Privacy Policy

ShabbosKodesh.com (“we”, “our” or “us”) is committed to protecting your personal information and your right to privacy. This policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all information collected through our website at www.shabboskodesh.com, and any related services, sales, or communications.

1. What information we collect

We collect information you provide directly to us when you:

• Place an order (name, phone number, email address, delivery address)
• Create an account or log in to view orders
• Contact us by phone, email or WhatsApp
• Subscribe to promotional communications
• Participate in surveys or promotions

We also collect information automatically when you visit our site:

• Log data (IP address, browser type, pages visited, time and date)
• Cookie and tracking data (with your consent — see section 6)
• Device information (device type, operating system)

2. How we use your information

We use the information we collect to:

• Process and deliver your orders
• Send order confirmations and delivery updates
• Contact you regarding your order (phone, WhatsApp, email)
• Respond to customer service inquiries
• Improve our website and services
• Send promotional communications (only with your consent)
• Comply with legal obligations
• Detect and prevent fraudulent transactions

Legal basis (GDPR): We process your personal data based on (a) the performance of a contract (to fulfil your order), (b) legitimate interests (site improvement, fraud prevention), and (c) your consent (marketing communications, analytics cookies).

3. How we share your information

We do not sell your personal data. We may share your information with:

• Payment processors (Stripe): to securely process your payment. Stripe is PCI-DSS compliant and we never store your card details.
• Email service providers (Resend): to send transactional and confirmation emails.
• Analytics providers (Google Analytics, Meta Pixel): only with your consent via our cookie banner.
• Our delivery team: your name, address and phone number are shared with our delivery coordinator (Dovid) to arrange your delivery.
• Legal authorities: where required by law or to protect our rights.

4. Data retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy. Specifically:

• Order information is retained for 7 years for tax and legal compliance purposes
• Marketing preferences are retained until you withdraw consent
• Analytics data is retained for 26 months (Google Analytics default)
• Session and authentication data is deleted when you log out

5. Your rights (GDPR)

If you are located in the European Economic Area (EEA) or Israel, you have the following rights under the GDPR and Israeli Privacy Protection Law:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure (“right to be forgotten”) — request deletion of your data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at orders@shabboskodesh.com. We will respond within 30 days.

6. Cookies

We use cookies and similar tracking technologies to improve your experience on our site. When you first visit, you will be shown a cookie consent banner.

You can withdraw your cookie consent at any time by clearing your browser cookies and revisiting our site.

7. Data security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. All data is transmitted over HTTPS. Payments are processed by Stripe, who maintain PCI-DSS Level 1 compliance. We never store payment card details on our servers.

8. Children's privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of our services after any changes constitutes your acceptance of the new policy.

10. Contact us

If you have any questions about this privacy policy or our data practices, please contact us: