Privacy Policy

This policy is written under the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment No. 13, which took effect on August 14, 2025. Last updated: October 13, 2026.

1. Who we are - the database controller

The controller of the database is Simple Web, David Ben Gurion Rd 1, LYFE Towers, Building B, Floor 11, Bnei Brak. For anything privacy-related: info@simple-web.co.il · +972-55-253-5524. We answer privacy requests within 30 days.

2. Information we collect

Information you give us:the site's contact form collects your full name, phone number, the service you're interested in, and - at your option - an email address and a free-text description of your project. Providing these details is not a legal obligation; it depends on your will and consent - but without them we cannot get back to you. We also store a record of the consent itself (the policy version you accepted and a timestamp), so that we can demonstrate consent was given.

Technical information collected automatically:IP address, browser, pages visited, traffic source and dwell time, and under "Analytics" also how pages are used (clicks, scrolls and mouse movement, via Microsoft Clarity; text typed into fields is masked and appears in the recordings only as placeholder characters) - collected by measurement and advertising tools, and only subject to your choice in the cookie banner (section 6). Without consent those tools are never loaded at all.

3. What we use it for

Contact-form details are used solely to contact you and respond to your inquiry, including preparing a quote and delivering the service. We do not send marketing email or promotional messages to people who submit the form — unless, on the Simpi form, you ticked the separate box (not pre-ticked, and not a condition for getting the report) agreeing to receive up to 5 promotional WhatsApp messages over 3 weeks; you can opt out at any time by replying "הסר" (remove). We do not build profiles, and we do not sell your information or pass it to third parties for their own marketing. We store with your inquiry how you reached the site (the page you landed on and the site that referred you) and, if you came from an ad link, the campaign parameters (for example utm parameters and the Google or Meta click ID), so we know which ad brought the inquiry. If you accepted the "Marketing" category in the cookie banner, the Meta identifiers (the _fbp and _fbc cookies) and browser details are stored as well. These are kept in our customer-management system and are shared with the advertising platform — together with your email and phone in hashed form — only if you accepted the "Marketing" category. If you did not, nothing is shared. Analytics data is used to understand and improve the site; advertising data for conversion measurement and remarketing - all strictly per the consent category you approved. We do not sell your personal information and we do not pass it to third parties for their own marketing.

Using your information for a new purpose, materially different from the one it was given for, will happen only after we obtain fresh, separate consent from you.

4. Legal basis for processing

Israeli law permits processing personal information in two situations: on the basis of the data subject's informed consent, or under statutory authorization. Everything we collect on this site rests on your consent - explicit and active on the contact form, and per-category in the cookie banner. In some cases we retain information under statutory authorization, for example the duty to keep accounting records under Israeli tax law.

5. Who we share it with

Our customer-management (CRM) provider - receives and stores contact-form submissions (name, phone, email, message and service type) as leads so our team can follow up. Alongside the inquiry it also stores the consent record, the traffic source and campaign parameters described in section 3 (including click IDs, the page you arrived at and browser details), and, for the Simpi form, the website address you asked us to check. It is the only destination for form data. Our hosting provider (US) - processes basic HTTP request data to serve the site. Google (Google LLC, US) - GA4, Google Ads and Google Tag Manager; all Google tags load via GTM and work in full only after your consent: GA4 for usage analytics under "Analytics", Google Ads for conversion measurement and remarketing under "Marketing". Until you consent, and also if you decline, Google tags may send Google cookieless measurement pings (such as a timestamp, the browser type, the page address and your consent state) and store nothing on your device. The contact page also embeds a Google Maps map; it loads only after you approve the "Marketing" category or explicitly click "Show map" - until then a static placeholder with no Google code is shown. Meta Platforms (Facebook/Instagram) - the Meta Pixel for measurement and targeted advertising. The Pixel code may load on the page, but until you approve the "Marketing" category it sends no events and sets no cookies. Microsoft (Microsoft Corporation, US) - Microsoft Clarity, an analytics tool that records how visitors interact with the site (clicks, scrolls and mouse movement) and builds heatmaps, so we can understand and improve it; loaded only after "Analytics" consent. Text typed into fields (including the contact form) is masked: the recordings show placeholder characters in its place. While you are filling in our contact forms, Clarity is paused and records nothing; recording resumes only once you leave the form. OpenAI (OpenAI, US) - the ChatGPT Ads measurement pixel, for attributing conversions to ChatGPT campaigns, loaded only after "Marketing" consent. Note: with "Marketing" consent, the email and phone from the contact form are passed to Google, Meta and OpenAI hashed, for conversion measurement only - never in clear text and never for other uses. Our CRM and hosting providers act as processors on our behalf only; we will name them to anyone who asks at info@simple-web.co.il. These providers operate under Standard Contractual Clauses or the EU-US Data Privacy Framework for transfers out of Israel.

6. Cookies and tracking technologies

On your first visit you are asked to consent across four categories: Essential (site operation - cannot be disabled), Functional (remembers preferences), Analytics (Google Analytics 4 and Microsoft Clarity), and Marketing (Meta Pixel, Google Ads and the OpenAI pixel). Every non-essential category is denied by default, and no tag sets cookies before you approve it. Main cookies: _ga, _ga_* (analytics); _clck, _clsk (Microsoft Clarity, analytics, first-party); CLID, MUID, MR, SM, SRM_B, ANONCHK (Microsoft Clarity, analytics, third-party); _gcl_au (Google Ads, marketing); _fbp, _fbc (Meta, marketing); __oppref, __obref, __oaiq_consent (OpenAI, marketing). The Google Maps embed on the contact page (Google cookies, marketing) likewise loads only after your approval. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer - withdrawing is exactly as easy as granting.

7. Your rights

(a) Right of access - under section 13 of the Law, you may review the personal information we hold about you. (b) Right to correct or delete - under section 14, if you find the information is inaccurate, incomplete, unclear or out of date, you may ask us to correct or delete it; if we refuse, we will tell you so and you may take the matter to court. (c) Withdrawal of consent - you may withdraw at any time. Withdrawal applies going forward and does not affect the lawfulness of use before it. (d) Complaint - to the Israeli Privacy Protection Authority at the Ministry of Justice. To exercise any of these: info@simple-web.co.il - we respond within 30 days.

8. Data security

We apply appropriate technical and organizational measures: HTTPS for all transit, encryption at rest at our providers, periodic rotation of access tokens, need-to-know access, and logging of security incidents as required by the Privacy Protection Regulations (Data Security), 5777-2017. If a security incident affects your information, we undertake to report it to the Privacy Protection Authority and to notify those who may be harmed, without delay and in accordance with the severity of the incident and what the law requires.

9. Retention periods

Contact-form data: 2 years from the last interaction, then deleted. GA4 analytics: set to 2 months (the platform's minimum). Invoices and financial records: 7 years, under Israeli tax-law retention duties. Once a year we review whether we are holding more information than the purposes require.

10. Children

Our site and services are aimed at business owners and are not directed at minors. We do not knowingly collect information about minors. If such information reaches us, we delete it as soon as we discover it.

11. Changes to this policy

We update this policy as needed. A material change to how information is used will not apply to information already collected unless fresh consent is obtained. Material changes are announced on the site 30 days before they take effect. The effective date appears below.

12. Contact

Privacy inquiries and rights requests: info@simple-web.co.il
Phone: +972-55-253-5524
Address: David Ben Gurion Rd 1, LYFE Towers, Building B, Floor 11, Bnei Brak
Israeli Privacy Protection Authority: www.gov.il/privacy

Last updated: October 13, 2026