Privacy Policy
This policy explains how [LEGAL_ENTITY_NAME] (“we”), the operator of elumahome.com and the data controller for the purposes of the EU General Data Protection Regulation (GDPR), collects and uses personal data. Contact: [CONTACT_EMAIL], [REGISTERED_ADDRESS], Israel.
1. What we collect
- Order data — name, email, shipping address and the contents of your order, collected when you check out.
- Payment data — processed entirely by our payment providers; we never see or store your card number.
- Functional storage — your shopping cart is kept in your own browser (localStorage). We do not use advertising or cross-site tracking cookies.
- Correspondence — emails you send us.
2. Why we process it (legal bases)
- Fulfilling your order and providing customer service — performance of a contract (GDPR Art. 6(1)(b)).
- Accounting and tax record-keeping — legal obligation (Art. 6(1)(c)).
- Fraud prevention and securing the Site — legitimate interest (Art. 6(1)(f)).
3. Who we share it with
Only what is necessary, only to make your order happen: fulfillment and shipping partners (who receive your name and shipping address — including partners located outside Israel and the EEA, such as production partners in China), payment providers, and our hosting and database providers. We do not sell personal data to anyone.
4. International transfers
Where personal data is transferred outside the EEA or Israel, we rely on the recipient country’s adequacy status or on contractual safeguards, and we share the minimum needed to deliver your order.
5. Retention
Order records are kept for as long as required by Israeli tax law (currently seven years). Correspondence is kept for up to three years. Cart data lives only in your browser and can be cleared by you at any time.
6. Your rights
Subject to applicable law (including the GDPR and Israel’s Privacy Protection Law, 5741-1981), you may request access to, correction of, or deletion of your personal data, object to or restrict processing, request portability, and lodge a complaint with a supervisory authority. Write to [CONTACT_EMAIL] and we will respond within 30 days.
7. Children
The Site is not directed at children under 16 and we do not knowingly collect their data.
8. Changes
We will post any changes to this policy on this page and update the date above. Material changes will be flagged on the Site.
This document is a working draft prepared for [LEGAL_ENTITY_NAME] and does not constitute legal advice. Have it reviewed by a qualified attorney before relying on it.