Privacy Policy

1. General

Baby World D.P. Ltd. (company no. 516825262), the owner of the Tvorets brand and of this online store, respects users' privacy and acts in accordance with the Protection of Privacy Law 5741-1981 (as amended, including Amendment 13) and the Protection of Privacy Regulations (Data Security) 5777-2017.

This policy explains what data we collect, for what purposes, with whom it is shared and what rights you have. Using the site constitutes consent to this policy. You are not legally obliged to provide personal data, but without certain details we cannot process and deliver an order.

2. What data we collect

When you use the site we may collect:

• Contact details: name, phone, email address.
• Order and delivery details: city, delivery address, order contents, order comment.
• Payment details: payments are processed by Allpay, an external PCI DSS compliant provider. The card number never reaches our servers and is not stored by us — we receive only a mask (first and last digits), the card type and the amount.
• Technical data: IP address and request data, logged by the hosting provider to operate and secure the site.
• Your chosen language and cart contents — stored in your browser only and never sent to our servers.

3. What we do not do

The site carries no web analytics, advertising pixels or trackers: we do not install Google Analytics, Meta Pixel or similar tools and do not track your behaviour across sites.

We do not run marketing mailings. The email address you provide at checkout is used to confirm the order, send the receipt and contact you about delivery.

4. Purposes of use

• Processing the order, payment, delivery and customer service.
• Issuing receipts and tax documents as required by law.
• Operating the site, information security and fraud prevention.
• Complying with legal obligations.

5. Sharing with third parties

We do not sell personal data. Data is shared only with those the service cannot work without:

• Allpay — the payment provider, to process the payment.
• EasyCount — the electronic document service, to issue the receipt; receives the name, email and order contents.
• Delivery services — name, phone and address to hand over the parcel.
• The site server and database are hosted in a Hetzner data center in Germany (EU), operated by us.
• Resend, an email service that sends the order confirmation (name, email, order contents).
• Google Fonts — fonts are loaded from Google's servers, which therefore see your device's IP address.
• Competent authorities — where required by law or court order.

Some service providers store data outside Israel. Such transfers are made in accordance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad) 5761-2001.

6. Cookies and browser storage

There are no advertising or analytics cookies on this site. We use only your browser's local storage to remember your chosen language and your cart, plus a technical session for signing in to the staff area. This data stays in your browser; you can delete it in your browser settings, which will reset the cart and the language choice.

7. Data security

We apply safeguards in line with the Protection of Privacy Regulations (Data Security) 5777-2017: encrypted transport (HTTPS/TLS), restricted access to order data and separated environments. Only authorised staff can access orders. That said, absolute protection does not exist, and we cannot guarantee that the service is completely immune to intrusion.

8. Retention

Personal data is kept for as long as needed for the purposes it was collected for, or as required by law — in particular, transaction documents are kept for tax and accounting purposes. Data no longer needed is deleted or anonymised.

9. Your rights

Under the Protection of Privacy Law you have, among others, the right to:

• Review the data we hold about you (section 13 of the Law).
• Request correction or deletion of data that is incorrect, incomplete or out of date (section 14).
• Be removed from direct-mail lists and demand that your data is not passed on for direct marketing (section 17ו).
• Withdraw consent to receive advertising messages under section 30א of the Communications Law (Telecommunications and Broadcasting) 5742-1982.

To exercise your rights, contact us using the details below. You may also approach the Privacy Protection Authority.

10. Minors

Purchases on this site are intended for adults (over 18). We do not knowingly collect personal data from minors without the consent of a parent or guardian.

11. Changes to this policy

We may update this policy from time to time. The binding version is the one published on the site, and the date of the latest update appears at the bottom of the page. Material changes will be communicated in a reasonable manner.

Seller details

Company name

Baby World D.P. Ltd.

Company number

516825262

Registered address

Бней Ор 32, Беэр-Шева

Office and warehouse

7 Jabotinsky St. (Moshe Aviv Tower), floor 0, Ramat Gan

Phone

058-606-2026

Email

info@tvorets.shop