Privacy notice

The law that applies

Personal data is handled under the Protection of Privacy Law, 5741-1981, including Amendment No. 13. The Knesset passed that amendment in 2024. It came into force on 14 August 2025. The Privacy Protection Authority supervises it. The Protection of Privacy Regulations (Data Security), 5777-2017, set the security duties that sit on top of the Law.

What this website does

The site is static. The bay form does not post your details to a server. It stays in the browser and, if you choose, opens WhatsApp or gives you text to email. Essential storage on your device remembers your cookie choice. If you turn preferences on, the browser also remembers the last service name you selected. See the cookie notice.

What we hold if you contact us

When you send a WhatsApp message, an email, or a later invoice, we hold your name, phone number, email address, the car described in your own words, the colour, the service, the day you asked for, and whatever you wrote in the note. At intake we add photographs of the car and thickness readings. We do not ask for an identity number to book a bay. Payment details, if a deposit is later agreed, are whatever the bank transfer or payment app shows on the confirmation you send us.

Why, and for how long

We use that file to answer you, to decide whether the paint can take the work, to do the work, and to invoice it. Booking correspondence is kept for up to 24 months from the last message. Invoices and the records the tax law requires are kept for seven years. We do not sell personal data, and we do not pass it to a marketing list.

Databases, on our reading of Amendment 13

Registration with the Privacy Protection Authority is required for a database whose controller is a public body, with a narrow exception for employee-only files, and for a database whose main purpose is collecting personal data in order to give it to others as a business or for payment, including direct marketing, where the file covers more than 10,000 people. A separate notice duty applies where a database holds data of special sensitivity on more than 100,000 people.

This studio’s file is used to book, perform, and invoice work for people who asked for that work. We are a private company, not a public body. The file is not kept in order to sell personal data. On that reading, Amendment 13 does not require us to register it. We do not hold data of special sensitivity on 100,000 people, so the notice duty does not arise. That is the studio’s reading of the Law. It is not a ruling of the Authority. If the file ever met either test, we would register or notify.

WhatsApp

WhatsApp is operated by Meta. If you choose to send the bay note there, Meta processes the transmission under its own terms as well as our receiving it. You can email studio@shinecar.pro instead. We do not require WhatsApp.

Your requests

You may ask what personal data we hold about you, ask for a correction, and ask for deletion where the Law allows it. Invoices that tax law tells us to keep are not deleted on request. Write to privacy@shinecar.pro, or by post to 4 HaSadnaot Street, Herzliya Industrial Zone, Herzliya 4672831. We do not knowingly book work for a child. The person who brings the car is the person we correspond with.

Security

Access to the customer file is limited to the people who schedule and invoice the work. Messages sit in the studio’s mail and WhatsApp accounts, not on this website. A breach that the Law requires us to address will be handled under the Law and the Data Security Regulations.