updates and product news by email.
- Where your visit came from: campaign parameters in the link you followed (utm_source and similar), the website that referred you, the first page you opened and, only if you allowed analytics, the Google Analytics client identifier.
- Technical data needed to protect the form against abuse: your IP address is used for rate limits and is not stored with your request.
When you send a contact message
Your name, business email, company, country, subject and message, the same acknowledgement and marketing choice, and the same information about where your visit came from.
When you only browse
The web server logs each request (time, page path, status, the address of the network you came from) for security and operations. Page paths are logged without query strings. Links in our emails carry their one-time code after a #, so it never reaches a server log. No analytics run unless you allow them.
Why and on what basis
- Reviewing your access request and contacting you about it, including asking for more information and, if approved, creating your company's account in the IDEX Retailer Hub: steps taken at your request before a contract (GDPR Art. 6(1)(b)) and our legitimate interest in knowing which businesses use IDEX data (Art. 6(1)(f)).
- Answering your contact message: our legitimate interest in answering enquiries (Art. 6(1)(f)).
- Market updates and product news by email: only with your consent (Art. 6(1)(a)), which you can withdraw at any time; your request is handled the same way whether or not you consent.
- Website analytics: only with your consent (Art. 6(1)(a)); see below.
- Security and abuse prevention (rate limits, logs): our legitimate interest in keeping the service available and safe (Art. 6(1)(f)).
IDEX reviews every request by hand. No decision about you is made by automated means alone.
Website analytics (Google Analytics 4)
If you choose Allow analytics, the website loads Google Analytics 4 to measure which pages and tools are used. Until you choose, Google Analytics is not loaded and no request is sent to Google. You can change your choice at any time under Cookie settings in the footer; withdrawing it stops analytics and removes its cookies.
With your consent, Google Analytics receives the pages you view (without any code from an email link and without query parameters other than campaign parameters), the website that referred you, device and browser information and these events: clicks on calls to action, a live demonstration coming into view or being used, starting a form and sending a request or message (only its kind), and confirming your email address. It never receives your name, email address, company, tax number, phone number or message. Google signals and ad personalisation are switched off.
Google acts as our processor for Google Analytics. See the cookie policy for the cookies it sets.
Who receives the data
- The IDEX team members who review requests and answer messages.
- Service providers who process data on our behalf: the hosting of the website and of the IDEX Data Platform in data centres of Hetzner Online in Germany; Amazon Web Services (Amazon SES) to send our emails; Google, only if you allowed analytics.
We do not sell personal data and do not share it with others for their own marketing.
Transfers outside the EEA
Email delivery and, with your consent, Google Analytics may involve processing outside the European Economic Area. Where that happens, it is covered by the data transfer terms of these providers: Amazon Web Services and Google provide standard contractual clauses for such transfers and take part in the EU–US Data Privacy Framework.
How long we keep it
- A request whose email address is not confirmed within 7 days expires; its personal details are then cleared.
- Rejected requests and closed contact messages: personal details are cleared after 730 days.
- Approved requests are kept as part of your company's customer record for as long as the customer relationship lasts and as required by law afterwards.
- Server logs: kept only in the rotating logs of the web servers, not copied to a separate store, and deleted automatically, at the latest when the servers are replaced.
- Google Analytics data, with your consent: for the retention period set in IDEX's Google Analytics property, at most 14 months.
Your rights
You may ask for access to your personal data, its correction or deletion, the restriction of its processing or a copy in a portable form, and you may object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time without affecting what was done before. Write to support@idexonline.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
Security
The website is served only over HTTPS. Forms send your details directly to IDEX; links in our emails work once and for a limited time. Access to requests in IDEX's administration is restricted to authorised staff with two-factor sign-in, and actions on them are recorded.
Changes and version
We will update this notice when the way we process personal data changes. Each request records the version of the notice it was sent with. This is version 2026-10-29.