Draft privacy policy

Data controller

Owner decision required: identify the controller’s exact legal name, entity number, correspondence address and privacy contact. The importer’s operational address is Rashi 5, Ramla.

Information that may be collected

A contact form may contain information a visitor chooses to enter, such as name, contact details, company, customer type, product and message. Technical context, such as the source page or referenced product, may be associated with a request.

• The current form must not be represented as email or CRM delivery, or durable lead storage, unless the owner actually implements that.
• Owner decision required: define whether IP addresses or anti-abuse logs are collected, their purpose and retention period.

Purposes and legal basis

The owner must define the processing purposes and appropriate legal basis for each purpose, including responding to enquiries, support or optional marketing. Sending an enquiry must not be treated as marketing consent.

Recipients and transfers

The owner must list the actual hosting, email, CRM, analytics and other service providers, including any processing outside Israel or the relevant jurisdiction. This draft cannot confirm that no third parties exist until that inventory is complete.

Retention and rights

The owner must set retention periods for each data category and a secure deletion method. An operational channel must also be provided for access, correction or deletion requests as required by applicable law.

Security and updates

The final policy should describe measures actually in place and proportionate to risk, without promising absolute security. Material changes should be documented and the current version made available on this page.