Privacy policy

Who is responsible

GALUT is run by [Your full name], [Street, City, Postcode], Israel. We are responsible for the personal data described here. Questions or requests: hello@example.com.

What we collect

• When you order: your name, email, shipping address, optional phone number, what you bought and how much you paid. PayPal tells us the payment went through and the email on your PayPal account. We never see your card details.
• When you join the list: your email address.
• When you browse: your bag is saved in your own browser so it's there when you come back. It isn't sent to us until you check out.

Why we use it

• To make, ship and support your order, including replacements and refunds — needed to fulfil our contract with you.
• To keep order and payment records — required by tax and accounting law.
• To send drop announcements if you joined the list — based on your consent, which you can withdraw any time.
• To prevent fraud and keep the site secure — our legitimate interest.

We don't sell your data, and we don't use it for advertising or profiling.

Who we share it with

Only the services we need to run the shop:

• Printify and its print partners, who make and ship your order — they receive your name, shipping address, contact details and the items ordered.
• Shipping carriers, to deliver your parcel and send tracking updates.
• PayPal, to process your payment under its own privacy policy.
• Google Cloud / Firebase, which hosts this website and stores order and mailing-list data.
• Sentry (Functional Software, Inc., data stored in the EU), which records technical error reports when something on the site breaks, so we can fix it. Reports include the page, your browser and device type and an approximate location (city), but not your name, email, address or IP address.
• Our email provider, to send order updates and, if you signed up, drop announcements.

We may also share data where the law requires it.

International transfers

We're based in Israel, and our service providers may store or process data in the United States, the EU and other countries where products are made. Where data leaves the EU or UK, we rely on the safeguards these providers offer, such as standard contractual clauses.

How long we keep it

• Order records: for as long as tax and accounting law requires, normally up to 7 years.
• Mailing list: until you unsubscribe or ask us to remove you.

Cookies

We don't use analytics, advertising or tracking cookies. The site stores your bag in your browser's local storage. When you pay, PayPal may set its own cookies to process the payment and prevent fraud.

Your rights

You can ask to see, correct or delete the personal data we hold about you, ask us to limit how we use it, object to it being used, or ask for a copy to take elsewhere. Email hello@example.com and we'll reply within 30 days. We may need to keep some order records where the law requires it.

If you're unhappy with how we handle your data, you can complain to the Israeli Privacy Protection Authority or, if you live in the EU or UK, to your local data protection authority.

Children

This shop isn't aimed at children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update it here and change the date at the top.