Privacy Policy

This page is the notice required by section 11 of the Protection of Privacy Law, 5741-1981, which must be given to a person asked to provide personal information: whether there is a legal duty to provide it, the purpose for which it is sought, the name of the controller of the database and how to contact them, to whom the information will be passed and for what purposes, and the existence of the right of access under section 13 and the right to request correction under section 14. This is general information, not legal advice. The operative text is the Hebrew version; this English page is a translation for convenience.

Who is responsible for the information

Controller of the database: Yaron Meiri, Advocate and Certified Public Accountant, in independent practice.

• Address: HaSderah HaAkademit 2, Kiryat Ono, Israel.
• Telephone: +972-50-431-3155
• Email: meiri.yaron@gmail.com

The firm runs the site itself. The site holds no client database, no user accounts and no database of any kind — it is a static site. Enquiries arrive in the firm's mailbox.

What is collected

1. What you write in the enquiry form

The enquiry form appears on the service pages and on other pages of the site. These are its fields:

• Full name — required.
• Telephone — required.
• A brief description of the matter — optional. This is the sensitive field: whatever you write in it is a description of a legal matter.

Some forms have further optional fields: email, subject area (from a closed list), how you found me (optional, from a closed list) or the name of the business (for example on the subscription-cancellation page). Every enquiry form on the site also carries source fields — utm parameters and the Google Ads and Microsoft Ads click IDs (gclid, gbraid, wbraid, msclkid) if the link you came through had them, the first page you opened on the site and the name of the site you came from (the domain only, not the full address). They are kept in your browser’s sessionStorage for the current tab only, until the tab is closed, and they do not identify you on their own; if you send a form, they are sent with the details you filled in and become part of the personal information in the enquiry (an “online identifier” is listed in the definition of “personal information” in section 3 of the Law).

There is no legal duty to provide any of this (section 11(1) of the Law). Providing it depends on your will and consent. The consequence of not providing it is simple: there would be no way to get back to you. You can instead call, write on WhatsApp or email directly — see ways that do not go through formsubmit.co below.

Please do not put documents, identity numbers, bank details or sensitive particulars in the form beyond a short description of the matter. A short description is enough to establish whether there is a legal question here; the details belong in a conversation.

2. Usage data

• Google Analytics 4 (measurement ID G-50WH543TTK) — browsing data: which pages were viewed, which page you arrived from, device and browser type, and an approximate location derived from the IP address. Operational events are also measured: clicking a phone number, a WhatsApp link or an email address, and submitting a form — the fact of submission only, never the form's contents; and also the start of filling in a form and a required field not filled in correctly — the field name only, never what was typed. On the site's tools (calculators, self-checks and copy templates), use of the tool and clicks on its follow-up buttons are also measured — without the data entered or the result.
• Server logs at the hosting provider (Netlify) — the technical record of requests kept by any web server.

The site itself writes no cookies. The accessibility widget stores your preferences (a11y_state) in your browser's localStorage only — they are sent nowhere. The site also keeps a technical flag there (mLF) recording that the font file is already stored in your browser; it holds no personal information. mc_int — a technical flag created only when the site is opened through an internal link the firm uses, so that the firm's own visits are not counted in the measurement; ordinary browsing does not create it. Google sets identifiers of its own; see Cookies and identifiers.

What the information is used for

The purpose of the database — and under section 8(b) of the Law personal information may not be processed for any other — is to review your enquiry, to get back to you about it, and to know which channel it came through. The details you write in the form are used to review the enquiry and to get back to you; the source fields sent with them (see 1 above) are used to know which channel the enquiry came through — for example a search, an ad or a link on another site. The database has no other purpose.

• It is not sold, rented or passed to anyone for their marketing or anyone else's.
• It is not used for mailing lists or advertising messages. The firm sends no advertising messages.
• It is not profiled, scored or subjected to any automated decision.
• The usage data described above is used for aggregate measurement of the site — not to identify you personally.

If an attorney-client relationship follows — and it arises only under a written engagement — the information becomes part of the client file. Section 90 of the Israel Bar Association Law, 5721-1961, provides that an advocate shall not disclose, in any legal proceeding, investigation or search, matters and documents exchanged between the advocate and a client that are materially connected with the professional service, unless the client has waived the privilege; and rule 19 of the Bar Association (Professional Ethics) Rules, 5746-1986, requires the advocate to keep secret anything brought to the advocate’s knowledge by or on behalf of a client in the course of the advocate’s duties. Those protections are in addition to the protection described on this page. A first enquiry, made before an attorney-client relationship exists, is not expressly mentioned in these provisions — which is why we ask you not to write confidential details in the form.

Who the information is actually passed to

formsubmit.co — the form-relay service

This is the part you should know before you send anything: the enquiry form is not sent to this site's server. It is POSTed directly to https://formsubmit.co/ — a third-party form-relay service, which forwards the contents of the form to the firm's mailbox. That means the name, telephone number, email address, subject area, description of the matter, the answer to how you found me and the source fields pass through a server the firm does not control.

These are the verifiable facts about that service:

• It is operated by Devro LABS, as stated on formsubmit.co itself.
• The operator publishes no registered address in its privacy policy and states no governing law. Independent company registries place it in Colombo, Sri Lanka.
• The service is delivered over the network of Cloudflare, Inc. — a United States company — and its mail is routed through Cloudflare as well.
• According to formsubmit.co's own help page, submissions are retained for 30 days.
• The service publishes no data-processing agreement and no written undertaking towards database owners.

What that means legally, without rounding the corners: this is a transfer of personal information from a database in Israel to outside its borders. Regulation 1 of the Protection of Privacy (Transfer of Information to Databases Abroad) Regulations, 5761-2001, prohibits such a transfer unless the law of the destination country ensures a level of protection no lower than Israeli law. Regulation 2(1) permits it where the person the information concerns has consented to the transfer. The permission the firm relies on is your consent — which is why this disclosure appears here, and next to every form on the site, before you send and not after. Regulation 3 requires the database owner to ensure, by a written undertaking from the recipient, that the recipient takes adequate measures to protect the privacy of the people the information concerns and will not pass the information on to anyone else. The firm is working to complete such an undertaking or to replace the service; until then you can use the ways described below, which do not go through formsubmit.co.

Ways that do not go through formsubmit.co

If you would rather your details did not pass through formsubmit.co, do not use the form. Three alternatives:

• Email to meiri.yaron@gmail.com
• Telephone +972-50-431-3155
• WhatsApp to the same number

None of these goes through formsubmit.co.

Other recipients

• Google — operator of Google Analytics 4. Usage data is processed on its servers outside Israel. Google uses the IP address to derive an approximate location; its practices are set out in the Google Privacy Policy.
• The hosting provider (Netlify) — hosts the site's files and keeps server logs.
• Google (Gmail) — provider of the firm's mailbox. Enquiries sent by form or by email are stored there, on servers outside Israel.
• WhatsApp (Meta) — a WhatsApp message passes through WhatsApp's service, which is operated outside Israel.

Beyond these, the information goes to no one. If disclosure is compelled by a court order or a duty in law, it will be made only to the extent required, and subject to attorney-client privilege so far as it applies.

Cookies and identifiers

The site itself sets no cookies. In addition to the tools below, it keeps three items in the tab’s sessionStorage, deleted when the tab closes: mc_attr (the source fields, including the click IDs if the link had them), mc_lead_pending (a temporary marker that a form was sent, so each enquiry is measured once) and mc_lead_draft (a draft of the form, kept in this tab only so that it can be restored if sending fails; it is restored only within 30 minutes, and is deleted after a successful send, once restored, or when the tab closes). Third-party cookies and identifiers:

• Google Analytics 4 sets measurement cookies (_ga and its family) in your browser. The site runs it with advertising storage switched off (ad_storage, ad_user_data and ad_personalization set to denied) and with Google Signals and ad personalisation turned off.
• formsubmit.co sets session cookies on its own domain only, once the browser reaches it on submitting the form.

You can block or delete cookies in your browser settings, use Google's official Analytics opt-out add-on, or an ad blocker. Blocking them does not affect your use of the site. The site displays no cookie-consent banner: Israeli law currently contains no express provision requiring one, and the duty to inform is met by this page and by the disclosure next to every form.

How long the information is kept

• The enquiry itself — kept in the firm's mailbox for as long as it is needed to deal with and answer the enquiry. If no matter is opened, you may ask for it to be deleted at any time and receive written confirmation.
• If a matter is opened — the information becomes part of the client file and is kept in accordance with the professional file-retention duties applying to an advocate.
• formsubmit.co — 30 days, on the service's own statement.
• Google Analytics data — for the retention period set in the measurement account.

Your rights — and how to exercise them

These are the rights the Law gives you, with the timetables set by the regulations:

Right of access — section 13

Every person is entitled to inspect the personal information about them held in a database, personally, through a representative authorised in writing, or through a guardian. The request is made in writing and signed (regulation 1 of the Protection of Privacy (Conditions for Inspection of Information and Procedure for Appeal against a Refusal) Regulations, 5741-1981). Under regulation 2(a) inspection must be allowed within 30 days of the request. A refusal must be notified within 21 days (regulation 5(a)), and a failure to answer in time counts as a refusal (regulation 5(b)). Regulation 6 permits a fee of ILS 20 for inspection — the firm does not charge it.

Right to correction or deletion — section 14

A person who has inspected the information about them and found it to be incorrect, incomplete, unclear or out of date may ask for it to be corrected or deleted (section 14(a)). If the request is granted, you will be notified of the correction or deletion, as will everyone who received the information from the firm in the three years preceding it (regulation 7(a)). A refusal must be notified within 30 days (regulation 7(b)), and a failure to answer in time counts as a refusal (regulation 7(c)).

Information held by another on the firm's behalf — section 13A

Information held by another on the firm's behalf — for example by formsubmit.co during its 30-day window — is dealt with under section 13A: you will be referred to the holder, with its address, and the holder will be instructed in writing to allow the inspection.

Appeal — section 15 and regulation 8

A refusal to allow inspection, or to correct or delete, may be appealed to the Magistrates' Court in whose district the database is located, within 30 days of the notice of refusal.

How to make a request

By email to meiri.yaron@gmail.com, by telephone on +972-50-431-3155, or by post to: Yaron Meiri, HaSderah HaAkademit 2, Kiryat Ono, Israel. Please state the name and telephone number you gave, so that the enquiry can be located, and head the message "access request", "correction request" or "deletion request" so that it is not lost among other correspondence.

Information security

Section 17 of the Law places responsibility for the security of the information on the controller of the database and on the holder, each of them. The Protection of Privacy (Information Security) Regulations, 5777-2017, apply as well. These are the measures in practice:

• The whole site is served over HTTPS only, with Strict-Transport-Security, which prevents an unencrypted connection.
• The site's Content Security Policy restricts form submission to two destinations only — the site itself and formsubmit.co. A form on this site cannot send information anywhere else.
• The site is static: no database, no user accounts, no store of enquiries. Enquiries arrive in a mailbox to which access is protected.
• There is no tracking on the site beyond the two tools described here. No map or other content from outside sites is embedded in the site. The links to Google Maps and Waze open that service in a new tab, where the operator's own privacy policy applies.

Registration of the database

Since Amendment 13, section 8A(a)(1) of the Law leaves a duty to register a database in the register in two cases only: a database whose principal purpose is collecting personal information in order to pass it to another by way of business or for consideration — including direct-mail services — and which holds information on more than 10,000 people; and a database whose controller is a public body. Neither case applies to this firm, so the enquiries database is not subject to registration. The Law's other duties — notice, access, correction and security — apply regardless.

Section 17B1 of the Law, added by Amendment 13, requires a privacy protection officer to be appointed by these bodies: a public body; the controller of a database whose principal purpose is passing personal information to others by way of business or for consideration and which holds information on more than 10,000 people; and a controller or holder whose principal activity involves regular and systematic monitoring of people, or includes processing information of special sensitivity, on a significant scale. Privacy enquiries are handled by Yaron Meiri, Adv. & CPA, himself, at the details under Privacy contact below.

Advertising messages

The firm sends no advertising messages. Section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982, conditions the sending of an advertising message on the recipient's prior consent; since there is no mailing, there is nothing to consent to. You will be contacted only about the enquiry you initiated.

Minors

The site is not directed at minors and does not knowingly collect information from anyone under 18. If such information has been provided, contact us and it will be deleted.

Changes to this policy

If anything material changes — another measurement tool, a different form service, a change in the purpose of the database — this page will be updated and the date at the top will change. A policy that contradicts what actually happens is worse than no policy, so this page was written from what the site does, and checked against the site's code.

Privacy contact

You may also apply to the Israeli Privacy Protection Authority at the Ministry of Justice.

The sources this page rests on

• Protection of Privacy Law, 5741-1981 — sections 3, 8, 8A, 11, 13, 13A, 14, 15, 17 and 17B1, as they stand after Amendment 13.
• Protection of Privacy Law (Amendment No. 13), 5784-2024 — Sefer HaChukkim 3287, 14 August 2024; it comes into force one year after publication, that is 14 August 2025.
• Protection of Privacy (Conditions for Inspection of Information and Procedure for Appeal against a Refusal) Regulations, 5741-1981 — regulations 1, 2, 5, 6, 7 and 8.
• Protection of Privacy (Transfer of Information to Databases Abroad) Regulations, 5761-2001 — regulations 1, 2 and 3.
• Protection of Privacy (Information Security) Regulations, 5777-2017.
• Communications (Telecommunications and Broadcasting) Law, 5742-1982 — section 30A.
• Israel Bar Association Law, 5721-1961 — section 90; Bar Association (Professional Ethics) Rules, 5746-1986 — rule 19.
• The facts about formsubmit.co — from the service's own help and privacy pages, and from public company registries as to the operator's place of business.

This is general information and not legal advice. The Hebrew version at meiri.co/privacy-policy is the operative text.