← Back to the site

Privacy Policy

Last updated: 6 August 2026 · GILI7, עוסק מורשה 000000000

Here at GILI7 we respect your privacy. This document explains which details we collect through the site, what they are used for, where they are stored, for how long, and which rights you have regarding them. The policy is written in accordance with the Israeli Privacy Protection Law, 5741-1981, and its regulations, as well as section 30a of the Communications Law (Bezeq and Broadcasting), 5742-1982, with regard to advertising mailings.

Who is responsible for the information

The site owner and the person responsible for the information is GILI7, עוסק מורשה 000000000, at רחוב הרצל 1, תל אביב-יפו. For any privacy inquiry you can contact us by phone at 054-4649767 or by email at hello@gili7.co.il.

What information is collected

The site collects only details you choose to provide voluntarily in the site's forms. We do not require registration, do not ask for an ID number, and do not collect credit card details on the site.

In the club sign-up form

• Full name — so we can address you by name.
• Phone number — to get back to you and send updates, if you have agreed to this.
• Consent to marketing mailings — a yes/no value, based on the consent checkbox.
• Timestamp — the time the details were provided and the source of the inquiry on the site.

In the personal-matching form

• Full name and phone number, as detailed above.
• A free description of your skin, if you chose to fill it in, to give you a tailored recommendation.

When placing an order

• Full name, phone number, a list of the chosen products and the total amount.
• Order completion and payment are done in a WhatsApp conversation with the business. Payment details are not provided on the site and are not stored on it.

Consent to marketing mailings

How the information is stored

The details are stored in a Cloudflare D1 database, a managed database service by Cloudflare, hosted on servers in the European region. Access to the database is limited to the business owner only and requires authentication. Traffic between your browser and the site is encrypted with TLS, and the site serves a Content Security Policy and additional security headers that reduce attack risks.

Who the information is shared with

We do not sell, rent or trade your information. The information is not transferred to third parties for marketing purposes. The only parties exposed to the information are:

• Cloudflare — as the storage and hosting infrastructure provider of the site.
• WhatsApp (Meta) — when you choose to complete an order or contact us on WhatsApp, in accordance with the terms of that platform.
• Authorised authorities — if we are required to by law or by a court order.

Cookies and analytics

The site does not use tracking cookies, does not embed advertising pixels and does not run third-party behavioural analytics. We use browser local storage (localStorage) for one purpose only: saving your shopping cart content on your device so it is not lost between visits. This information stays on your device, is not sent to the server, and can be deleted at any time through your browser settings.

Data retention

• Club members' details — stored as long as the mailing consent is valid, and at most 24 months from your last inquiry to us. After consent withdrawal, details are deleted within 30 days, except for a minimal record of the request itself, required to make sure we do not contact you again.
• Order details — stored for 7 years, as required by bookkeeping and tax laws.
• Inquiries via the personal-matching form — deleted within 12 months if they did not become an order.

Your rights

Under the Privacy Protection Law you have the following rights, free of charge:

• Access — to receive a copy of the information we hold about you.
• Correction — to ask to correct information that is incorrect, incomplete or outdated.
• Deletion — to ask to delete the information, subject to information we must keep by law.
• Withdrawal of mailing consent — at any time, as detailed above.

To exercise any of these rights, contact us by phone at 054-4649767 or by email at hello@gili7.co.il, stating the name and phone number you provided. We will respond within 30 days.

Minors

The site is intended for adults aged 18 and over. We do not knowingly collect information about anyone under 18. If you learn that a minor has provided details on the site, contact us and the information will be deleted.

Changes to this policy

An updated version of this policy will always be published on this page, alongside the date of the last update. A material change relating to the use of details for mailing purposes will not apply retroactively to those who have already signed up, and new consent will be required.