Privacy Policy

Last updated: June 2026 • Compliant with Amendment 13 to Israel’s Privacy Protection Law (5785-2025)

1. Data Controller

White Label Real Estate Ltd.
Dekel 3, Nir Tzvi, Israel 7290500
Email: hello@w-label.co.il
Data Protection Officer (DPO): hello@w-label.co.il

2. Types of Data We Collect

• Identifying information: Name, email address, phone number — provided via contact forms.
• Usage data: IP address, browser type, pages viewed, visit timestamps.
• Cookie & tracking identifiers: Google Analytics (GA4), Google Ads, Meta Pixel — only after explicit consent.
• Communication data: WhatsApp messages, direct messages on social media.

3. Purposes & Legal Basis

Purpose	Legal Basis
Responding to inquiries & providing service	Consent (A13, Section 1)
Website analytics (GA4)	Explicit consent (opt-in)
Advertising & marketing (Google Ads, Meta)	Explicit consent (opt-in)
Security & fraud prevention	Legitimate interest

4. Third-Party Service Providers (Data Recipients)

Provider	Purpose	Location
Google LLC	Analytics, Ads, Tag Manager	USA
Meta Platforms	Facebook Pixel	USA
Cloudinary	Image storage & processing	USA
Supabase	Database	USA / EU
Replit	Website hosting	USA

International data transfers are conducted in accordance with GDPR Article 46 (Standard Contractual Clauses) and Amendment 13 provisions.

4a. How We Share Data With Advertising Partners (Meta / Facebook Tools)

We use Meta’s business tools — the Meta Pixel (in your browser) and the Conversions API ("CAPI", which runs on our server) — to measure how our advertising performs and to show relevant ads to people likely to be interested in our services.

What we share with Meta (when you have given consent):

• a securely hashed (SHA-256, one-way) version of your email and/or phone number — never in plain text;
• Meta browser identifiers (the _fbp and _fbc cookies/parameters);
• your IP address and browser type (user-agent);
• the action you took on our site (for example, viewing a page or submitting a lead form), with a shared event identifier so the same action is not counted twice.

Why we share it. Two purposes: (1) measurement — understanding which ads lead to genuine interest, so we don’t waste budget; and (2) audience building — creating retargeting and similar ("lookalike") audiences so our ads reach relevant people.

Your data is hashed. Personal identifiers (email, phone) are transformed with a one-way SHA-256 hash on our side before any transfer. Meta uses the hash only to match you to an existing Meta account for measurement; the original values are not transmitted.

Meta’s role. For this processing Meta acts as our data processor under Meta’s Business Tools Terms and Meta’s Controller Addendum, contractually bound to process this data on our instructions for the purposes above.

Legal basis and your choices:

• Israel (governing law): We rely on your explicit, documented consent under the Protection of Privacy Law as amended by Amendment 13 (in force 14 August 2025), under which online identifiers such as cookies, the _fbp/_fbc identifiers and IP address are personal information. Nothing with personal data is sent to Meta until you opt in, and you may withdraw consent at any time via the consent banner. Marketing messages additionally require your written opt-in under Section 30A of the Communications Law (Amendment 40).
• EU / EEA: For EU-based contacts, we rely on your consent (GDPR Article 6(1)(a); ePrivacy Directive 2002/58/EC Article 5(3)). Nothing with personal data is sent to Meta until you opt in; you may withdraw consent at any time. (Disclosure under GDPR Articles 13–14.)

Retention. Advertising identifiers and event data shared via the Pixel and CAPI are retained for up to 90 days on our side; Meta retains and processes the data it receives under Meta’s own data retention policy. Hashed identifiers are not stored by us in reversible form.

How to control this. Manage or withdraw all advertising consent at any time via the consent banner at the bottom of the site. You may also adjust ad preferences directly in your Meta/Facebook account settings.

5. Data Retention Periods

• Leads & inquiries: 18 months
• Analytics data: 13 months
• WhatsApp / DM messages: 12 months
• Advertising data: 90 days

6. Your Rights Under Amendment 13

Under Amendment 13 to Israel’s Privacy Protection Law (5785-2025), you have the following rights:

• Right of access: View the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data.
• Right to restriction: Restrict the processing of your data.
• Right to object: Object to processing for marketing purposes.
• Right to portability: Receive your data in a structured format.
• Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

Response time: We will respond to every request within 30 days of receipt.

To exercise your rights, contact us at: hello@w-label.co.il

7. Data Breach Notification

In the event of a data security breach, we will notify the Privacy Protection Authority within 72 hours of becoming aware of the breach, in accordance with Amendment 13 guidelines.

8. Cookie Policy

This website uses essential cookies (necessary for functionality) and analytics/advertising cookies (only after explicit consent). You can change your consent at any time via the consent banner at the bottom of the site.

For details on how advertising identifiers are also shared server-side with Meta via the Conversions API, see section 4a — "How We Share Data With Advertising Partners (Meta / Facebook Tools)" above.

9. Minors

This website is not intended for individuals under the age of 16. We do not knowingly collect personal data from minors.

10. Filing a Complaint

If you believe your rights have been violated, you may contact the Registrar of Databases at the Privacy Protection Authority:
Email: privacy@justice.gov.il
Phone: 02-6708700