Privacy policy - "HER BOSS"

This is a translation provided for convenience. The Hebrew version is the binding one.

Welcome to the website https://her-boss.com ("the Site"), operated by Herboss, licensed dealer no. 312922685 ("we", "us").

This privacy policy describes what personal information we collect, why we collect it, how we use it, who we share it with, and what your rights are regarding this information. This policy operates in accordance with the Privacy Protection Law, 5741-1981 ("the Law") and its regulations (including Amendment 13 to the Law).

1. General

1. Use of the site is subject to the terms set out in the privacy policy. Please read the privacy policy carefully, as using the site and performing actions on it indicate your agreement to the terms contained in the privacy policy.
2. The provisions of this privacy policy apply equally to all genders, and the use of the masculine or feminine form is for convenience only.
3. The terms of the privacy policy apply to use of the site and the content it contains through any computer or other communication device (such as a mobile phone, tablet computers, etc.). They also apply to use of the site, whether via the internet or via any other network or means of communication.

2. What information do we collect?

1. Types of information collected:
   1. Information you actively provide:
      • When making a purchase (private customers): full name, delivery and billing address, phone number and email address, as well as details of the products you purchased.
      • When registering for the professionals' area (business customers): business name, city, phone, email, links to digital assets (such as Instagram and website), as well as photos, videos and information you enter for display in the works feed and the salon directory (user content).
      • When receiving advice and customer service: name, phone, type of enquiry, referral source, the content of your enquiry, and information you provide voluntarily (including hair type, treatment history and sensitivities) in order to match the products to you.
      • When signing up to the mailing list (newsletter): full name and email address.
      • When contacting customer service: the content of your enquiry, correspondence history and contact details. This includes enquiries by phone call, email, social networks and the WhatsApp app.
      • When making a payment: we collect the financial information needed to complete the payment, such as the payment method and relevant billing details. Credit card clearing is carried out through an external, secure clearing provider. It is clarified that full credit card details are not stored directly in the site's systems but are processed in encrypted form by the clearing company, with only partial financial information retained as required to document the transaction and manage the account.
   2. Information collected automatically:
      • Browsing data and technical data: when you browse the site, we may collect technical and behavioural information, such as: IP address, browser type, device type, operating system, approximate geographic area, access times, pages viewed, as well as records of browsing patterns, mouse movements, clicks and heatmaps. Login data and usage data of the mailing systems are also collected, including email open data and link clicks.
      • Cookies and pixels: the site uses cookies, pixels and similar tracking technologies to collect information about actions performed on the site, including pages and products viewed, length of visit, browsing path, shopping cart actions (including abandoned carts), partial form completion and any other digital interaction. For further detailed information about the use of cookies and tracking technologies, including how to control them, please see section 6 ("Use of cookies and tracking technologies") below.

3. Why do we collect the information?

1. We collect and process information and data about you for the following purposes:
   1. Processing orders: using your full name, address, phone and email address to handle the order, charge the payment method, arrange delivery and supply the products you purchased.
   2. Customer service, support and training: responding to enquiries, service and support; handling requests to cancel or exchange products; contacting you after purchase for shipping updates, satisfaction checks, and providing safety instructions and explanations on how to use the products.
   3. Managing the professionals' area: verifying business details to grant access to the wholesale price list, contacting professionals, and managing and displaying the works portfolio and salon directory containing content uploaded by professional users.
   4. Marketing mailings and updates: where you have given your express consent, we will use your name and email address to send you a newsletter, information about promotions, new products and relevant updates about the products, by email, SMS or WhatsApp.
   5. Targeted marketing: using technical information and browsing data (collected through third-party cookies and pixels) to show you personalised advertisements across the web and to measure the effectiveness of our campaigns.
   6. Improving the user experience and statistics: analysing browsing data and technical information (usually in aggregate and anonymous form) to understand how visitors use the site, detect faults and improve our interface and services.
   7. Compliance with the law: retaining transaction details, invoices and records of communications to comply with legal obligations (such as tax and accounting laws) and to protect our legal rights. This information is retained by virtue of a legal obligation.

4. Providing information

1. Providing information or using the site's services depends solely on your free will and consent, and you are not legally obliged to provide us with information.
2. However, not providing certain information may prevent us from providing you with certain services. For example, without contact details such as a name and phone number, we will not be able to get back to you with information you requested about our products and advice. Without an email address, we will not be able to send you an order confirmation or add you to our mailing list at your request.
3. Information collected automatically is required for the proper and secure operation of the site.

5. Who do we share the information with?

1. We do not sell or rent your personal information to third parties. We may share your personal information with third parties and service providers acting on our behalf, only for the purposes set out in this policy and in accordance with the law. These parties include:
   1. Hosting, development and website management companies: the site is hosted and stored using Netlify services and is maintained by technology development providers acting on our behalf. Information collected on the site is stored, managed and processed on the secure servers of these providers acting for us.
   2. Mailing and marketing automation systems: we use mailing and marketing automation systems to send updates, invoices and marketing mailings. The information transferred includes contact details and purchase history in order to tailor the content.
   3. Payment clearing providers: we transfer information to secure clearing providers for payment processing, and to an invoicing system.
   4. Shipping and logistics companies: we share delivery details (name, address, phone) with shipping companies in order to deliver your order.
   5. Professional advisers: information may be transferred to the business's accountant, legal advisers and insurance company, for ongoing management and protection of the business's rights.
   6. Infrastructure and communications providers: information is processed using cloud services of infrastructure providers and the WhatsApp Business app for correspondence and customer service.
   7. Analytics, marketing and behaviour-monitoring platforms: we share technical information and browsing data (collected, among other means, through cookies and pixels) with advertising, analytics and behaviour-monitoring platforms, including Google Analytics, Google Ads, Meta (Facebook/Instagram), TikTok Pixel, and session-recording systems such as Hotjar or Crazy Egg. This sharing is carried out for site traffic analysis, improving the user experience, conversion measurement and tailoring targeted advertisements.
   8. Law enforcement authorities: if we are required to do so by court order or an instruction from a competent authority.
2. Transfer of information outside Israel: some of the information may be transferred, stored or processed on servers located outside the State of Israel (for example in the USA, Canada or Europe), with hosting providers (such as Netlify) and international cloud and service providers such as Google and Meta. The transfer of information is carried out subject to the provisions of Israeli law.

6. Use of cookies and tracking technologies

1. The site uses cookies, pixels and similar technologies (together: "cookies") for its ongoing and proper operation, information security, collection of statistical data, improving the user experience and tailoring advertisements.
2. Cookies are small text files stored on your computer or mobile device when you browse the site. They allow the site to recognise your browser, remember certain details (such as items in the shopping cart) and collect data about how you use the site.
3. Some of the cookies used on the site originate from third parties (such as Google, Facebook, etc.). They are intended to collect information about your preferences and activity on the site in order to show you relevant, personalised advertisements across the internet and on social networks, and to measure the effectiveness of our advertising campaigns. The use of information collected by these third parties is subject solely to their own privacy policies and is not the site's responsibility.
4. You can change your browser settings at any time to block, restrict or delete cookies (except essential cookies). However, please note that blocking cookies may impair your browsing experience and prevent you from using some of the site's services (for example, completing a purchase).

7. Database owner

1. For the purposes of the Law, Herboss, which operates the site, is the "controller" of the database in which the data detailed in this policy is collected.

8. Information security

1. The security of your information is important to us. We implement systems, technological measures and procedures accepted for information security, in accordance with the requirements of the Privacy Protection Law and the Privacy Protection (Data Security) Regulations, 5777-2017. These measures are intended to minimise the risks of unauthorised intrusion, loss or misuse of information.
2. However, while we work hard to protect your personal information, the internet is not a completely secure environment, and we therefore cannot guarantee the absolute immunity of our databases against unauthorised access.

9. Data retention

1. Personal information will be retained for as long as necessary to fulfil the purposes for which it was collected, or for a longer period where required by law.

10. Your rights regarding personal data

1. Under the Privacy Protection Law, you have the following rights:
   1. Right of access: you may request to view the personal information we hold about you.
   2. Right to rectification: if you find that the information is not correct, complete or accurate, you may request that it be corrected.
   3. The right to erasure (the right to be forgotten): you may request the deletion of your personal information, subject to legal limitations.
2. The right is exercised by contacting the site using the details below.
3. The right may also be exercised by a parent or legal guardian with regard to information collected about a minor under their responsibility.

11. Minors

1. Browsing and using the site is permitted at any age; however, the purchase of products on the site by a minor (under 18) requires the prior consent of a parent or legal guardian.
2. If you are a minor, your use of the site and provision of personal information through it constitute an express declaration on your part that you have informed your parents or legal guardian of this privacy policy and have received their full consent to carry out the transaction, to provide the personal information and to its processing as described in this policy.
3. If we become aware that information has been collected from a minor without such consent, we reserve the right to cancel any transaction and delete the information from the databases as soon as possible.

12. Newsletter sign-up, mailing consent, publications and advertising

1. A visitor who has left details on the site, has consented to mailings and has been added to the site's mailing list agrees to the use of their details for receiving marketing information, updates and advertisements sent by the site from time to time.
2. You may not leave another person's details on the site without their consent and/or without their presence in front of the screen at the time the details are left.
3. When leaving details, the visitor will be asked to provide personal details such as: first name, surname, phone and an active email address (at the site's sole discretion). Providing partial or incorrect details may prevent use of the service and hinder contact when needed. If details change, they must be updated on the site.
4. It is clarified that there is no legal obligation to provide details on the site; however, without providing them it will not be possible to receive marketing content and updates from the site.
5. Leaving details on the site and consenting to receive marketing content includes, among other things, receiving marketing content and information about promotions, updates and discounts offered to registered users.
6. Mailing consent (receiving marketing content) as stated constitutes the visitor's consent to receiving advertising material under the Communications (Telecommunications and Broadcasting) Law (Amendment No. 40), 5768-2008 ("the Communications Law").
7. It is clarified that the person who left their details may remove themselves from the mailings at any time by clicking "Unsubscribe from the mailing list" or any similar text appearing at the bottom of every mailing sent, or by contacting the site by email. As long as the subscriber has not removed themselves from the mailing list as stated, the site may, subject to the Communications Law, send the subscriber direct mailings as stated.
8. The site may cancel a visitor's registration to the mailing list at its absolute discretion.
9. The mailings as a whole, including all information appearing in them, are offered as is and will be as accurate and correct as possible; however, the information may be incomplete or may contain technical or other errors.

13. Changes to the privacy policy

1. We reserve the right to update this policy from time to time. The updated version will be published on the site.

14. Contact

1. For any question or request regarding this privacy policy, you can contact us:
   • Email: her.boss.israel@gmail.com
   • Phone: 058-7007030

All rights in this privacy policy are reserved to Daniel Bahri Law Offices; it may not be copied, reproduced or distributed.

Last updated: September 2026