Privacy Policy
This page is a translation of the Hebrew version. We have taken care to make it accurate; if you notice a discrepancy, please let us know and we will correct it.
This website is operated by Ruth Schindler - Electrolysis & Cosmetics, Sapir 20, Harish, Business No. (Osek) 321610750 (“Ruth”, “we”). We respect your privacy. This page explains, simply, what information the site collects, why, and what we do with it.
What information we collect
The site collects personal information only when you fill out the contact form:
- Name - required.
- Phone number - required.
- Message - optional, whatever you choose to write.
- Acceptance of the Privacy Policy and Terms of Use - required. Saved with your inquiry, together with the version of the documents you accepted.
Along with the inquiry, we also store the IP address it was sent from, the time it was sent and, if internal measurement is active for you, the random visit identifier (see “Internal site measurement”).
You are not legally required to provide these details. Without a name and phone number we can't get back to you, and you can always contact us directly on WhatsApp or by email.
Please don't include medical information in the form. Whatever is needed for treatment, we'll go over together in the consultation.
If you are under 18, we recommend that the inquiry be made by a parent or guardian, or with their involvement.
Why we use the information
To get back to you about your inquiry: to answer questions and to schedule a consultation or appointment. The IP address attached to the inquiry is used to prevent misuse of the form (spam, flooding) and to record your acceptance of the Privacy Policy and Terms of Use. We will not use your details for mailing lists or advertising, and we will not send you marketing messages.
How information is transferred and stored
- After you submit the form, your details pass through a secure server function and are stored in Ruth's customer management system (CRM), which runs on the Supabase database service.
- Access to the details is limited to Ruth alone, through a secure login.
- Your details are kept for as long as they are needed to handle your inquiry and stay in touch with you, and you can ask for them to be deleted at any time.
- The site is hosted by Vercel. As with any website, the hosting servers technically process information such as your IP address and browser type in order to run and secure the site. The IP address is also used to limit repeated submissions (spam protection). It is stored only in the cases described here: with an inquiry from the form (section “Why we use the information”), and in the site's internal measurement, only with consent (cookies section).
- The service providers may process the information on servers outside Israel (details in the table in the section “Service providers and transfers abroad”).
We will not sell, rent or hand over your details to others, except to the service providers listed and for the purposes described, or if we are required to do so by law.
Cookies and tracking
Cookies are small files that your browser stores. Without your consent, the site runs only what is strictly necessary, plus cookie-free internal measurement that does not collect your name or phone number. The Meta pixel (in Israel only), Google Ads conversion measurement and Google's analytics tool (Google Analytics) run from the moment you enter the site, and you can decline them at any time using the “Decline” button in the banner or “Cookie settings” at the bottom of the page; they then stop and their cookies are deleted. Fonts and images are loaded from the site itself.
Necessary - always on
Your cookie choice is saved in your browser (localStorage, under the name rs-consent) for 12 months, so we don't ask again on every visit. After 12 months, we ask again. Accessibility preferences are saved in your browser (localStorage, ruth:a11y). One more cookie, rs_geo, stores only the country code derived from your IP address, for 6 hours, to determine whether the Meta pixel may be loaded (Israel only). It is not used for tracking.
Internal site measurement
The site itself measures how it is used, without cookies and without external tools (first-party measurement), for statistics, for improving the site and for planning advertising and marketing campaigns. The measurement relies on a random identifier that is created in your browser and kept in its local storage (localStorage), and on a visit identifier that is deleted when you close the tab.
- What is collected: the pages and sections viewed, active time on the page and scroll depth, clicks on buttons (for example WhatsApp, phone, menu and questions), starting to fill out the form and errors in it (without the content), the general source - the name of the site you came from, without the full address - campaign parameters (utm) and the type of ad click identifier, without its value, the visit number, device type, screen and window size, browser language and time zone, browser type and operating system, approximate city-level location derived from the IP address (the address itself is not stored for this purpose), and page load speed metrics.
- What is not collected: name, phone, content typed into the form, the full address of the previous page, and cookies. The IP address is stored in this measurement only if you approved statistics in the cookie notice, for 36 months, for statistics and for planning advertising and marketing campaigns.
- Link to your inquiry: if you submitted the form, the inquiry is linked to your visit data (through the random identifier), so Ruth knows which source you came from and what interested you.
- Where and for how long: the data is stored in Ruth's customer management system (CRM) on Supabase and is deleted after 36 months.
- How to opt out: if your browser sends a Do Not Track or Global Privacy Control signal, nothing is measured or sent. You can also clear the site's data in your browser settings to reset the identifier.
Statistics - Google Analytics (you can decline)
- Purpose: to understand, in aggregate, how the site is used: which pages people arrive from, what is read, on what type of device, and which actions were taken (submitting the form, clicking WhatsApp or phone). The form content, name and phone number are not sent to Google.
- Cookies: _ga (a random browser identifier) and _ga_* (visit state). Stored in your browser for up to 13 months.
- Storage at Google: visit data is kept in the site's Google Analytics account for up to 14 months. Google receives the IP address for technical transmission and, according to Google, it is not stored in Google Analytics 4. Cross-device linking (Google Signals) is turned off.
Marketing - Meta pixel (active, you can decline)
- Purpose: to measure whether a visit or inquiry came from one of our ads on Facebook or Instagram, and to show the ads to a relevant audience. Only events are sent: page view, scrolling deep into the page, clicking WhatsApp or phone, and submitting the form, without name, phone or message content, and without “Advanced Matching”.
- Also sent from the site's server: as long as you have not declined, the same events are also sent to Meta directly from the site's server (Conversions API), so that measurement is accurate and nothing is counted twice. Along with the events, the IP address, browser type and the identifiers _fbp and _fbc are sent, without name, phone or message content. If you have declined (“Decline” in the banner, or turning off marketing in the settings), nothing about you is sent to Meta, neither from the browser nor from the server.
- Cookies: _fbp (browser identifier) and _fbc (ad click identifier, only when you arrived from an ad). Stored in your browser for up to 90 days.
- Meta may link the information to your Facebook or Instagram account, in accordance with its own privacy policy.
Marketing - Google Ads conversion measurement (active, you can decline)
- Purpose: to measure whether an inquiry came from one of our ads in Google Search. Only two events are sent to Google: a successful form submission and a WhatsApp click, without name, phone or message content, and without “Enhanced Conversions”.
- Cookies: _gcl_au (a random browser identifier) and _gcl_aw (ad click identifier, only when you arrived from an ad). Stored in your browser for up to 90 days.
- If you have declined (“Decline” in the banner, or turning off marketing in the settings), measurement stops, the cookies are deleted and no conversions are sent to Google. Google may link the information to your Google account, in accordance with its own privacy policy.
Transfer of information abroad
Information collected by Google and Meta tools is transferred to these companies and processed on their servers outside Israel, including in the United States and the European Union, in accordance with their terms of service and privacy policies. Information for Google Analytics, Meta and Google Ads conversion measurement is transferred unless you have declined.
How to change your choice
On your first visit, a notice appears at the bottom of the screen: you can choose “Accept”, “Decline”, or choose by type under “Manage”. At any time, you can change or withdraw your consent through the “Cookie settings” link at the bottom of every page (or ). Withdrawing consent stops the use of the tool and deletes its cookies from the site. You can also delete cookies in your browser settings. A browser that sends a Global Privacy Control signal is treated as not having consented, until you choose otherwise.
Clicking the WhatsApp button takes you to the WhatsApp service (Meta), which is governed by its own privacy policy.
Service providers and transfers abroad
Transfer to each provider is based on that provider's contractual commitment to protect and secure the information.
| Vendor | Data shared | Country | Purpose |
|---|---|---|---|
| Vercel | IP address and browser type; inquiry details passing through the server function | United States | Site hosting and server functions |
| Supabase | Inquiry details and internal measurement data | Data centers abroad (United States or Europe, depending on the project region) | Customer management system (CRM) and measurement data |
| Google (Analytics) | Aggregate visit data and the IP address (for technical transmission), unless you have declined | United States and European Union, among others | Statistics |
| Google (Ads) | Form submission and WhatsApp click events, with IP address, browser type and the identifiers _gcl_au and _gcl_aw; without name or phone. Nothing is sent if you declined | United States and European Union, among others | Conversion measurement for Google ads |
| Meta (pixel) | Page view, scroll, click and form submission events, with IP address, browser type and the identifiers _fbp and _fbc; without name or phone; from the browser and also from the site's server. Nothing is sent if you declined | United States and European Union, among others | Measuring ads and showing them to a relevant audience |
Information security
The site runs over an encrypted connection (HTTPS). The form does not access the database directly: your details pass through the site's server, and access to inquiries is limited to Ruth. That said, no method of transmission or storage is completely secure.
Your rights
Under the Privacy Protection Law, 5741-1981 (חוק הגנת הפרטיות, התשמ"א-1981), you may ask to review the information stored about you, ask to correct it if it is inaccurate, and ask for it to be deleted. We will respond to a request to review information within 30 days. For any question or request on this subject:
- WhatsApp or phone: 053-3107218
- Email: r7661996@gmail.com
Changes to this policy
If we change the way we collect or use information, we will update this page and the update date at the top.