Legal

Privacy Policy

Last updated 30.08.2026

1. Who is responsible for the data

The controller of the database is Yana Shtilman, licensed dealer no. 316843804, of Pinchas Ben Yair 3, Tel Aviv-Yafo, trading as Sensual Unique Perfumes. Contact: +972 52-649-6097, sensualunup@gmail.com. [s. 11(2a), Protection of Privacy Law, 5741-1981]

When an order is placed we collect: name, telephone number, email address, delivery address (courier delivery only) and any note the customer chooses to add. Order history is also retained.
The purposes are: fulfilling and delivering the order, issuing an invoice or receipt, contacting the customer about the order, handling cancellations, returns and warranty matters, and complying with duties imposed by law. The data is not processed for any other purpose. [s. 11(2) and s. 8(b), Protection of Privacy Law]

There is no legal duty to provide these details; providing them depends on the customer's wish and consent. Without them we cannot accept the order, supply it, or issue an invoice. [s. 11(1), Protection of Privacy Law]

Hyp, to process the card payment.
The courier company, to deliver the parcel: name, telephone and address only.
The invoicing service, to issue and retain the accounting document as required by law.
The Site's hosting provider, whose servers are located in the European Union.
A competent authority or professional adviser, to the extent required by law or necessary to protect a legal right. [s. 11(3), Protection of Privacy Law]

Payment is made on the payment processor's secure page. We do not receive, see or store card numbers or security codes.

The data is stored on servers in Finland, a European Union member state and a party to the European Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data. The transfer is permitted under reg. 2(8)(1) of the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, and we hold the hosting provider's written undertaking to take sufficient measures to protect privacy and not to pass the data to any other person. [reg. 3 of those Regulations]

The Site carries no advertising tools, ad networks or third-party analytics. It uses browser local storage (localStorage) solely to hold the contents of the shopping cart. That data stays on the user's device, is never sent to us, and can be deleted at any time from the browser settings.

Transaction-related data is kept for as long as needed for warranty, cancellation and limitation purposes, and for the period prescribed by the bookkeeping rules for accounting documents.
Once a year we check whether the database holds more data than its purposes require and delete anything excess. [reg. 2(c), Protection of Privacy Regulations (Data Security), 5777-2017]

Any person is entitled to inspect personal data about themselves held by us. Requests should be made in writing to sensualunup@gmail.com. Inspection will be allowed within 30 days of receipt of the request, and a refusal will be given in writing within 21 days. A fee of ₪20 may be charged for exercising the right of inspection. [s. 13, Protection of Privacy Law; regs. 2(a), 5 and 6, Protection of Privacy Regulations (Conditions for Inspection of Data and Appeal Procedure), 5741-1981]
A person who finds that data about them is incorrect, incomplete, unclear or out of date may request its correction or deletion. If we grant the request, we will notify the change to everyone who received the data from us in the three years preceding the correction. A refusal will be given in writing within 30 days. [s. 14, Protection of Privacy Law; reg. 7 of those Regulations]
Accounting documents we are required to retain under tax law cannot be deleted while that retention duty subsists.

As at the date of this document we send no marketing messages.
If marketing is introduced, messages will be sent only to a person who has given prior express written consent, or to a person who gave their details in the course of a purchase after being told the details would be used to send advertising by email, SMS or WhatsApp and having been given an opportunity to refuse. Every message will be marked with the word "פרסומת", which for email will appear in the subject line, and will state the Seller's name and address, a simple means of unsubscribing, and a valid address to which a reply may be sent in order to unsubscribe. A refusal may be given at any time, free of charge, in writing or by the channel on which the message was sent, at the recipient's choice. [s. 30A(b), (c), (d) and (e), Communications Law (Telecommunications and Broadcasts), 5742-1982]
A person whose data is held in a database used for direct mailing is entitled to demand its deletion from that database, and we will notify them in writing that we have acted on the demand. [s. 17F(b) and (d), Protection of Privacy Law]

We are responsible for the security of the data in the database. Traffic between the browser and the Site is encrypted, access is restricted to authorised users and requires authentication, security events are logged, and permissions are revoked on termination of employment or engagement. [s. 17, Protection of Privacy Law; Protection of Privacy Regulations (Data Security), 5777-2017]

The database is not of a type requiring registration, and there is no duty to appoint a privacy protection officer. [ss. 8A and 17B1, Protection of Privacy Law]

The Site is not intended for persons under 18. An order by a minor requires the consent of a responsible adult.

This document may be updated, and the current version is published on the Site with its update date.
For privacy enquiries: sensualunup@gmail.com. A complaint may be lodged with the Privacy Protection Authority at the Ministry of Justice.