Privacy policy
Version 2026-10-10 · updated 1 October 2026
Who is responsible
The database owner is Geula Levi, 4 Binyamini Aharon St., Apt. 31, Tel Aviv 6745904. Privacy enquiries: through the contact form or by phone, +972-54-452-5462.
What we collect and why
- Orders: name, email, phone and delivery address – to fulfil the order, deliver the work and issue the receipt.
- Questions and requests: the details you send – to reply.
- Cancellation notices: name, ID or passport number (stored encrypted and shown only partially) and contact details – to handle and record the cancellation as the law requires.
- IP addresses are stored only as a one-way keyed hash, to prevent abuse. We use no advertising and no non-essential cookies.
- For visit statistics we use Vercel Web Analytics: it counts the pages viewed, the site a visitor came from and the country, without cookies and without identifying the visitor. Page addresses are recorded without order or address details.
- When you add a work to your cart, one strictly necessary cookie remembers which works are in it (the works' identifiers only, for 30 days). It holds no personal details.
You are not legally required to give these details, but without them we cannot complete the requested action.
Who receives it
Only the service providers needed for each action, as needed:
- Vercel (hosting) and Neon (database), in the European Union;
- Resend (email delivery) – data may be stored in the United States;
- Cardcom and PayPal (payments);
- Morning (receipts);
- DHL and other carriers (shipping and tracking).
How long we keep it
- Paid orders, tax documents and cancellations: 7 years.
- Unpaid orders: buyer details are erased after 30 days.
- Cancellation notices not matched to an order: 2 years.
- Closed requests: 24 months.
- Email copies: 30 days; tracking data: 30 days after delivery.
Your rights
You may ask to see, correct or delete your data (subject to legal retention duties) by writing to us through the contact form. We reply within 30 days.
Security
Connections are encrypted, the admin area requires a password and two-factor authentication, and card details never pass through this site.