Privacy policy
In one line. We collect a name and a phone number from anyone who wants us to get back to them. It goes to our inbox. We do not sell it to anyone and we delete it the moment you ask.
This policy explains what information the site collects and how it is used. It describes who may receive it, how long it is kept and how to exercise your rights. See also our terms of use and accessibility statement.
1. Who is responsible for the information
The party in control of the information is alma studio, based in Eilat. Access to the information you give is limited to whoever needs it in order to handle your enquiry, and no further.
For anything to do with privacy. Phone and WhatsApp 050-294-0127. Email privacy@alma-studio.co.il. No special wording is needed and you do not have to explain why.
2. What information is collected and from whom
We collect very little. This is the full list and it holds nothing that is not written here.
| What is collected | From where | Is it required | What happens if you do not give it |
|---|---|---|---|
| Name and phone | The contact form on the site | No legal duty. You give them voluntarily and with consent | We will not be able to get back to you. You can always call or write on WhatsApp instead |
| The free text of your message | The same form. An optional field | Not required | We will get back to you without knowing in advance what it is about |
| A site address or business name | The AI visibility check form | Not required | We will not be able to run the check |
| The consent tick and the time it was ticked | Recorded automatically when the form is sent | It is a condition for sending | The form will not be sent. That is what the law requires and not our choice |
| The marketing consent tick. Separate and optional | The same form | Never required | You will not get updates from us. It does not affect how your enquiry is handled |
| Your display preferences | Saved in your browser only | No | You will have to choose again on every visit |
One request. The message field is free text, so please do not write sensitive information in it. Health conditions, ID numbers, card details or information about someone else. We do not need it in order to get back to you, and we would rather not hold it.
3. Where the information actually goes
Enquiries submitted on the site are sent to us and kept in business correspondence so we can handle them. Access is restricted to those handling the enquiry. The categories of service providers involved in processing are described below.
A WhatsApp message or a phone call does not pass through the site at all. It reaches our device directly and is subject to the policy of the service provider you use.
4. What the information is used for
The law requires us to process information only for the purpose it was collected for. These are the purposes and there are no others.
| The purpose | Which information it uses | The basis for processing |
|---|---|---|
| Getting back to you and handling your enquiry | Name, phone and the content of the message | The consent you ticked in the form |
| Running the AI visibility check and giving you the result | The site address and phone | The consent you ticked in the form |
| Recording that consent was given and when | The consent tick and its time | A duty under the law. It is the proof that we acted lawfully |
| Sending professional updates | Name and phone or email | A separate and explicit consent that can be withdrawn at any moment |
| Managing the business relationship if we work together | Contact details and what was agreed | The engagement itself and bookkeeping duties |
| Understanding what works on the site and what to improve | General usage data that does not identify anyone | Only if you approved measurement cookies |
What we will never do. We will not sell, rent or pass your details to anyone else for their own use. We will not use them for a purpose outside this list. We will not buy lead lists from others and we will not harvest contact details from websites automatically. The last two break the law and are not merely bad manners.
6. Service providers that process information for us
To operate the site and handle enquiries we use service providers in hosting, cloud infrastructure, email delivery, business email and measurement. They receive only the information needed to perform the service for us and operate under their agreements and applicable law.
An enquiry may pass through hosting and email services before reaching our business inbox. Usage data is sent to a measurement service only after cookie approval. If you choose to contact us through an external messaging service, the information you provide is also subject to that service policy.
We do not sell information or permit service providers to use it for their own marketing. You may contact us for more information about the categories of service providers involved in handling a particular enquiry.
Visibility checks in search engines and AI tools are carried out without automatically passing the contact details submitted in the form.
7. Transferring information outside Israel
Some service providers may process information outside Israel. Such a transfer takes place only to operate the service and in accordance with applicable law and the contractual obligations that apply to the provider.
We review the scope of the information transferred and limit it to what is needed. You may contact us for more information about a transfer relating to your enquiry.
8. How long we keep it
The law requires us to check once a year that we hold no information that is no longer needed. We do that and delete accordingly.
| Type of information | How long | And then |
|---|---|---|
| An enquiry that did not turn into an engagement | Up to two years from the enquiry | Deleted. Sooner if you asked |
| An enquiry that led to working together | For as long as the business relationship lasts and subject to bookkeeping duties | Whatever the law does not require us to keep is deleted |
| The consent record | As long as the information it refers to is still held by us | Deleted together with it |
| Details of a marketing list subscriber | Until a removal request | Deleted as soon as the removal is made |
| Accounting documents | For the period the law requires | Kept as required. That is a duty and not a choice |
Asked us to delete sooner? We will delete right away and will not ask why. The only thing we will keep is what the law requires us to keep, and we will tell you exactly what that is.
9. How the information is secured
We use an encrypted connection to the site and restrict access to information to authorised people who need it for their work.
No system is completely immune to security incidents. If an incident occurs, we will address it and report it in accordance with our obligations under applicable law.
10. Your rights and how to use them
These are rights the law gives you. Honouring them is not a favour we do you.
- To know whether we hold information about you and to review it. We will reply within thirty days of receiving the request, as the regulations set out
- To ask us to correct information that is incorrect, incomplete, unclear or out of date. Thirty days here too. If we correct it and had already passed the information to someone else, we will tell them about the correction as well
- To ask us to delete information that is no longer needed for the purpose it was given for
- To withdraw a consent you gave. Withdrawing marketing consent takes effect immediately
- To get an explanation for a refusal. If we refuse a request we will say so in writing and explain why. No answer counts as a refusal, and that can be challenged too
- To approach the Privacy Protection Authority at the Ministry of Justice if you think we did not handle things properly. Contacting us first is not a precondition
To use a right, just tell us what you want. WhatsApp or phone 050-294-0127, or email privacy@alma-studio.co.il. There is no form and no fee. We may ask to verify that you really are the person the information is about. That is meant to protect you and not to make it harder. We log every privacy request and the date it was answered.
11. Marketing messages and updates
Marketing consent is a separate tick box in the form. It is not ticked in advance and it is not a condition for getting an answer. That is deliberate.
Every marketing message we send will include three things. A clear mark that it is an advertisement. Our name and how to reach us. And a simple, clear way to remove yourself.
Removal takes effect immediately and without questions. You can reply to the email with the word remove, you can write on WhatsApp, and you can call. After removal you will get no more marketing messages from us.
Before we make an unsolicited marketing approach to a phone number, we check that it is not listed in the register for restricting marketing approaches run by the Consumer Protection Authority.
12. Client information that we handle
This section is meant for our clients and not for visitors to the site. When we build a site or run a system for a client, we sometimes access personal information about that client's own customers. Leads, mailing lists or data in the system.
In that situation we are a holder under the law and the information stays the client's. We process it only under their instructions and only for the service. We do not use it for our own purposes, we do not copy it and we do not keep copies beyond what is needed.
When the engagement ends we delete or return the information as the client chooses, and we revoke our own access permissions.
For a client who wants it, we sign a data processing addendum that sets all of this out in writing. For a client with users in the European Union we will add the parts the European regulation requires. Just ask.
13. Visitors from outside Israel
The site has an English version, so visitors from outside Israel reach it too.
alma studio is an Israeli business operating in Israel, and it does not direct marketing activity at the European or the American market. Even so, we already meet the main principles the European regulation requires. Full transparency about what is collected and why. Active consent before any measurement tool loads. Collecting as little as possible. Rights to review, correct and delete. And deletion within a set time.
A visitor from the European Union or from the United Kingdom who wants to use a right is welcome to contact us through exactly the same channels and will get exactly the same treatment.
14. Minors
The site is meant for business owners and managers. It does not address minors and does not offer them a service. We do not knowingly collect information about minors. If it turns out that such information was given to us, we will delete it immediately. A parent or guardian who believes information about their child was given to us is welcome to contact us and we will handle it the same day.
15. Automated decisions and profiling
We do not make automated decisions about you and we do not build profiles. There is no automatic lead ranking here, no scoring and no system that decides anything without a person. Every enquiry is read by a person.
16. Changes to this policy
This policy may be updated when the way information is handled changes or when the law changes.
The current version will always appear on this page with the update date at the top. A material change will be marked at the top of the page for at least thirty days. We update the document before the change actually happens and not after it.
Update of 26 September 2026. Internal technical details unrelated to browsing the site have been shortened. Processing purposes and visitor rights remain unchanged.