Privacy Policy

1. Introduction

GALILEE BLESSING LTD. (Israeli Company No. [517294807 — to be confirmed]) (the “Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, share, store, and protect personal information when you visit our website, purchase our products, subscribe to our services, contact us, or otherwise interact with us (collectively, the “Services”).

This Privacy Policy applies in addition to, and forms an integral part of, our Terms & Conditions.

Company contact details

Name: Galilee Blessing Ltd.

Address: Kibbutz Ginosar, Northern District, Israel

Email: galilee@galilee-blessing.com

Privacy contact: privacy@galilee-blessing.com

2. Information We Collect

We collect the following categories of personal information:

(a) Information you provide directly

• Identification and contact details: full name, email address, phone number, billing and shipping address.
• Transaction details: order history, products purchased, subscription status.
• Payment information: payment-method identifiers and billing details. Full payment-card numbers are processed directly by our PCI-DSS compliant payment processors and are not stored on our servers.
• Account information: username, password (stored in encrypted/hashed form), profile preferences.
• Communications: messages you send us via contact forms, email, or other channels, and any information you voluntarily provide.

(b) Information collected automatically

• Technical data: IP address, browser type and version, device identifiers, operating system, language preferences.
• Approximate geographic location (derived from IP address).
• Usage data: pages visited, time spent, click paths, referring URLs, session timestamps.
• Cookies and similar technologies (see Section 6).

(c) Information from third parties

• Payment processors (transaction confirmations).
• Shipping carriers (delivery status).
• Analytics, advertising, and email-marketing providers.
• Public sources, where lawful.

You are not legally obligated to provide personal information, but failure to provide certain information may prevent us from processing orders, delivering products, or responding to your requests.

3. Legal Bases for Processing (GDPR / UK GDPR)

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases:

• Performance of a contract — to fulfil orders, deliver products and digital content, manage subscriptions, and provide customer service.
• Compliance with legal obligations — including tax, accounting, consumer-protection, and anti-fraud obligations.
• Consent — for marketing emails, non-essential cookies, and other processing that requires consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests — for analytics, fraud prevention, network security, and improving our Services, balanced against your rights and freedoms.

4. How We Use Information

We use personal information for the following purposes:

• Processing, fulfilling, and shipping orders.
• Delivering digital products and managing the Live Camera subscription service.
• Providing customer service, support, and responding to inquiries.
• Sending transactional communications (order confirmations, shipping updates, account notices).
• Sending marketing communications and newsletters — only with your consent where required.
• Improving and personalizing the Services.
• Detecting, preventing, and addressing fraud, abuse, and security incidents.
• Complying with legal, tax, and accounting obligations.
• Analytics and performance measurement.
• Establishing, exercising, or defending legal claims.

5. Sharing of Personal Information

We do not sell your personal information. We do not “share” personal information for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), unless we obtain your prior opt-in consent.

We share personal information only with the following categories of recipients, and only as necessary:

• Payment processors and credit-card processors.
• Shipping and logistics providers.
• Hosting, cloud-storage, and infrastructure providers.
• Analytics and performance-measurement providers.
• Email-marketing and CRM providers (where consent applies).
• IT, security, and technical-support providers.
• Professional advisors (legal, accounting, audit).
• Governmental, regulatory, or law-enforcement authorities, where required by law, court order, or to protect our rights, property, or safety, or those of others.
• Successor entities in connection with a merger, acquisition, restructuring, or sale of business assets, subject to confidentiality undertakings.

All service providers are bound by contractual obligations of confidentiality and may use personal information only for the specific services they provide to us.

6. Cookies and Similar Technologies

We use cookies and similar tracking technologies (such as pixels and SDKs) for the following purposes:

• Strictly necessary cookies — required for website operation, authentication, shopping cart, and security. These cannot be disabled.
• Functional cookies — remember preferences and improve user experience.
• Analytics cookies — measure usage and performance (e.g., Google Analytics).
• Marketing and advertising cookies — track visits across websites for advertising purposes (e.g., Meta Pixel).

Where required by law (including for users in the EU, UK, and Israel under applicable rules), we obtain your prior consent before setting non-essential cookies through our cookie-consent banner. You may withdraw or change your consent at any time via the cookie-preferences link in the website footer.

Most browsers allow you to manage cookie settings; however, disabling certain cookies may impair website functionality.

7. Marketing Communications

By subscribing to our mailing list or opting in to marketing communications, you consent to receive promotional emails, newsletters, and updates.

You may withdraw your consent and unsubscribe at any time using the unsubscribe link in any marketing email or by contacting privacy@galilee-blessing.com. Withdrawal of consent does not affect transactional communications necessary to fulfil your orders or service obligations.

8. International Data Transfers

We are based in Israel. Israel has been recognized by the European Commission as providing an adequate level of data protection (Commission Decision 2011/61/EU).

Where we transfer personal information to service providers located outside the European Economic Area, the United Kingdom, or your country of residence, we ensure appropriate safeguards are in place, including, as applicable, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to jurisdictions covered by an adequacy decision.

You may request a copy of the safeguards applicable to a specific transfer by contacting privacy@galilee-blessing.com.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Order and transactional records: for the duration of the customer relationship and thereafter as required by Israeli tax, accounting, and consumer-protection law (generally up to 7 years).
• Account information: for as long as the account remains active, plus a reasonable wind-down period.
• Marketing preferences: until consent is withdrawn or the account is closed.
• Customer communications: typically up to 3 years from the last interaction.
• Information required to establish, exercise, or defend legal claims: for the applicable statutory limitation period.

When information is no longer required, we delete it or anonymize it irreversibly.

10. Data Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures include encryption in transit (TLS/SSL), secure payment-processing integrations, access controls, role-based permissions, monitoring, and regular backups.

No method of transmission or storage over the internet is completely secure. Where we are required by applicable law to notify you or a competent authority of a personal-data breach, we will do so without undue delay and in accordance with the timelines required by that law.

11. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access — to obtain confirmation of whether we process your personal information and a copy of it.
• Rectification — to correct inaccurate or incomplete information.
• Erasure / deletion — to request deletion of your personal information, subject to legal exceptions.
• Restriction — to restrict the processing of your personal information.
• Data portability — to receive your personal information in a structured, commonly used, machine-readable format.
• Objection — to object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint — with a competent supervisory authority, including the Israeli Privacy Protection Authority (PPA), your local EU/EEA Data Protection Authority, or the UK Information Commissioner’s Office (ICO).

Additional rights for California residents (CCPA / CPRA)

If you are a California resident, you also have the following rights:

• Right to know what categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. As stated above, we do not sell or share personal information for cross-context behavioural advertising.
• Right to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising your rights.

How to exercise your rights

To exercise any of these rights, please contact privacy@galilee-blessing.com. We will respond within 30 days (or such longer period as may be permitted by applicable law). We may need to verify your identity before fulfilling certain requests.

12. Children’s Privacy

Our Services are intended for adults aged 18 or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from a child without verified parental consent, we will delete such information promptly.

13. Third-Party Links

The website may contain links to third-party websites and services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review the privacy policies of any third-party services you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. The “Last Updated” date at the top indicates the most recent revision. Material changes will be communicated through prominent notice on the website or by email where appropriate. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact

For privacy-related inquiries, complaints, or to exercise your rights, please contact:

Galilee Blessing Ltd.

Kibbutz Ginosar, Northern District, Israel

Email: privacy@galilee-blessing.com

General contact: galilee@galilee-blessing.com