Privacy Policy

1. General

1.1. This policy explains how this website (Cheder HaChassidim, registered association 580341170) collects, uses and stores the personal information of donors, volunteers and visitors, in accordance with the Protection of Privacy Law and its regulations.

1.2. Controller of the database:

2. What information is collected

2.1. When you write through the contact form we collect your full name, email address, phone number (optional), the subject of your enquiry and the content of your message.

2.2. When you fill in the volunteer form we collect your full name, email address, phone number and the area you would like to help with.

2.3. Form details are not stored on the site itself. The contact form opens a prepared message in your own email program, and the volunteer form opens a prepared message in WhatsApp. The details only reach us once you press send there.

2.4. The association has no payment page of its own, and no card processing takes place on this site. The donate buttons are outbound links to an external donation page called Peach, which the association does not operate. Donation details are given there, are held by whoever operates that page, and never pass through this site or get stored on it.

2.5. The site embeds third-party content such as YouTube videos and Google Maps. Those services may collect technical information, such as your IP address, under their own privacy policies.

2.6. Please note that if the details needed to contact us, to volunteer or to donate are not provided, we will not be able to reply or to complete the donation.

2.7. Every user has the right to see the information held about them and to ask for it to be corrected or deleted, as provided by law.

3. What the information is used for

3.1. Handling enquiries, donations and requests for help.

3.2. Managing volunteer forms and contacting volunteers.

3.3. Improving the experience of using the site.

3.4. Internal reports for oversight and reporting.

3.5. Complying with the law, preventing fraud and resolving disputes.

4. Sharing information with third parties

4.1. Information may be shared only with the following:

• Peach - the operator of the external donation page our donate links lead to. The donation itself is made there and not here, and payment details do not pass through this site.
• Google (United States) - the contact form opens a message in the mail program on your own device, and the message is sent to the association's Gmail inbox. An enquiry you send is therefore stored on Google's servers.
• Meta (United States) - the volunteering form opens a message in WhatsApp on your own device. An enquiry sent that way therefore passes through WhatsApp.
• Microsoft (United States) - only if you have accepted analytics (section 5): on-page behaviour data, without the text you typed and without identifying details.
• The provider hosting this site. The site is static and stores no information you have given us with that provider.

4.2. Personal information will not be passed to third parties except for the purposes set out above, or as required by law or a court order.

5. Cookies and analytics

5.1. The site does not use cookies for advertising, and we neither sell nor pass information to commercial parties. Accessibility menu preferences are stored in your own browser only and are not sent anywhere.

5.2. On your first visit the site shows a notice where you can accept or decline analytics. Until you accept, no analytics tool is loaded at all - not loaded and not measuring. Declining means they will not be loaded, and the site works in full either way.

5.3. If you accept, two tools are loaded:

• Google Analytics (Google, United States) - how many people visit, where they came from and which pages they viewed. In our configuration the IP address is anonymised and the data is not passed into Google's advertising profiles. Analytics data is kept for 14 months and then deleted.
• Microsoft Clarity (Microsoft) - heatmaps and recordings of on-page behaviour, used to find places where the site gets in people's way. We have it set to strict masking: every piece of text you see or type is hidden in the recording, so what you typed into the contact form or the volunteering form cannot be seen. What is visible is pointer movement, scrolling and clicks only.

5.4. This consent is your own choice, and under the Protection of Privacy Regulations (Transfer of Information to Databases Abroad), 5761-2001, it is also what permits the analytics data to be transferred to Google and Microsoft in the United States.

5.5. You can change or withdraw your choice at any time: Withdrawing stops the measurement and deletes the cookies the tools set on this site. Microsoft also sets an identifier on its own domain (‎clarity.ms‎), which is not under our control and can be cleared from your browser settings.

5.6. Embedded third-party content, such as YouTube videos and Google Maps, may set cookies of its own.

5.7. You can change your browser settings to block or delete cookies.

6. Information security

6.1. This site has no server of its own and no database. It is a static site: it presents information and neither collects nor stores anything. The contact form and the volunteering form do not send information to any server of ours. They open a prepared message in the mail program or in WhatsApp on your own device, and you send it from there.

6.2. The association applies reasonable technical and organisational measures to protect personal information, as required by the Protection of Privacy Regulations (Information Security), 5777-2017. It cannot, however, guarantee absolute immunity from unauthorised access or unlawful use.

6.3. Enquiries you send reach a mailbox and a WhatsApp account run by providers that store information in the United States (Google and Meta, as set out in 4.1). The transfer to them is made in accordance with the Protection of Privacy Regulations (Transfer of Information to Databases Abroad), 5761-2001, and both providers hold recognised international information security certifications. If you would rather your enquiry did not pass through them, you are welcome to telephone us instead. The same regulations apply to the analytics tools in section 5 if you have accepted them, and those can be declined or withdrawn at any time.

7. Your rights

Under the Protection of Privacy Law, every user has the following rights:

• Right of access, to receive a copy of the personal information held about you.
• Right of correction, to require the correction of information that is inaccurate, incomplete or out of date.
• Right of erasure, to ask for personal information to be deleted, subject to the law.
• Withdrawing consent to direct marketing, at any time, by writing to amutayosef156@gmail.com or calling 054-832-3112.

8. How long information is kept

8.1. Information is kept for as long as is needed for the purposes set out in this policy, or as required by law.

8.2. Once it is no longer needed, the association will delete it or make it anonymous.

9. Minors

The site is open to minors as well (volunteers and donors). If it emerges that personal information has been collected from a minor under 18 without parental consent, the association will delete it on request.

10. Changes to this policy

10.1. The association may amend and update this policy from time to time.

10.2. Notice of any material change will be published on the site.

11. Contact

For any question or request about this policy, or to exercise your rights, contact: