Privacy Policy

Last updated: placeholder: date. Version placeholder: 1.0.

1. Who we are

placeholder: Legal entity name Ltd., company number placeholder: ח.פ., of placeholder: registered address, is the controller of the personal data described in this policy.

Contact: placeholder: privacy@… · placeholder: phone · placeholder: postal address

counsel: if an Art. 27 EU representative is appointed, name and address go here — see §4.3.

counsel: we do not currently consider a DPO to be required (§4.2c). If one is appointed, name them here.

2. What this policy covers — and what it does not

This policy covers personal data we collect through this website and in the course of our sales, marketing and support activities.

It does not cover data inside the Regulaxy software itself. Regulaxy is installed on our customers' own servers and runs against their own databases. When a customer runs Regulaxy, we do not receive, store or have access to the data in it — including their server inventory, their staff details, or their maintenance records. In that relationship the customer is the controller and we are not a processor. Where we do process customer data — for example if a customer sends us a log file or a database extract for support — that is governed by our Data Processing Agreement, not by this policy.

3. What we collect, why, and on what basis

Providing your details is voluntary. There is no legal obligation to give them. If you choose not to, we will not be able to contact you or arrange a demonstration — that is the only consequence.

We do not buy lead lists, we do not run advertising-network tracking on this site, and we do not sell personal data to anyone.

4. Who we share it with

We share personal data only with service providers who process it on our behalf, under contract:

• placeholder: CRM provider — storing and managing sales enquiries
• placeholder: email provider — sending email
• placeholder: hosting provider — hosting this website
• Our professional advisers (lawyers, accountants) where necessary
• Public authorities where we are legally required to disclose

A current list is at /trust/subprocessors. We do not pass your details to any other party for their own purposes.

5. Where it goes

We are based in Israel. placeholder: describe where the CRM/email/hosting data actually resides.

For visitors in the EEA and UK: the European Commission has recognised Israel as providing an adequate level of protection for personal data, most recently reaffirmed in its January 2024 review of pre-GDPR adequacy decisions. Transfers to us therefore rely on that adequacy decision and require no additional safeguards. Where a service provider is outside the EEA and not covered by an adequacy decision, we rely on the European Commission's Standard Contractual Clauses. counsel: confirm against the actual vendor list.

6. How long we keep it

7. Your rights

If you are in Israel, under the Privacy Protection Law you have:

• the right to inspect the personal data we hold about you (§13). We will respond within 30 days;
• the right to request correction of data that is incorrect, incomplete, unclear or out of date, and its deletion in those circumstances (§14). If we refuse, we will tell you why and you may appeal to a Magistrate's Court within 30 days.

(Israeli law does not provide a general right to erasure equivalent to the GDPR's. As a matter of our own policy we will nonetheless delete your details on request where we have no legal obligation to keep them.) counsel: confirm we want to offer this.

If you are in the EEA or UK, under the GDPR you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection — including an absolute right to object to direct marketing at any time. Where we rely on consent you may withdraw it at any time without affecting prior processing. We will respond within one month, extendable by two further months for complex requests.

Everyone: to exercise any right, write to placeholder: privacy@…. We may need to verify your identity first.

Complaints. In Israel, to the Privacy Protection Authority (הרשות להגנת הפרטיות). In the EEA, to your local supervisory authority. In the UK, to the ICO. We would prefer you raised it with us first.

8. Marketing

We will only send you marketing by email or SMS where you have consented, or where the law otherwise permits it because you gave us your details while enquiring about buying our product and we told you at the time that we would use them this way and gave you the chance to say no.

Every marketing message we send is marked as an advertisement, identifies us, and carries a working unsubscribe. You may opt out at any time — by using the link, by replying to the message, or by writing to placeholder: email. We act on it immediately.

9. Cookies

See our separate Cookie Policy at /legal/cookies.

10. Security

We apply the technical and organisational measures required by the Privacy Protection (Data Security) Regulations, 5777-2017 and GDPR Art. 32, including access control, authentication, logging and vendor controls. No system is perfectly secure, and we do not claim otherwise. To report a security issue, see /trust/vulnerability-disclosure.

11. Automated decision-making

We do not make decisions about you by automated means that produce legal or similarly significant effects.

12. Children

This site is aimed at business users. We do not knowingly collect data from anyone under 18.

13. Changes

We will post changes here and update the version and date above. Material changes affecting how we use your data will be notified directly where we have your contact details.