Privacy Policy

MazalDay Ltd. ("MazalDay", "we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you use our platform.

By using MazalDay, you consent to the practices described in this policy. We encourage you to read it carefully.

Data you provide to us:

• Registration information: name, email, phone number
• Profile information: photo, description, preferences
• For providers: business name, address, category, portfolio, rates
• Communications: messages exchanged via the Platform, contact requests
• Reviews and ratings you post

Data collected automatically:

• Technical data: IP address, browser type, device, operating system
• Browsing data: pages viewed, time spent, clicks, searches
• Geolocation data (with your consent)
• Cookies and similar technologies

We use your data to:

• Provide our services: create and manage your account, enable connection with providers
• Improve the Platform: analyze usage, develop new features
• Personalize your experience: tailored recommendations, relevant search results
• Communicate with you: notifications, newsletters (with your consent), customer support
• Ensure security: detect and prevent fraud, protect our users
• Comply with legal obligations: tax compliance, response to authorities

Legal basis: consent, contract performance, legitimate interests, legal obligations.

We share your data only in the following cases:

• With providers: when you contact them via the Platform
• With our subcontractors: hosting (Vercel, Supabase), analytics, email (all subject to confidentiality agreements)
• For legal reasons: if required by law, court order or to protect our rights
• In case of restructuring: merger, acquisition (your data remains protected)

We never sell your personal data to third parties for commercial or advertising purposes.

We use cookies for:

• Essential cookies: Platform operation, authentication, security
• Performance cookies: analyze usage, improve our services
• Functionality cookies: remember your preferences (language, region)
• Marketing cookies: with your consent, for relevant advertising

You can manage your cookie preferences via your browser settings or our consent banner.

We implement technical and organizational security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication and strict access control
• Monitoring and anomaly detection
• Regular backups and disaster recovery plan
• Training of our teams on data protection

Despite these measures, no transmission over the Internet is completely secure. In case of a data breach, we will notify you in accordance with applicable regulations.

In accordance with GDPR and Israeli privacy law, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict processing in certain cases
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at info@mazalday.com. We will respond within one month.

We retain your data as long as necessary for:

• Active accounts: throughout your registration period
• After account deletion: some data for 3 years for legal reasons
• Billing data: 10 years in accordance with tax obligations
• Security logs: maximum 1 year

Upon expiration of these periods, your data is deleted or irreversibly anonymized.

Your data may be transferred to countries outside the European Economic Area (EEA), including Israel and the United States (for our technical providers).

These transfers are governed by:

• The EU adequacy decision for Israel
• The European Commission's Standard Contractual Clauses
• The Data Privacy Framework (for transfers to the USA)

The Platform is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors.

If you are a parent and believe your child has provided us with personal data, contact us immediately at info@mazalday.com.

We may update this Privacy Policy to reflect changes in our practices or regulations.

In case of significant changes, we will notify you by email or via the Platform before the changes take effect.

The date of last update is indicated at the top of this page. We encourage you to regularly review this policy.

For any questions relating to this policy or your personal data, you may contact our Data Protection Officer (DPO):

• Email: info@mazalday.com
• Address: DPO MazalDay, Tel Aviv, Israel

You also have the right to file a complaint with the competent data protection authority (in the UK: the ICO; in Israel: the Privacy Protection Authority).