Privacy policy
Last updated: 25.10.2026
Who is responsible
This site is run by ALUMA, company/business no. , — the database controller. Privacy questions: e-mail , phone . This policy follows the Protection of Privacy Law, 5741-1981, as amended by Amendment 13.
What we collect
- From the form, the cart and the checkout: name, phone, city, e-mail (if given), comment, the products and your choices (size, finish, base, quantity) and the cart total, when you need it and your preferred contact channel, and whether and when you agreed to marketing;
- About your visit: pages viewed, how you arrived (including UTM parameters and an ad click id), device type, screen size and language;
- We do not keep your IP address: only a one-way hash of it with a secret key, to count visitors and prevent abuse.
Do you have to give it
You are not required by law to give us any information. Without a name and phone we cannot get back to you — that is the only consequence.
What we use it for
- To get back to you about your request or order, and to confirm the order with you before any payment;
- To tell you about the launch date, availability and price;
- To send advertising — only if you ticked the separate consent box;
- To measure advertising and site use and improve the site — third-party tools, unless you choose “Essential only”.
Who receives it
- Meta Platforms (Facebook and Instagram) — unless you choose “Essential only”: browsing events through Meta Pixel and, when you send the form, through the Conversions API. Phone, name, city and e-mail are one-way hashed (SHA-256) before sending; your IP address, browser type and Meta cookie ids are sent too. Meta also uses the data under its own privacy policy;
- Microsoft Clarity — unless you choose “Essential only”: clicks, scrolling and mouse movement, to analyse use. Form fields are masked;
- Telegram — your request is sent as a notification to our account so we can get back to you quickly;
- Meta, Microsoft and Telegram also process data outside Israel, including in the United States;
- We do not sell, rent or trade your data. We disclose it to an authority only when the law requires.
Where and for how long
- Data is kept on our server at a hosting provider in the European Union;
- Request details — until we delete them or you ask us to; a fixed retention period will be published here before launch;
- Browsing events are deleted automatically after 180 days; visit records after 400 days;
- Your cookie choice is kept in your browser until you clear it.
Cookies
Essential: your cookie choice, a temporary visit id and your product choices and cart. Measurement and advertising cookies (Meta Pixel, Microsoft Clarity) load when you arrive, and the cookie notice says so. Choosing “Essential only” stops them at once: no further events go to Meta or Microsoft, and on later pages they do not load at all. You can change your choice at any time with “Cookie settings” at the bottom of every page, this one included, or clear cookies in your browser.
Security
Traffic is encrypted (HTTPS), access to data is limited to what is needed, and IP addresses are stored only as hashes. No system is fully immune, and we will report a serious security incident as the law requires.
Your rights
- To see your data (section 13 of the Law);
- To ask us to correct or delete data that is wrong, incomplete, unclear or out of date (section 14);
- To unsubscribe from marketing at any time (section 17F), and to withdraw cookie consent;
- To complain to the Privacy Protection Authority.
- Requests: . We reply within the time the law sets.
Minors and changes
The site is not meant for anyone under 18. We may update this policy; the binding version is the one on this page, with its date.