Who we are
“Ginah Ktanah” (a fictional store, made up for this sample) sells plants and garden tools through a Shopify store. The store is run by Ginah Ktanah Ltd., company no. 000000000, 1 Example Street, Tel Aviv. It is responsible for the information collected on the site.
For any question about your information: privacy@ginah.example, or call 03-0000000, Sunday to Thursday, 9:00–16:00.
What we collect
- What you give us when you order: name, e-mail address, phone, shipping and billing address.
- Payment details: only the payment provider receives your card details. The store sees the last four digits and the approval, nothing more.
- Order history: what you ordered, when, and what was returned.
- What your visit leaves: IP address, browser and device type, and the pages you viewed, through cookies (see “Cookies”).
- Messages: what you wrote to us by e-mail, chat or the contact form.
Why
- To fulfil your order: to take payment, ship the product, tell you where it is and handle returns.
- To issue an invoice and keep books: tax law requires the store to keep invoice details.
- Customer service: to answer questions and complaints.
- Marketing e-mail: only if you agreed to it when ordering or when joining the newsletter. You can stop it at any time from the link at the bottom of every e-mail.
- Fraud prevention: to spot suspicious orders.
Do you have to give us this information? No law requires you to, and giving it is up to you. But without a name, an address and a means of payment we cannot complete your order, and without your consent to marketing we send you no offers. You can order without joining the newsletter.
Who receives it
We do not sell information. We pass it only to those who need it to serve you:
- Shopify — the platform the store runs on. It keeps order and account details so the store works.
- The payment provider — receives your card details to take the payment and check for fraud.
- The shipping company — receives your name, address and phone to deliver the parcel.
- The newsletter app — receives your e-mail address, only if you agreed to marketing, to send the newsletter.
- The reviews app — receives your name and e-mail to ask for a review after delivery.
- The accountant — receives invoice details to report to the tax authorities.
- Authorities — only when the law or a court order requires it.
Transfers abroad
Shopify, the payment provider and the newsletter and reviews apps keep information on servers outside Israel, among them in Canada, the European Union and the United States. The transfer follows the regulations on transferring information out of Israel, under agreements that bind each provider to protect it.
How long we keep it
- Order and invoice details: as long as tax law requires (in this sample: seven years).
- The newsletter list: until you withdraw your consent.
- Customer service messages: two years from your last message.
- Abandoned carts: 90 days.
After that the information is deleted, or kept only in a form that does not identify you.
Your rights
- Access: ask to see the information the store keeps about you.
- Correction: ask to correct information that is wrong, incomplete or out of date.
- Deletion: ask to delete information the store no longer needs, and to be removed from the newsletter.
Send your request to privacy@ginah.example. In this sample, the store answers within 30 days. If a request is refused, we say why.
Security
Access to the information is limited to the staff who need it, and every admin account uses two-step verification. Card details are never kept by the store. If a serious security incident happens, we report it to the Privacy Protection Authority and to the people whose information was affected.
Cookies
- Essential cookies: keep your cart and your sign-in. The site does not work without them.
- Measurement cookies: count visits so we can improve the site. They run only if you agree.
- Marketing cookies: let us show you ads on social networks. They run only if you agree.
You can change your choice at any time from the “Cookie settings” link at the bottom of the site.
Database registration
Registering the database: the store checked whether it must register its database, and in this sample the answer is no.
Privacy officer: in this sample the store has no privacy officer. Questions about your information go to the address under “Who we are”.
About this document
Template version: 0.1-sample · Updated: 22-10-2026.
This is a sample only: the notice of a fictional store, showing what a Hebrew privacy notice can cover. It is not legal advice, and it says nothing about any real store. Before using similar wording in a real store, talk to a lawyer.