Privacy Policy
Hatzofe (“we,” “us,” or “our”) is committed to respecting and protecting the privacy and personal data of users who access and interact with our website, hatzofe.com (“Website”). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information, and describes your rights and choices under applicable data protection and privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Commitment to Privacy and Data Protection
Your privacy is of paramount importance to us. We have adopted data protection practices that emphasize transparency, accountability, and consumer rights. All collected data is treated in a manner consistent with applicable legislation and with your privacy in mind. We only process personal data where there is a lawful basis, and we maintain appropriate security measures to protect it throughout its lifecycle.
2. Scope and Role of the Data Controller
This Privacy Policy applies to all personal data collected via hatzofe.com or through any communication with us via email or other supported channels. For the purposes of applicable data protection laws, Hatzofe is the “data controller” with respect to personal information you provide.
3. Categories of Data We Process
We may process the following categories of personal data, depending on how you engage with hatzofe.com:
a. Usage Data
Information automatically collected when you access the Website. This includes IP address, browser type, operating system, language settings, time zone, referring URLs, and interaction with Website features and pages (e.g., clickstream data).
b. Account Data
Data you voluntarily submit when creating an account on hatzofe.com, such as full name, billing address, shipping address, email address, and telephone number.
c. Profile Data
Preferences and interests associated with your profile, including purchase history, behavior on the site, saved favorites, and personal preferences.
d. Communication Data
Records of your communications with us, including service inquiries, customer support messages, submitted forms, and feedback.
e. Technical Data
Details about the devices you use to access our services, including device model, hardware identifiers, screen resolution, browser plug-ins, and system configurations.
f. Transaction Data
Details of purchases made via our Website, including order information, payment data (processed via secure third-party gateways), delivery instructions, and transaction references.
g. Preference Data
Your marketing communication preferences, opt-in/opt-out choices, consent records, and stated product or service interests.
4. Legal Bases for Processing Personal Data
We process your personal data under the following lawful bases:
– Consent: Where you have provided explicit consent for data processing, e.g., when subscribing to a newsletter or opting into marketing.
– Contractual Necessity: Where processing is necessary to enter into or perform a contract with you, e.g., fulfilling an order.
– Legitimate Interests: Where justified by our legitimate interests, such as ensuring Website security, improving services, and preventing fraud—except where such interests are overridden by your fundamental rights and freedoms.
– Legal Obligations: Where we are required to process personal data to comply with statutory or regulatory obligations.
5. Your Data Protection Rights
Under GDPR, CCPA, and other data protection laws, you have the following rights concerning your personal data:
– Right of Access: You have the right to request access to your personal data and obtain a copy.
– Right to Rectification: You may request correction of inaccurate or incomplete data we hold about you.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to certain legal exceptions.
– Right to Restrict Processing: You may ask us to pause the processing of your personal information in specific scenarios.
– Right to Data Portability: You are entitled to receive data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
– Right to Object: You may object to certain types of processing, including direct marketing and automated decision-making.
– Right to Non-Discrimination (California users): We will not discriminate against you for exercising any of your privacy rights under the CCPA.
To exercise your rights, please contact us at [email protected]. We may ask for verification of identity to process such requests.
6. Data Security Measures
We implement organizational, technical, and physical safeguards to protect your personal data. These include but are not limited to:
– End-to-end encryption of sensitive transmitted data
– Role-based access controls restricting personnel data access
– Secure data storage with rigorous permissions
– Regular backups and disaster recovery protocols
– Employee privacy training and awareness programs
7. International Data Transfers
Your data may be transferred to and processed in jurisdictions outside your own, including countries outside the European Economic Area (EEA) or the United States. Where applicable, we implement safeguards such as Standard Contractual Clauses approved by the European Commission or similar mechanisms to ensure data protection standards are met when transmitting personal data across borders.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, regulatory, accounting, or reporting requirements.
– Account and Profile Data: Retained while you maintain an active account and for a reasonable period thereafter.
– Transaction Data: Retained for a minimum of 7 years for tax and legal compliance.
– Marketing & Communications Preferences: Retained until you withdraw consent or opt out.
– Technical and Usage Data: Retained for analytics purposes for up to 26 months or as required.
When retention is no longer necessary, personal data is securely deleted or anonymized.
9. Cookie Policy
Our Website uses cookies and similar tracking technologies. These may include:
– Essential Cookies: Required for the Website to function properly (e.g., login, cart functionality).
– Functional Cookies: Enhance usability and personalize your experience (e.g., remembering preferences).
– Analytics Cookies: Help us measure traffic, user behavior, and improve content (using tools such as Google Analytics).
– Performance Cookies: Track load times and system performance to enhance the user experience.
For more details on specific cookies used, refer to our Cookie Banner or settings panel when you visit hatzofe.com.
10. Cookie Management and Legal Compliance
You can manage your cookie preferences through the cookie settings panel displayed during your first visit or at any time via your browser settings. You have the right to opt out of non-essential cookies under GDPR and CCPA. We do not sell your personal data, including cookie-derived data, without proper disclosures and rights under applicable laws.
11. Children’s Privacy
Our services are not directed to, nor do we knowingly collect personal data from, children under the age of 13. If we become aware that we have collected personal information from a child without confirmed parental consent, we will take steps to delete the information promptly.
12. Policy Updates and Notifications
We reserve the right to amend this Privacy Policy to reflect changes in legal or operational requirements. When material changes are made, we will provide prominent notice on hatzofe.com, and where appropriate, notify you directly. Continued use of our services after a revision constitutes agreement to the updated terms.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:
Email: [email protected]
Website: https://hatzofe.com
We are committed to ensuring compliance with applicable data protection laws and will address your inquiries or complaints in a timely and respectful manner.