Privacy Policy

This page explains how we operate. It is not legal advice, and it does not replace your own professional advisers.

Who we are. shavnu.com is an independent English-language information publisher about the Sde Dov district in Tel Aviv, operated from Israel. For the purposes of data protection law, we are the controller of the personal data described in this policy. Contact us through the contact form.

What we collect. Browsing and technical data. When you visit the site, our hosting and content delivery network (Cloudflare) processes server and CDN logs that may include your IP address, browser type, device information, requested pages, timestamps, and similar technical data needed to deliver and protect the site. If you allow analytics, Google Analytics 4 (GA4) collects aggregate usage data such as pages viewed, approximate region, device category, and referral source. GA4 is configured with IP anonymisation. If you allow advertising measurement, we also retain campaign and ad-click identifiers (such as UTM values, gclid, gbraid, wbraid, fbclid, and msclkid), a reduced referrer URL, and the page path associated with an inquiry. Inquiry forms. If you submit our contact form, we collect your name, email address, optional phone number, which project(s) you are interested in, and your stated preferences (budget, rooms, timeframe, financing, preferred language, and preferred contact channel), plus the technical fields listed above at the time of submission.

What we do not collect. We do not collect payment card or bank account details. We do not knowingly collect special categories of personal data (such as health, biometric, or political opinions). We do not knowingly collect personal data from children under 16. The site is intended for a general adult audience. We do not use email for marketing sends at this time.

Why we use data and legal bases. We process personal data only where we have a lawful basis under Israeli Privacy Protection Law (including requirements aligned with the 2024 and 2025 amendments) and, where applicable, other laws such as US state privacy statutes.

Responding to inquiries (consent). We use inquiry form data to read, respond to, and follow up on your message. If you opt in, we also share your inquiry with the developers of the project(s) you selected, their licensed sales representatives, and licensed real-estate brokers who sell those projects, and we may receive a referral fee from them. We rely on your consent for this processing and sharing.

Site operation and security (legitimate interests). We process server, CDN, and related technical logs to operate, maintain, troubleshoot, and protect the site against abuse, fraud, and unauthorised access. Our legitimate interest is providing a secure, reliable information service.

Analytics (legitimate interests). We use GA4 to understand aggregate traffic patterns and improve the site. Our legitimate interest is measuring and improving how the site is used. Where required, we will obtain consent before placing non-essential analytics cookies.

Legal obligation. We may retain or disclose data when required by applicable law, regulation, legal process, or enforceable governmental request.

Who we share data with. We do not sell or rent personal data. We do not share personal data for cross-context behavioural advertising. We share data only as follows: Developers, sales representatives and licensed brokers. Only if you explicitly opt in through the contact form checkbox, we pass your inquiry details to the developers of the specific project(s) you named, their licensed sales representatives, and licensed real-estate brokers who sell those projects. We may receive a referral fee from them. Passing your inquiry on is a disclosure you ask us to make, it costs you nothing, and we record the date you gave consent and the wording you agreed to. Service providers (processors). Cloudflare (hosting and CDN), Hetzner Online GmbH (PostgreSQL database hosting), and Google (Analytics and Ads measurement) process data on our behalf under contractual safeguards and only for the purposes described in this policy.

International transfers. We operate from Israel. Our service providers may process data in Israel, the United States, the European Union, or other countries. When personal data is transferred outside Israel, we rely on appropriate safeguards recognised under Israeli law, such as standard contractual clauses, adequacy decisions where applicable, and processor agreements that require comparable protection.

Retention. Inquiry records are kept for 24 months after our last meaningful contact with you, unless a longer period is required to resolve an open matter, comply with law, or establish, exercise, or defend legal claims. After that period, we delete or anonymise inquiry data. Server and CDN logs are retained for a shorter rolling window needed for security and troubleshooting (typically up to 90 days unless a longer period is required for an incident investigation). Analytics data in GA4 is retained in aggregated form according to Google's settings and our configured retention period (14 months), after which it is automatically deleted or aggregated further.

Security. We use administrative, technical, and organisational measures appropriate to the nature of the data we hold, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights under Israeli law. Subject to applicable exceptions, you may request to review the personal data we hold about you, request correction of inaccurate data, and request deletion where the law allows. To exercise these rights, contact us through the contact form. We will verify your request and respond within the timeframes required by Israeli Privacy Protection Law and its regulations (generally within 30 days, with a possible extension where permitted).

Your rights under US state privacy laws. If you are a resident of a US state with a comprehensive privacy law (such as California under the CCPA/CPRA, or similar laws in Colorado, Connecticut, Virginia, and other states), you may have the right to: know what personal information we collect, use, and disclose; request deletion of personal information we hold about you; request correction of inaccurate personal information; opt out of the sale or sharing of personal information for cross-context behavioural advertising (we do not sell or share data for those purposes); and not receive discriminatory treatment for exercising your rights. Submit requests through the contact form. We will verify your identity and respond within the statutory timeframe for your state (for example, 45 days under California law, with a possible extension where permitted). You may designate an authorised agent where your state allows it.

Cookies and analytics. The site uses technical storage required by our host and CDN. With your choice, it may also use Google Analytics 4 storage and Google Ads measurement storage. The consent panel offers Allow all, Analytics only, and Necessary only, and its Cookie settings control lets you change that choice later. Google Ads measurement may use campaign and click identifiers to measure inquiries and create eligible advertising audiences. You can also limit cookies through your browser settings. To opt out of Google Analytics specifically, install the Google Analytics Opt-out Browser Add-on or use browser controls to block analytics cookies.

Do Not Track and Global Privacy Control. We do not respond to Do Not Track (DNT) browser signals because there is no industry standard for compliance. Where Global Privacy Control (GPC) is recognised as a valid opt-out signal for sale or sharing under applicable US state law, we honour it in line with our practices above: we do not sell or share personal data for cross-context behavioural advertising.

Changes. We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes may be noted on the site where practicable. Continued use of the site after an update means you accept the revised policy for new processing from that date forward.

Contact. Privacy questions and rights requests can be sent through the contact form.