0

Privacy policy

Harey Zahav Management Ltd. (hereinafter: "Harey Zahav", "we", "us", etc.) respects the privacy of its customers, purchasers, prospective clients, and others whose information is collected in the course of an engagement, an interest in our services, participation in conferences and events, or use of the website (hereinafter: "you" or "data subjects"). We will protect your privacy and manage your information responsibly, in accordance with the provisions of the law.

It is important to us that you understand how we handle information about you ("Personal Information"). In this Privacy Policy you will find a description of the types of Personal Information we collect, the manner of collection, and the uses we make of the information. You are not obligated to provide us with information, but some information is required in connection with the services or your relationship with us. If you choose not to share certain information with us, you may not be able to enjoy some of the requested services. When you provide us with details about yourself, share information with us, or use the services and website of Harey Zahav, you express your consent to this Privacy Policy.

1. What information do we collect and how?

For the purpose of providing and promoting the services, marketing, operating the website, improving it, and fulfilling Harey Zahav's objectives, we collect and process Personal Information from several sources, including:

A. Information received directly from you: information provided in the course of a purchase, an inquiry, participation in an activity, events and conferences, registration on the website or elsewhere, contacting us, or when you leave your details through any marketing channel, digital media, or otherwise. This information may include details such as first and last name, address, phone number, email, approvals, account details, or other details relating to a loan, payment, or purchase, details relating to the services you receive, and any other information you choose to provide to us about yourself and about others. In addition, when you visit our sites, information about you may be captured and stored by our security cameras for security and safety purposes.

B. Information collected automatically when using the website and additional digital channels: such as IP address, identification number, browser type, operating system, interface language, and time or duration of visit, usage data on the website or system (pages viewed, links clicked, activity logs), and information collected through cookies and similar technologies for the purposes of operating the website, security, marketing, and statistics.

C. Information received from our business partners: contact details or additional details provided to us by our contractors and business partners, for the purposes described in this policy.

2. For what purposes is the information used?

We collect and process Personal Information for various purposes, including:

• Providing services, support, promoting and improving the services, responding to inquiries and requests, and for control and audit purposes.

• Contacting applicants, prospective clients, and others.

• Advertising and marketing, subject to consent (to the extent required).

• Operating, improving, and promoting the services and the website, including analyzing data and the manner of use of the website and digital channels.

• Employing staff and suppliers, performance evaluations, and payment.

• Legal protection, compliance with obligations, and reporting to competent authorities as required by law.

3. Third parties and information sharing

Information is processed with the help of, or through, third parties, as follows:

• Group companies: for the purposes of operations, providing services, improving the service, and marketing, we share information with group companies in accordance with the law.

• Information systems and cloud services: customer relationship management, task management, data analysis, document management, technical support, storage services, marketing, and the like.

• Service providers and external consultants: service providers, contractors, professional advisors (including legal, business, and technological), conference and event organizers, and system operators on behalf of Harey Zahav, who assist us in fulfilling our contractual undertakings, improving our service, maintaining systems, and handling inquiries and analyzing information.

• Internet data research companies, social media, and external advertisers. It is emphasized that the website or the services may link to external sites or advertisers that are not under our control. Any use by such third parties on the website is carried out in accordance with the privacy policy of those third parties, is not our responsibility, and is not subject to this policy.

• Courts, judicial instances, and bodies with authority: for the purpose of conducting legal proceedings, exercising rights, or complying with binding decisions of competent instances.

4. Where is the Personal Information stored?

The Personal Information is stored on systems and servers under our control or ownership, or processed on our behalf by reputable cloud and storage service providers. We may transfer Personal Information outside the borders of Israel for the purposes of storage, processing, and backup of information. In such cases, we will maintain your privacy and take care to protect the Personal Information in accordance with the applicable law.

5. Rights of data subjects: access and correction

In accordance with the law, you have the right to access or correct Personal Information about you, or to request removal from mailing lists. To exercise these rights, you may contact us at the email address: privacy@hzahav.co.il. In your request, please provide the required details, including identifying information, the grounds for the request, and the context in which the information was collected. It is clarified that these rights cannot be exercised in a manner that conflicts with the rights of Harey Zahav or of third parties. In the case of a marketing mailing list, removal can be carried out independently within the body of the message.

6. Data retention

We will retain your Personal Information for as long as it is required, to our understanding, in order for us to provide the services and as necessary to comply with our legal and other obligations, to assist in the resolution of disputes, and for enforcement. Please note that non-personal information or anonymous information may be retained without limitation. In addition, certain data may be retained on our providers' servers, such as in backups, in accordance with the privacy and retention policy of those third parties.

7. Collection of Personal Information and cookies (Cookies) on the website and digital systems

When using the website and other digital systems of Harey Zahav, Personal Information and technical-digital information is collected, among other things through cookies (Cookies) and other tracking technologies, for the purpose of operating the systems, improving the user experience, adapting the services to your needs, and collecting statistical data.

What are cookies (Cookies)? Cookies are small text files sent to your browser when you visit the website or an online system and stored on your device. Some of the cookies are required for the proper and secure functioning of the systems, and some are used to analyze usage patterns, adapt content, and improve the service.

The types of cookies the website may use include: A. Essential cookies: required for operating the system and for basic usage options (such as logging in to a secure account). B. Functional cookies: used to save the user's settings and preferences (such as language, time zone). C. Analytics and performance cookies (for example Google Analytics): to collect statistical information about the use of the digital systems, for the purpose of analyzing and improving the service and the content. D. Marketing or third-party cookies (for example Facebook (Meta)): where they exist, used to adapt advertisements and content according to your preferences, and will be activated only with your consent, to the extent required.

The information collected includes, among other things: IP address, browser type, operating system, location area, information about the device, duration of stay, and pages viewed or opened. You may change the settings of your browser or device in order to delete or block some or all of the cookies. However, blocking essential cookies may cause some of the services on the digital systems not to function properly.

8. Information security

We implement appropriate organizational and technological measures in accordance with the law and accepted professional standards, in order to protect the information and prevent unauthorized access to the Personal Information. In this context, Harey Zahav limits access to the Personal Information only to parties who: (1) require access to this information for the purpose of performing Harey Zahav's undertakings; (2) meet the requirements for managing and accessing Personal Information; (3) have signed appropriate agreements, in accordance with the law. Harey Zahav's information systems are protected by measures that include, among other things: A. access controls and permissions; B. encryption of information in transit and, where required, at rest; C. use of firewalls and intrusion prevention systems; D. monitoring and detection of abnormal activity in the information systems; E. ongoing backup and restoration of information in the event of a malfunction or abnormal event; F. maintaining a secure server environment.

Despite all the measures taken, we (or any other party) cannot guarantee absolute protection of information. Alongside this, we undertake to act promptly and reasonably to remedy any deficiency or security incident that is discovered, and to report security incidents that require reporting under the law.

9. Changes to the Privacy Policy; general

We reserve the right to update, change, or replace this policy from time to time, as required, in order to reflect changes in legislation, official guidelines, technological developments, or the manner of Harey Zahav's activity. In the event of a material change to this policy, we will publish a prominent notice on our website and through other publication channels it uses, in accordance with the law. Continued use of Harey Zahav's services after the changes take effect will constitute consent to the Privacy Policy in its updated version.

For any question, request, or inquiry relating to this policy, or to the exercise of your rights, you may contact us at: privacy@hzahav.co.il.

* * * * *

Last updated: February 2, 2026