Draft for review. This page is a starting template, not legal advice, and hasn't been reviewed by a lawyer. Please have it reviewed by counsel familiar with Israel's Privacy Protection Law (Amendment 13) before this policy goes live — placeholder details are marked clearly below and need your real figures.
Hosted Collection
Privacy Policy
Last updated: [Placeholder date] · Set this to your actual publish date, and update it only when this policy's content changes
1. Who We Are
Hosted is a private event tablescape rental studio based in Jerusalem, Israel. This policy explains what personal data we collect through this website, why we collect it, and the rights you have over it, in accordance with Israel's Protection of Privacy Law, 5741-1981, as amended.
2. What We Collect
When you make a booking or send an inquiry through this site, we collect the information you provide directly: your name, email address, phone number, event date, and — if you request delivery — your delivery address. We do not knowingly collect any information beyond what you submit through these forms.
3. Why We Collect It
We use this information solely to process your booking or respond to your inquiry, coordinate delivery or studio pickup, take payment, and contact you about your event. We do not use your information for any other purpose without telling you first.
4. If You Choose Not to Provide It
The fields marked as required on our booking and inquiry forms are necessary to process your request. If you don't provide them, we won't be able to complete your booking or respond to your inquiry.
5. Who We Share It With
We share payment information with PayPal solely to process your payment; PayPal handles this data under its own privacy policy, not ours. [Placeholder — list any other services that receive customer data, e.g. an email or SMS provider for booking confirmations, once your backend is built.] We do not sell your personal data to anyone.
6. How Long We Keep It
[Placeholder — describe your retention period here, e.g. "We retain booking records for X years for accounting and legal purposes, after which they are deleted." Under Amendment 13, data should not be kept longer than necessary for the purpose it was collected for.]
7. Your Rights
You have the right to request access to the personal data we hold about you, and to request that we correct it if it's inaccurate. [Placeholder — confirm with counsel whether additional rights, such as deletion, should be offered here.] To exercise these rights, contact us using the details in Section 10 below.
8. Security
[Placeholder — describe the security measures actually in place once your backend is built, e.g. encrypted storage, restricted admin access. Amendment 13 requires reasonable security measures appropriate to the sensitivity of the data held.]
9. Cookies
[Placeholder — this site does not currently use analytics or tracking cookies beyond what's needed for the site to function. If you add analytics, marketing pixels, or similar tools later, this section needs to describe them and, per current Privacy Protection Authority guidance, likely needs an active consent mechanism rather than passive notice.]
10. Questions or Requests
If you have questions about this policy, or would like to access or correct your personal data, contact us at concierge@example.com or +972 50 123 4567.
11. Changes to This Policy
If we make material changes to how we handle your personal data, we'll update this page and revise the date at the top.