Privacy policy

1. Who we are

bayit.online is run by Bayit Online (“we”), which sells and installs Smart Bayit. This page says what information the site collects, why, where it is kept, and what rights you have over it.

2. What is collected, and when

Personal details are collected only when a form is filled in. Giving them is voluntary, but without contact details we cannot get back to you. The forms are:

• Join (/signup): name, phone and email; the number of rooms; what is in the home (air conditioners, boiler, electric shutters, smart switches); whether Shabbat and Yom Tov mode is needed; self-installation with guidance or full installation; and, on the English page, whether the home is in Israel or abroad (waitlist).
• Partners (/partners): name, phone, email, business name, area of activity, and whether you asked for a personal referral code.
• Consulting (on the Services page): name, phone and a message.
• Contractors and developers (on the Services page): contact name, company name and phone.
• WhatsApp: a click on the WhatsApp button on the Join page is recorded (the channel, and campaign tags if there are any), without a name or phone number. The conversation itself takes place in WhatsApp, under its own terms.

Every form submission (and every WhatsApp click) also stores the page language, the campaign tags (section 4), the time it was sent and the sender’s IP address, which is needed to rate-limit submissions and prevent spam.

3. Consent to updates

The Join form has a box for receiving updates and offers. It is separate, not ticked in advance and not required: you can join without it. If you ticked it, we keep the fact that you agreed, when you agreed (by the server’s clock) and the exact wording you were shown. Updates are sent only to people who agreed, and every message will carry a way to unsubscribe. You can also withdraw at any time by writing to us.

4. Campaign tags in your browser

When you arrive from a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_content) or a referral code (ref), your browser keeps them in its own local storage (localStorage, under the key sb_attr) for 30 days. It is not a cookie, nothing from it is sent from the page, and no third party sees it. If a form is sent, the tags go with it, so we know where the request came from and who referred you. You can clear it at any time from your browser’s settings.

5. Measuring visits

We measure visits with Cloudflare Web Analytics. According to Cloudflare’s documentation, it works without cookies and without storing anything on your device, and it does not follow a person from site to site. What arrives is aggregate: pages viewed, browser and device type, country and load times. We do not use Google Analytics, nor any advertising or tracking tools.

6. Cookies

The public site itself does not set cookies. Sign-in cookies exist only in the site’s admin area, for our team. The check on the forms (Cloudflare Turnstile) is loaded from Cloudflare only when a form is about to scroll into view, and works under Cloudflare’s own policy.

7. Where the data is kept

The data is kept and processed by infrastructure providers working on our behalf, only to run the site:

• Cloudflare: hosting the site, the database that keeps the requests, file storage, spam prevention (Turnstile), visit measurement (Web Analytics) and sending us the notification message. Cloudflare’s servers are in many countries, so the data may pass through or be kept outside Israel.
• The email services we use: the mailboxes that receive the requests.

We do not sell personal information and we do not pass it on for anyone else’s marketing.

8. How long we keep it

Details of a request are kept as long as they are needed to handle it and to stay in touch with you, and are deleted at your request. A consent to updates is kept, with its time and wording, as long as it is in force, and as proof of the consent.

9. Your rights

Under the Protection of Privacy Law, 5741-1981 (as amended by Amendment 13), you have the right to inspect the information kept about you, to ask to correct or delete information that is not correct, complete, clear or up to date, and to withdraw a consent to updates at any time. You can also ask us to delete the details of your request, and we will unless we are required to keep them. You can also complain to the Privacy Protection Authority. To use a right, write to the address in section 11; we will check that the request comes from the person the details belong to.

10. Security

We take the usual measures to protect the information: the connection to the site is encrypted (HTTPS), access to the site’s administration is protected by authentication, and requests are kept in a database at Cloudflare. Even so, complete protection cannot be guaranteed.

11. Changes and contact

We will update this page when something in it changes, and the date at the top will change with it. For questions and requests about privacy: webadmin@bayit.online