Privacy Policy

Principles
1. This policy explains how personal information is collected, stored, used and shared on the website (the “Website”).
2. “Personal information” and “processing” are as defined in the Israeli Privacy Protection Law, as amended by Amendment 13.
Types of information collected
1. Identification and contact details: name, email, phone, shipping/billing address.
2. Order and payment details (credit card details are processed by licensed payment processors; the Website does not store full card details).
3. Technical and usage information: IP address, device identifiers/cookies, pages viewed, purchases, actions on the Website.
4. Marketing preferences and service correspondence.
How information is collected
1. Directly from the customer when registering, placing an order or contacting us.
2. Automatically through cookies and similar technologies.
3. From third parties: Google Analytics; Facebook (Meta) and TikTok may be used for measurement, personalization and targeted advertising.
Cookies and measurement tools
1. The Website uses Google Analytics cookies and pixels, and may use Facebook and TikTok pixels for analysis, measurement, improving the user experience and targeted marketing.
2. You can manage/delete cookies through your browser settings and change preferences in the Website’s cookie manager (if available).
3. Third parties may place their own cookies and receive usage data (such as IP/advertising ID/purchase events) according to their own policies. We recommend reviewing those providers’ policies.
4. This policy distinguishes between data provided knowingly and data collected through tracking tools, and clarifies the purposes and use of third parties.
Purposes of processing
1. Managing accounts and orders; providing support and customer service.
2. Meeting contractual and legal obligations (invoices/taxation).
3. Security, fraud prevention and risk management.
4. Usability analysis and improving the Website and products.
5. Marketing and personalized offers (subject to customer preferences and applicable law).
Sharing information with third parties
1. Service providers acting as data processors: payment processing, logistics/delivery, mailing systems, cloud infrastructure and hosting.
2. The “istores” store platform – information is also stored and processed on the istores platform, which serves as the technological infrastructure for operating the store (a “data processor”).
3. Measurement/advertising tools: Google Analytics; possibly Facebook and TikTok, as detailed in section 4.
4. Competent authorities/law enforcement as required by law, and transfer as part of a permitted business restructuring.
Transfer and storage outside Israel
1. Some information is stored on providers’ servers outside Israel. Transfers are made in accordance with applicable law.
Information security
1. We take reasonable organizational, technical and physical measures to protect information, in accordance with the law and the Privacy Protection (Data Security) Regulations, 2017.
Data retention
1. We retain information as long as needed for the purposes for which it was collected, to meet contractual/legal obligations and to protect our rights, after which it is deleted/anonymized as far as possible.
Your rights
1. The right to access the personal information processed about you and receive a copy.
2. The right to correct/delete information that is inaccurate, incomplete, unclear or outdated; notice of correction/deletion will be given to anyone who received the information from us, as required by law.
3. Withdrawing consent to processing based on consent – where possible, in a convenient and reasonable way.
Deleting your account/information – how to request
1. Customers can delete their account or request deletion of information in one of the following ways:
2. Logging into the personal area and selecting a deletion request;
3. Contacting the Website owner using the contact details published on the Website.
4. Deletion will be carried out after confirming receipt of the request and subject to legal requirements (including information that must be retained by law).
Data Protection Officer (DPO)
1. If the Website becomes required to appoint a data protection officer under Amendment 13 (for example, in certain circumstances of data volume/sensitivity), the officer’s details and contact methods will be published on the Website.
Minors
1. The Website is not intended for independent use by minors under 18. If we are notified that a minor provided information without parent/guardian consent, we will act to remove it.
Policy updates
1. We update this policy from time to time. The current version will be published on the Website and takes effect on the date of publication.

This English version is provided for convenience. In case of any discrepancy, the Hebrew version prevails.