Draft for legal review before launch. This document reflects how the site works, but it is not legal advice and does not guarantee compliance with every requirement.
Your privacy matters to us. This policy explains what data we collect on arcraft.io, why, who we share it with and how to contact us about it.
Who we are
The site is operated by [business / company name], [business ID], [address] ("Arcraft"). Privacy enquiries: [email protected].
What we collect
- Orders: name, email, phone, delivery address, access details for scheduling delivery (floor, elevator, notes), product, colour and price, and any notes you write.
- Payment: we do not receive or store card details. Payment takes place on the payment provider's page; we receive only the payment result and a transaction reference.
- User account (if created): name, email, phone, saved addresses, preferred language and marketing preference. Passwords are stored only as a secure hash.
- Enquiries: the details and message you send via the contact or trade forms.
- Technical data: IP address and basic request details in server logs for security and abuse prevention, and essential cookies (see our cookie policy).
Why we use it
- To process your order, payment, production, delivery and installation, and to send operational emails (order confirmation, status updates).
- To provide warranty, support and service.
- To answer enquiries.
- To manage user accounts, secure the site and prevent fraud.
- To meet legal obligations, including accounting and tax requirements.
- Marketing emails — only if you explicitly opt in. You can unsubscribe at any time.
Who we share it with
- Hosting provider: the site's servers and database (SmarterASP.NET / site4now).
- Email provider: to send operational emails (site4now mail server).
- Payment provider: to process payment. [provider name to be added once selected]
- Cloudflare: network and security services the site runs through.
- Delivery companies / technicians acting on our behalf, where needed for delivery or service — only the details required.
- Authorities — where required by law.
We don't sell personal data, and there are no third-party advertising or tracking tools on the site.
Storage and security
Data is kept in a secured database with access limited to authorised personnel, and communication with the site is encrypted (HTTPS). Passwords are stored as hashes only, and order view links are personal and secret.
How long we keep it
- Order and payment records — as required by law (generally up to 7 years for accounting records).
- Enquiries — up to two years after they are resolved, unless otherwise required.
- User accounts — until you ask us to delete them (subject to retention duties for orders).
- Security logs — for a short period, for security purposes only.
Your rights
Under the Israeli Protection of Privacy Law, 5741-1981, you may access the information we hold about you and ask us to correct or delete information that is inaccurate or no longer needed. Contact: [email protected].
Last updated: 17 October 2026