How we collect, use and protect your personal information when you use the Headovations website — and the rights you have over it.
Headovations Ltd. respects the privacy of its users. This Privacy Policy explains how we handle your personal information across the Headovations website.
This Privacy Policy (the “Policy”) is intended to explain how we collect, use and otherwise process your personal information when you use the Website, so that you can decide in advance whether you wish to provide us with such personal information. This Policy also forms an integral part of the Website's Terms of Use.
Your use of the Website constitutes your acceptance of this Privacy Policy. If you do not agree to this Policy, please refrain from using the Website. While you are under no legal obligation to agree to this Policy or to provide us with your personal information, without doing so, you may be unable to use the Website or enjoy its full features and functionality.
This Policy may be amended from time to time. We will post any changes to this Policy on our Website a reasonable time in advance of their effective date, and we will also make reasonable efforts to proactively notify you by email of the changes to the Policy if we have your email address.
Data protection laws define personal information very broadly. In this Privacy Policy, we refer to any piece of data relating to an identified person or a person who can be identified using reasonable effort. This generally includes identifiers such as a name, ID number, contact information, address, payment information, online identifier, or information related to health or finances.
Below are the key points of this Policy to make it easier to read. This summary does not replace the full Policy set out below.
We collect only the personal information that is necessary for the specific purposes described in this Policy and retain it only for as long as necessary to fulfill those purposes.
Contacting us with inquiries. You may contact us with inquiries by email or through our online contact form. When you do so, we collect your name, email address, and the subject and content of your inquiry and of any further communications with you. You may also provide your phone number.
Requesting a demo or making a partnership inquiry. When you request a demo or submit a business inquiry through the designated forms, we collect your name, email address, your field of activity and the content of any further communications with you. You may also choose to provide the name of your organization or company, and your country and state of residence.
Please use discretion when deciding which information to share with us. You are not required by law to provide us with the personal information described in this Policy. Providing it depends on your consent and discretion, but without providing it you may not be able to use the Website at all, or in the most suitable manner, and we may not be able to contact you as requested. Providing incorrect or partial information may impair your user experience on the Website and our ability to contact you.
When you use the Website, we may collect information about the way in which you use it — for example, which content you read, the pages you viewed, how frequently you accessed them, the Internet Protocol (IP) address from which you accessed the Website, your operating system type, the type of end device you use, and more.
We collect personal information from several sources:
We will use the personal information you provide, and the details we collect while you use the Website, in accordance with this Policy or as required by law, for the following purposes:
In addition, we may use or share aggregated or anonymous information that does not personally identify you, for any purpose, including statistical analysis, research, or business development.
We will disclose the personal information you provide to us, or that we collect while you use the Website, to others only in the following cases:
We may use cookies on the Website. Cookies are text files that your browser creates on command. Some cookies expire when you close your browser (Session Cookies), and others are stored on the hard drive of your computer or mobile device and are used when you return to visit a Website (Persistent Cookies). Cookies may include information about the pages you visited, how long you spent on the Website, and more.
We use cookies for a number of purposes, as follows:
If you prefer not to store cookies locally, you can change your preferences through your device or browser settings.
You can review the specific cookies we use and give or withdraw your consent for each optional category at any time using our Cookie settings panel. Strictly necessary cookies are always active; optional cookies (localization and analytics) are only set once you enable them.
Headovations Ltd. is the controller of the databases containing the personal information described herein. Our address is 3 Adirim St., Tel-Aviv Jaffa, Israel.
The Privacy Protection Law (PPL) provides that every person is entitled to review, directly or through a representative on their behalf, the personal information about them held in a database. In addition, a person who has inspected the information and found that it is incorrect, incomplete, unclear or not up to date, may apply to the controller of the database — that is, to us — with a request to correct or delete the personal information. If we refuse to correct the information, we must notify you of this in the manner and by the means prescribed in the regulations issued under the PPL. You will be entitled to appeal against the refusal in accordance with the law.
You may be eligible for additional rights under the laws applicable to you, as further described below.
Our Website may contain links to third-party Websites or services. We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them. We encourage you to review their privacy policies before providing any personal information.
We implement appropriate technical and organizational measures to secure your information against unauthorized access, alteration, disclosure, or destruction, such as encryption of data in transit and at rest, and access controls. While we maintain industry-standard security practices, no system guarantees absolute security. We continuously work to enhance protection.
We will retain your information for as long as needed to support our ordinary business activities, operate the Website, and handle your inquiries and requests. Thereafter, and provided you have not requested the deletion of your personal information, we will retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements.
To facilitate the processing of your information by us or our service providers, we may transfer your information to countries such as Israel and the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary.
| Scenario | Legal basis |
|---|---|
| Processing your personal information when you contact us with an inquiry | Our legitimate interest in responding to your inquiry |
| Processing your personal information when you contact us with a business partnership inquiry or request a demo | Our legitimate interest in the establishment of our business relationship with you |
| Processing your personal information for analytics purposes | Our legitimate interest in the improvement, enhancement and development of our Website |
| Using strictly necessary cookies | Our legitimate interest in the proper operation of the Website |
| Using optional cookies | Your consent |
| Sharing your personal information with our service providers | Our legitimate interest in the proper operation of the Website |
| Sharing your personal information with our partners | Our legitimate interest in handling your inquiries and requests and maintaining our business relations with you or your organization |
| Sharing your personal information to respond to, handle or mitigate suspected violations of law or our Terms, or in the context of a legal dispute | Our legitimate interest in defending our business, Staff and partners, and enforcing against violations and breaches that are harmful to our business |
| Sharing your personal information to comply with a binding request or order | Our legitimate interest in complying with mandatory legal requirements imposed on us |
| Sharing your personal information for the purpose of enabling a structural change | Our legitimate interest in our business continuity |
If you are in the EEA or the UK, you have the following rights under the GDPR:
If you are an individual residing in the United States, we provide you with the following information pursuant to state privacy laws.
We do not sell your personal information and have not done so in the past 12 months. We do not share your personal information for cross-context behavioral advertising. We also do not use or disclose sensitive personal information.
Below are the categories of personal information we have collected and processed over the past 12 months, and the source of that information:
We collect this information directly from you or through the device you use to access our Website.
We use the above categories of personal information for the following business purposes:
Over the past 12 months, we have shared the above categories of personal information with the categories of third-party entities detailed in section 5 of this Policy.
Right to Know. You have the right to know the following:
Right to Deletion. Subject to certain exceptions set forth below, upon receipt of a verifiable request from you, we will delete your personal information from our records and direct any service providers to delete it from their records.
Please note that we may not delete your personal information under certain circumstances set out by applicable law, such as where it is required to (a) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law, (b) enable strictly internal uses, or (c) comply with an existing legal obligation.
We will also deny your request to delete if it proves impossible or involves disproportionate effort, or if another exception to the law applies. We will provide you with a detailed explanation that includes sufficient facts to give you a meaningful understanding as to why we cannot comply with the request.
Right to Correct. If we receive a verifiable request from you to correct your information and we determine the accuracy of the corrected information you provide, we will correct inaccurate personal information that we maintain about you. In determining the accuracy of the personal information that is the subject of your request to correct, we will consider the totality of the circumstances relating to the contested personal information.
We may also require that you provide documentation if we believe it is necessary to rebut our own documentation that the personal information is accurate. We may deny your request to correct under certain circumstances set out by applicable law. We will provide you with a detailed explanation that includes sufficient facts to give you a meaningful understanding as to why we cannot comply with the request to correct your information.
Non-Discrimination. You have the right not to be discriminated against by us because you exercised any of your rights under applicable laws. If you exercise your rights, we cannot (a) deny you services; (b) charge different prices or fees for services, including through discounts, benefits, or fines; (c) provide you a different level or quality of services; or (d) propose that you receive different prices or tariffs for services. Please note that we may charge a different fee or provide a different level or quality of services if the difference is reasonably related to the value we gain from your personal information.
California Civil Code Section 1798.83 (and other similar state statutes) permits our customers who are California residents (or residents of states with similar legislation) to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected]. Please note that we are only required to respond to one request per customer each year.
We will ask you for additional information to confirm your identity and for security purposes before disclosing the personal data requested to you, using a two- or three-point data verification process, depending on the type of information you require and the nature of your request.
You may also designate an authorized agent to make a request on your behalf. To do so, you need to provide the authorized agent with written permission, which the agent should submit to us. We will also require that you verify your own identity, as explained above.
We will respond to your requests within 45 days (or within 90 days, where the law permits and we determine it necessary considering the complexity and number of the requests you have filed). If we take longer than 45 days, we will inform you of the extension within the initial 45-day response period, together with the reason for the extension.
We may deny your request in the following cases:
We will provide you with a detailed explanation, including sufficient facts, to enable you to meaningfully understand why we cannot fulfill your request. You may appeal our decision to deny your request by submitting a written appeal to us at [email protected].
Questions about this Policy or your personal information? Contact us at [email protected] or via our contact form.