Privacy Policy

Last updated:

This policy explains what personal data this website collects, why it is used, who it is shared with and what rights you have over it. It follows the Israeli Protection of Privacy Law, 5741-1981 and Amendment 13, which came into force on 14 August 2025.

Data controller: R.M. Aesthetic Ltd. (company no. 517012423), trading as Rotem Mizrahi - Advanced Cosmetics Clinic, 8 Yaldei Teheran St., Rishon LeZion 7565844, Israel, phone 052-249-4565, email rotem.mizrahi.support@gmail.com.

This is a translation provided for convenience. In case of any discrepancy, the Hebrew version prevails.

What data is collected

Data you provide: the contact form collects your full name, phone number and the message you write. You are under no legal obligation to provide these, but without them we cannot get back to you to arrange a consultation.

Health data: there is no need to describe your medical condition in the form, and we ask that you do not — medical questions are covered in the consultation. If such details are included anyway, they are treated as data of special sensitivity within the meaning of Amendment 13, and access to them is restricted to the business owner alone.

Technical data: the hosting provider, Vercel Inc., automatically records access data such as IP address, browser type and request time, for security and normal operation only.

Cookies and local storage: the site stores a single cookie, holding your cookie consent choice, and one local-storage key holding your accessibility preferences. See the cookie policy for details.

Purposes of use

  • Responding to your enquiry and arranging a consultation or appointment.
  • Answering questions and requests.
  • Meeting legal obligations that apply to the business, including record-keeping and reporting.
  • Securing the site and preventing misuse.

Basis of consent

Data is collected on the basis of your informed consent, given by ticking the confirmation box next to the form's submit button. You are not required to tick it; if you do not, we cannot accept the enquiry.

Your consent is limited to being contacted about your enquiry. Your data will not be used for marketing without separate, explicit consent.

You may withdraw consent at any time by writing to the email address below.

Sharing with third parties

Your data is never sold, rented or traded. It is shared only with parties needed to operate the service:

  • Vercel Inc. — the website hosting provider, which stores the site and its technical access logs.
  • Google LLC — the email provider, through which the form message is delivered and stored. Google is also the source of the customer reviews shown on the home page, but those reviews are copied into the site's own files in advance and served as fixed content: visiting the site sends no request to Google at all — neither from your browser nor from our server — and none of your details are transferred to it in that context.
  • WhatsApp LLC (part of Meta) — only if you choose to get in touch by pressing the WhatsApp button on this site. On a computer the button first opens a small panel offering a QR code to scan with your phone or a button to carry on in the browser; that QR code is a file served by this site, and no step of it loads anything from Meta's servers. Beyond that the button is an outbound link and nothing more: no information about you reaches Meta unless you choose to open the chat. Once the chat opens it takes place inside WhatsApp and is governed by its privacy policy rather than this one.
  • Professional advisers bound by confidentiality, such as an accountant or lawyer, where required.
  • A competent authority, where a legal obligation or court order requires it.

Transfers outside Israel

The providers named above are United States corporations that store and process data on servers outside Israel — Vercel in the United States and the European Union, and Google and WhatsApp LLC in the United States. Your enquiry details therefore leave the country. In WhatsApp's case this happens only if you chose to open a chat with the WhatsApp button.

Such transfers are made in accordance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, relying on the data being transferred to countries and parties subject to data-protection duties at the level Israeli law requires.

Retention period

Form enquiries are kept for as long as needed to handle the enquiry and arrange treatment, and thereafter for up to 24 months for follow-up purposes, unless you ask for earlier deletion.

Data that must be retained by law, such as accounting records, is kept for the period the law prescribes.

Data security

The site is served over an encrypted connection (HTTPS). Reasonable security measures are applied in line with the Protection of Privacy Regulations (Data Security), 5777-2017, including restricting access to authorised personnel of the Company alone, strong passwords and two-step verification on the email account, and not writing enquiry contents to server logs.

No one can guarantee absolute security online, but risks are actively minimised.

Serious security incidents

Under Amendment 13 to the Protection of Privacy Law, a serious security incident will be reported to the Privacy Protection Authority and, where required, to the individuals potentially affected, without undue delay.

Your rights

Sections 13 and 14 of the Protection of Privacy Law give you the following rights:

  • Access — to receive the personal data held about you.
  • Correction — to require correction of data that is inaccurate, incomplete, unclear or out of date.
  • Deletion — to request erasure, subject to legal retention duties.
  • Withdrawal of consent — at any time, without giving a reason.
  • Complaint — to the Privacy Protection Authority at the Ministry of Justice.

Privacy enquiries

For any request or question on this subject, write to rotem.mizrahi.support@gmail.com or call 052-249-4565. You will receive a reply within 30 days.

Marketing

The site operates no mailing list. Should one be introduced, advertising messages will be sent only after separate, explicit written consent under section 30A of the Communications (Telecommunications and Broadcasts) Law, 5742-1982, with a simple unsubscribe option in every message.

Minors

The site is not intended for independent use by anyone under 18. Enquiries concerning a minor should be made by a parent or guardian. If data about a minor is found to have been collected without a guardian's consent, it will be deleted promptly.

Changes to this policy

This policy may be updated from time to time. The last-updated date appears at the top of the page and it is worth checking back.