Privacy Policy

1. Introduction and Scope

1.1 This policy describes what personal information is collected on the neta-gifts.co.il website (the “Site”), how it is used and protected, to whom it is disclosed, and what your rights are. The policy applies to any use of the Site, including placing orders, submitting inquiry forms and corresponding with us.

1.2 Use of the Site constitutes agreement to this policy. You are under no legal obligation to provide personal information; however, without certain details (such as delivery details) it will not be possible to complete an order.

2. Identity of the Operator and Contact Details

The controller of the information collected on the Site is Neta — Gifts from the Heart (“Hibuk Otef”), Shilat Industrial Park 1, Israel (the “Operator”).

• Phone / WhatsApp: +972-54-220-7955
• Email: netalc24@gmail.com

3. What Information Is Collected

3.1 Order details: when placing an order we collect the payer's details (full name, phone, email, and — for business customers — company name and registered business number), the recipient's details (name, phone, delivery address), the order contents, a gift message if provided, and delivery notes.

3.2 Recipient details: when you provide details of another person (a gift recipient), you confirm that you are entitled to provide them for delivery purposes. We use recipient details solely to fulfil the delivery.

3.3 Inquiry and quote forms: name, phone and/or email, a preferred contact channel, and the content of the message (including estimated quantity and budget where filled in).

3.4 Correspondence: messages exchanged with us by WhatsApp, email or phone are documented in order to handle the inquiry and provide service.

3.5 Payment details: credit-card details are entered directly on the secure payment page of the payment provider (Green Invoice / Grow) and are not stored by the Operator or on the Site's servers. The Operator receives only confirmation of the charge and the invoice details.

3.6 Technical data: like most websites, server logs record technical data such as IP address, browser type and pages accessed, for the operation and security of the Site (including rate limiting against abuse).

3.7 The Site does not require or offer customer account registration; browsing and purchasing are done without creating an account.

4. Cookies, Local Storage and Measurement

4.1 The Site uses the browser's local storage for essential functionality only — for example, keeping the contents of your shopping cart on your device and resuming an interrupted checkout. This information stays in your browser and can be cleared through your browser settings.

4.2 The Site uses Vercel Speed Insights to measure page-load performance. This measurement is aggregate and is not used to identify users or to track them across other websites.

4.3 The Site uses Google Analytics to produce statistical usage data (pages viewed, traffic sources and the like). Google Analytics uses cookies; you can block them via your browser settings or Google's opt-out tools, and the Site will continue to function fully.

4.4 The Site does not include advertising or social-network pixels (such as Facebook Pixel or TikTok), does not display third-party advertising, and does not use cross-site advertising cookies. Accordingly, no cookie-consent banner is displayed.

5. Purposes of Use

The information is used for the following purposes:

• Processing and fulfilling orders, including delivery and issuing invoices.
• Sending service updates about an order (confirmation, delivery status, tracking).
• Responding to inquiries and preparing price quotes.
• Sending marketing communications to those who consented, as described in section 8.
• Operating, securing and improving the Site and the service.
• Compliance with legal obligations, including tax and accounting law.

6. Disclosure of Information and Data Processors

6.1 The Operator does not sell or rent personal information to third parties. Information is shared only with service providers that are required for operating the Site and fulfilling orders, and only to the extent necessary:

• Vercel — website hosting.
• Supabase — database and back-end services in which order and inquiry details are stored.
• Green Invoice and Grow (Meshulam) — payment processing and issuing invoices/receipts.
• Courier and delivery companies — receive the recipient's name, address and phone for delivery purposes.
• Resend — sending transactional emails (order confirmations and service notifications).
• Periskope — managing WhatsApp business communication.
• Google — address autocomplete at checkout (Google Places) and usage statistics as described in section 4.

6.2 In addition, information may be disclosed where required by law, by court order or by a competent authority, or in order to protect the legal rights of the Operator or of users.

7. International Transfers

7.1 Some of the service providers listed above (such as hosting and email providers) store data on servers outside Israel, including in the United States and the European Union. Transfers are made in accordance with the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001, to providers that undertake an adequate level of data protection.

8. Marketing Communications

8.1 Marketing messages (by email, WhatsApp or SMS) are sent only in accordance with section 30A of the Communications Law (Telecommunications and Broadcasting), 5742-1982 — to those who gave consent, or to existing customers regarding similar products, as permitted by law.

8.2 Every marketing message includes an unsubscribe option. Through the removal page linked from the messages you can opt out of each channel separately (email, WhatsApp, SMS), and you may also request removal at any time via any of the contact details in section 2. Service messages relating to an active order (order confirmation, delivery status) are not marketing messages.

9. Data Retention

9.1 Order and billing details are retained for as long as required by tax and accounting law (generally seven years from the end of the relevant tax year).

9.2 Inquiries and correspondence are retained for as long as needed to provide service and handle requests, after which they may be deleted or anonymized.

10. Your Rights — Review, Correction and Deletion

10.1 Under the Protection of Privacy Law, 5741-1981, as amended, you may request to review information held about you, and to correct or delete information that is inaccurate, incomplete or outdated. Requests may be sent to any of the contact details in section 2, and will be handled as soon as possible and within the time required by law.

10.2 Deletion of details may be limited by legal retention obligations (for example, invoices under tax law); in such a case, the information retained will be limited to what the law requires.

11. Data Security

11.1 The Operator implements accepted security measures in accordance with the Protection of Privacy Regulations (Data Security), 5777-2017, including encrypted communication (SSL/TLS), access controls to the database, signed access tokens for viewing order details, and restriction of access to authorized parties only.

11.2 No security measure provides absolute protection. If a security incident occurs that requires notification under law, the Operator will act in accordance with its legal obligations.

12. Minors

12.1 The Site is not directed at minors, and purchasing on it is permitted from age 18 only. The Operator does not knowingly collect personal information from minors; if you believe a minor has provided us with personal information, please contact us and we will delete it.

13. External Links

13.1 The Site contains links to external services (such as the secure payment page, WhatsApp and delivery-tracking pages). This policy does not apply to external websites, and we recommend reviewing their privacy policies.

14. Changes to This Policy

14.1 The Operator may update this policy from time to time. The binding version is the one published on the Site, and the update date appears at the top of the document.

15. Contact

For any question or request regarding privacy, you can reach us through the contact page, by email at netalc24@gmail.com or by phone at +972-54-220-7955.