Privacy Policy
Effective date: 16 October 2026
This Privacy Policy explains how Hananya Naftali ("we", "us") collects and uses personal data when you visit www.hnaftali.com (the "Site").
1. Who we are
Hananya Naftali, P.O. Box 488, Or Yehuda 6039728, Israel. Email: info@hananyanaftali.com. Phone: +972 58 707 2163. For any privacy question or request, write to info@hananyanaftali.com with the subject "Privacy".
2. What we collect
Information you give us
-
Newsletter signup: your email address.
-
Contact form: your name, email, subject and message, and your phone number if you choose to give it.
-
Speaking and booking requests: your name, contact details, organisation and event details.
-
Donations: if you donate through a link on the Site, payment is handled by the payment provider or the receiving organisation named on the donation page. We do not see or store your card details.
Information collected automatically
-
Device and browser data, IP address, pages viewed and how you reached the Site, collected by our host (Wix) and, only if you accept cookies, by Google Analytics and by advertising and embedded content providers (see section 6).
Providing your data is voluntary. If you do not provide it, we may not be able to reply to you or send you updates.
3. Why we use it, and our legal basis
-
Sending the newsletter, including occasional promotional content: your consent, which you can withdraw at any time.
-
Replying to messages and booking requests: steps you ask us to take before an agreement, and our legitimate interest in answering you.
-
Measuring site traffic with Google Analytics, showing ads and loading embedded videos and maps: your consent through the cookie banner.
-
Running, securing and improving the Site: our legitimate interest.
-
Meeting legal obligations: legal obligation.
We do not sell your personal data. If you accept advertising cookies, that may count as "sharing" for targeted advertising under some US state laws. You can opt out at any time by choosing Decline All (see section 8).
4. Who receives your data
We share data only with service providers who process it for us:
-
Wix.com (website hosting, forms, bookings, site statistics, cookie consent)
-
Mailchimp by Intuit (newsletter delivery)
-
Google (Google Analytics, AdSense advertising, YouTube video embeds, Google Maps), only after you accept cookies. The one exception is the preview image of an embedded YouTube video, which loads from Google when a page opens and so gives Google your IP address; no YouTube cookies are set until you click Accept.
-
Professional advisers and authorities where the law requires it
5. International transfers
Our providers may process data outside Israel and the European Economic Area, including in the United States. Where required, transfers rely on adequacy decisions, the EU US Data Privacy Framework or Standard Contractual Clauses.
6. Cookies
The Site uses essential cookies needed for it to work. Analytics (Google Analytics), advertising (Google AdSense), embedded video (YouTube) and map (Google Maps) cookies are set only if you click Accept. You can choose Decline All, or change your choice at any time with the Cookie settings button at the bottom left of every page or the "Change my cookie choices" button at the end of this policy. Where your browser sends a Global Privacy Control signal, we treat it as an opt out of sharing for advertising.
Do Not Track: our Site does not respond to Do Not Track browser signals. We do respond to Global Privacy Control as described above. If you accept advertising cookies, Google may collect information about your visits to this Site and to other websites over time. If you decline, it will not.
Cookies used on the Site (name, provider, purpose, how long it lasts):
-
Essential, always on: XSRF-TOKEN and TS (Wix, security, end of session); svSession (Wix, core site function, 12 months); bSession (Wix, performance measurement, 24 hours); fedops.logger.sessionId (Wix, error tracking, 12 months); consent-policy (Wix, remembers your cookie choice, up to 12 months).
-
Analytics, only after Accept: _ga and _ga_ followed by an ID (Google Analytics, counts visits and measures how the Site is used, 2 years).
-
Advertising, only after Accept: __gads, __gpi and __eoi (Google AdSense, shows and measures ads and limits how often you see them, up to 13 months).
-
Embedded video, only after Accept: YSC (YouTube, security, end of session) and VISITOR_INFO1_LIVE (YouTube, video preferences, 6 months).
7. How long we keep it
-
Newsletter data: until you unsubscribe, then removed from active lists.
-
Contact and booking messages: up to 3 years, then deleted.
-
Cookie consent records: as long as needed to prove consent.
-
Google Analytics data: no longer than 14 months, under the retention setting in our Google Analytics account.
-
Server logs and site statistics kept by Wix, and advertising data kept by Google: under those providers' own retention policies.
8. Your rights
Depending on where you live (including under Israel's Privacy Protection Law, the GDPR and US state laws such as the CCPA), you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, to withdraw consent, and to opt out of the sale or sharing of personal data for targeted advertising. To use these rights, email info@hananyanaftali.com. We will not discriminate against you for using them. You may also complain to your local data protection authority, including Israel's Privacy Protection Authority.
Your Privacy Choices / Do Not Sell or Share: to opt out of the sale or sharing of your personal data for advertising, click the "Change my cookie choices" button at the end of this policy, or the Cookie settings button at the bottom left of any page, and choose Decline All. You can also email info@hananyanaftali.com with the subject "Do Not Sell". The "Your Privacy Choices" link in the site footer brings you straight to that button.
9. Children
The Site is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
10. Security
We use reasonable technical and organisational measures, including HTTPS, to protect your data. No online service is completely secure.
11. Changes
We may update this policy. If we make material changes, we will update the effective date above and, where appropriate, notify newsletter subscribers.
