Privacy Policy

1. Database owner identity and contact

The Site is operated by HIGOLD Israel. Address: HaMa'ash 8, Atarot, Jerusalem. Phone: 02-672-6999. Privacy email: privacy@higold-israel.com.

2. Types of information we collect

We collect information you provide directly and technical information collected automatically:

• Contact details: full name, email, phone
• Shipping details: address, city, postal code
• Order history and product preferences
• Customer-service enquiries and chatbot conversations
• Technical data: IP address, browser/device type, pages visited, access times, referrer
• Cookie identifiers stored in the browser

3. Purposes of collection

We use the information solely for:

• Completing orders, issuing invoices and shipping
• Service communication: order updates, replies, account alerts
• Improving the site, user experience and product range
• Sending marketing only after explicit opt-in consent
• Statistical usage analysis (after analytics-cookie consent)
• Meeting legal requirements and enforcing the terms

4. Third parties receiving the information

We use external service providers, each bound by data security and confidentiality:

• Hosting: Hetzner Online GmbH (Germany) — servers and database
• Email: Resend Inc. via a data centre in Ireland — transactional mail, order confirmations, newsletters
• AI: Anthropic, PBC (USA) — processing chatbot questions
• AI: OpenAI, L.L.C. (USA) — product-content embeddings
• Courier: defined at order time and shown for approval
• Payment processor: defined when online purchasing opens
• Government authorities: where legally required

5. Transfer of data outside Israel

Some services are provided by vendors whose server teams are outside Israel, under the Privacy Protection (Transfer of Data Abroad) Regulations, 5761-2001:

• Europe (Germany, Ireland): countries with adequate privacy status. Transfer permitted under Regulation 2(1).
• USA (Anthropic, OpenAI): transfer relies on a signed Data Processing Agreement (DPA) with security commitments and limited use. Chatbot use is voluntary — you may contact us by other channels.

6. Data security

We apply reasonable security measures under the Privacy Protection (Data Security) Regulations, 5777-2017:

• Encrypted communication (HTTPS/TLS) site-wide
• Passwords stored as hashes (bcrypt)
• Database encryption at rest
• Least-privilege access control
• Access monitoring, security logs and anomaly detection
• Periodic encrypted backups

7. Cookies

The site uses cookies to improve experience and for analytics. On your first visit you can accept, decline or customise:

• Essential cookies: required for function (session, cart, security). Cannot be disabled.
• Analytics cookies: anonymous statistics. Require your consent.
• Marketing cookies: content and offer personalisation. Require separate consent.

8. Marketing email

Marketing email is sent only after explicit consent. Every marketing message includes the word "פרסומת" (advertisement) in the subject, sender details, and a one-click unsubscribe link. You may unsubscribe at any time without reason.

9. Data retention

We keep information only as long as needed:

• Order details: 7 years (Income Tax Ordinance)
• Registered-user details: up to two years after last use
• Marketing list: until unsubscribe
• Support correspondence: two years
• Server logs: up to 6 months

10. Your rights under the law

Under the Protection of Privacy Law, 5741-1981, you have the following rights:

• Right of access: a copy of your data (s.13). Reply within 30 days.
• Right of correction: fix inaccurate/incomplete data (s.14)
• Right of erasure: delete data unlawfully held (s.14)
• Withdraw consent: refuse marketing or non-essential cookies
• Exercise: contact privacy@higold-israel.com with identifying details

11. Children and minors

The site is not intended for minors under 18 and we do not knowingly collect their data. If we learn of such collection, we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. The last-updated date appears at the top. For material changes we will notify on the site and/or by email. Continued use after an update constitutes acceptance.