Sod Kmusa (hereinafter: “Sod Kmusa”, “the Business”, “the Site” or “we”) respects the privacy of the Site’s users and acts in accordance with the provisions of the Protection of Privacy Law, 5741-1981, including the provisions of Amendment 13 to the Law, the regulations under it and the applicable law.

The purpose of this policy is to explain what personal information may be collected when using the Site, how we use it, with whom it may be shared, how we protect it and what rights users have with respect to their information.

This policy is worded in the singular form for convenience only and refers to all genders.

Business name: Sod Kmusa

Email for privacy and personal information inquiries:
sodkmusa@gmail.com

For any inquiry concerning privacy, the collection of personal information, reviewing or correcting information, or exercising other rights under the law, you can contact us at the email address listed above.

To the extent that the law does not require the appointment of a Data Protection Officer (DPO), this address or anything stated in this policy should not be regarded as the appointment of a Data Protection Officer. Where the Business becomes obliged to appoint such an officer, the Business will act in accordance with the provisions of the law.

The information we collect may be information the user provides to us directly, as well as technical information collected automatically when the Site is used.

When making a purchase, filling in a form, contacting us or using the Site’s services, information such as the following may be collected:

• Full name.

• Email address.

• Phone number, if provided.

• Shipping address.

• Order and purchase details.

• Details of the products purchased.

• Choices and preferences provided when ordering a bundle, such as colors, theme, bundle type, quantity and preferences regarding the contents of the set.

• Requests, notes or additional information the user chose to enter when ordering.

• Information provided when contacting customer service.

• Any additional information the user chooses to provide to us voluntarily.

Payment on the Site may be made through external payment processing providers.

Payment method details are transferred and processed in accordance with the way the payment processor operates and the method chosen at the time of purchase. As a rule, full credit card details are not stored in the Business’s systems but are handled by the relevant payment providers, in accordance with their systems and procedures.

When the Site is used, technical and statistical information may be collected, such as:

• IP address.

• Browser type and operating system.

• Device type.

• Pages you visited.

• Visit times and duration of use of the Site.

• Actions performed on the Site.

• Additional technical usage data required for security, operation, measurement and improvement of the Site.

The technical information may be collected through the Site’s systems, hosting services, statistics tools, cookies and external services integrated into the Site, according to the systems actually in use on the Site.

The personal information collected may be used by us for the following purposes:

• Carrying out, managing and handling orders.

• Processing payments and approving transactions.

• Preparing bundles and products according to the order details and the preferences provided.

• Shipping products to the address provided at the time of purchase.

• Providing customer service and responding to inquiries.

• Handling cancellations, returns, problems and service requests.

• Contacting you regarding an order, shipment or service.

• Sending videos related to the order, where they are part of the service or the order.

• Preventing fraud, misuse of the Site and unauthorized activity.

• Securing the Site and the systems connected to it.

• Analyzing usage data and improving the Site, the products and the user experience.

• Accounting, operational and legal management of the Business.

• Complying with the provisions of the law and the requirements of competent authorities.

Where we wish to use information for a material purpose that is not consistent with the purpose for which it was provided, we will act in accordance with the applicable provisions of the law.

The Business may use contact details to send marketing information, updates, offers, promotions or advertising content, subject to the provisions of the law and the required consents.

Where consent is required to receive advertising messages, marketing will be sent in accordance with the provisions of the law and the consent given, if given.

The user may request to stop receiving advertising messages in accordance with the provisions of the law and the unsubscribe mechanism included in the marketing message, if any.

The Business does not sell customers’ personal information to third parties.

However, for the purpose of operating the Site, carrying out transactions and providing the services, we may transfer information to external parties to the extent required for the activity, including:

• Payment processing companies and payment providers.

• Shipping companies and delivery services.

• Hosting and technology infrastructure providers.

• Providers of website services, maintenance and technical support.

• Mailing and customer communication systems, where used.

• Measurement, analytics and statistics services, where integrated into the Site.

• Other suppliers or service providers acting on behalf of the Business and required for its operation.

The information transferred will be as needed and within the purposes set out in this policy, while taking reasonable measures to protect the information and in accordance with the provisions of the law.

Information may also be disclosed where there is a legal obligation to do so, under a court order or a demand by a competent authority, or where this is required to protect the Business’s legal rights.

Some of the service providers the Business may use, such as hosting providers, cloud services, payment processing, analytics, mailing or other technology services, may operate outside Israel or store information outside Israel.

In such cases, the Business will act in accordance with the provisions of the law applicable to the transfer of personal information outside Israel.

The Site may use cookies and similar technologies.

Cookies are files or technological identifiers stored on the user’s device that make it possible, among other things, to operate the Site, save preferences, measure usage, secure the Site and improve the user experience.

The Site may use cookies of various types, including:

Essential cookies – used for the proper functioning of the Site, the shopping cart, the purchase process, security and other basic functions.

Analytics and measurement cookies – may be used to understand how the Site is used, measure performance and improve the user experience.

Third-party cookies – may be created by external services integrated into the Site, such as analytics services, embedded content or social networks, according to the services actually in use on the Site.

The user can manage, block or delete cookies through their browser settings. However, blocking certain cookies may cause some of the Site’s functions not to work fully.

The Site may include links, buttons, embedded content or connections to social networks, including Instagram, TikTok, Facebook and other online services.

Use of these services may be subject to the privacy policies and terms of use of the operators of the relevant services.

The Business does not control the information collected by those third parties after the user is transferred to an external service, or as a result of a third-party service operating on the Site.

When ordering bundles, the user may provide preferences such as colors, themes, product types, preferences regarding items they do not wish to receive and other requests related to the order.

This information is used to prepare and tailor the order in accordance with the options offered on the Site.

There is no need to provide, as part of the order, sensitive personal information that is not required for carrying out the transaction or the service. We ask that you not send us sensitive information or unnecessary personal information through the notes fields, contact forms or the Business’s communication channels.

The Business may use automated systems for the purposes of operating the Site, security, data analysis, responding to inquiries or improving the service, according to the systems actually in use on the Site.

The Business will not use personal information for purposes that are inconsistent with the purposes set out in this policy, except in accordance with the provisions of the law.

If material use of automated systems or artificial intelligence for processing personal information is introduced in the future, the Business will update the Privacy Policy as needed and in accordance with the provisions of the law.

The Business will retain personal information only for the period required for the purposes for which the information was collected, for providing the service, managing the Business, complying with legal requirements, legal defense, handling disputes or in accordance with the data retention obligations that apply to the Business.

The retention period may vary according to the type of information and the purpose of its use.

This policy does not commit to a uniform retention period for all types of information, and wherever there is a legal obligation to retain information for a certain period, the information will be retained in accordance with the provisions of the law.

Information that is no longer required may be deleted, securely deleted or anonymized, depending on the nature of the information and the circumstances.

The Business takes reasonable and accepted technological and organizational security measures appropriate to the nature of the activity and the type of information held, in order to reduce the risk of unauthorized access, misuse, alteration, loss or disclosure of personal information.

The Site’s infrastructure and the payment services may use accepted security measures, including communication encryption (SSL/TLS), access controls and additional security mechanisms, according to the providers and systems actually in use.

Nevertheless, no system connected to the internet can be fully protected, and therefore absolute immunity from any security incident cannot be guaranteed.

The Business will act in accordance with its obligations in the event of a security incident, should one occur, and in accordance with the applicable provisions of the law.

In accordance with the provisions of the Protection of Privacy Law and the applicable law, the user may have various rights with respect to the personal information held about them.

Among other things, subject to the conditions and exceptions prescribed by law:

Right of access – the right to request to review personal information held about the user, subject to the provisions of the law and the exceptions set out in it.

Right to correction – where personal information is not correct, complete, clear or up to date, its correction may be requested in accordance with the provisions of the law.

Additional rights may apply depending on the type of information, the manner of processing and the circumstances.

Please note that not every request for deletion, change or cessation of processing will be granted in every situation, and in certain cases the law permits or requires the Business to continue holding or processing certain information.

The Business will examine each request in accordance with the circumstances and the provisions of the law.

Inquiries regarding personal information or the exercise of rights under the law may be sent to:

sodkmusa@gmail.com

The inquiry should state, as far as possible, the name of the person making it, contact details and the nature of the request, to enable us to identify them and handle the request.

In appropriate cases, the Business may request additional details in order to verify the identity of the person making the inquiry and to prevent information from being given to someone who is not entitled to receive it.

Requests will be handled in accordance with the time frames, conditions and exceptions prescribed by law.

The Site is open for browsing and use by the general public, including users under the age of 18.

However, making a purchase on the Site, and in particular making a transaction using a credit card or another payment method, is permitted only for those aged 18 and over.

When making a purchase on the Site, the purchaser declares that they are 18 years of age or older and that they are entitled to make the transaction in accordance with the law and the Site’s terms of use.

The Business may decline to approve, or may cancel, a transaction if it turns out that the purchase was made by a person under the age of 18, all subject to the provisions of the law.

This age restriction applies only to making purchases and transactions on the Site and is not a restriction on browsing, viewing or using the Site.

Inquiries made through the Site’s forms, email or other communication channels may be retained for the purpose of handling the inquiry, service records, resolving disputes, improving the service and meeting legal and business requirements.

Sensitive information or personal information that is not required for handling the inquiry should not be sent through the Business’s communication channels.

The Business may use and retain personal information to the extent required for fulfilling legal obligations, accounting, collecting payments, handling disputes, examining claims, preventing fraud, protecting the Business’s rights or responding to demands by competent authorities.

The Business may update the Privacy Policy from time to time, among other things following changes to the Site, to the services provided through it, to the technologies used, to the Business’s work processes or to legal requirements.

In the event of a material change in the way personal information is used, the Business will act in accordance with the applicable provisions of the law and update the policy accordingly.

The current version of the Privacy Policy is the one published on the Site at the time of its use.

For questions, requests or inquiries regarding privacy and personal information, you can contact:

Sod Kmusa

Email:
sodkmusa@gmail.com

The inquiry will be examined in accordance with the circumstances and the provisions of the law.

Last updated: 30.09.2026