Last updated: September 22, 2026
1. General and Data Controller
1.1 This policy explains how CLVY BRANDS LTD, Company No. 517395323, with its address at Derech Eilot 10, Ganei Tikva (hereinafter: "the Company"), collects, processes, stores, and shares personal information within the website celavy.co.il, and its related sub-domains, accounts, services, and communications (collectively: "the Website"). The Company is the data controller that determines the purposes of processing, unless otherwise stated.
1.2 This policy applies to visitors, subscribers, customers, gift recipients, those contacting customer service, and anyone interacting with the Company in connection with the Website. An external provider may also process information according to its own policy and under its independent responsibility, to the extent that it determines separate processing purposes.
1.3 Use of the Website is also subject to the Terms of Use and related policies. Nothing in this policy shall derogate from any right or obligation that cannot be waived by law.
2. Types of Information We May Collect
2.1 Identification and contact details, such as name, phone number, email address, shipping and billing address, city, zip code, and recipient or collector details. If information about another person is provided, the provider declares that they are authorized to provide it for the relevant purpose and that they have informed them as required.
2.2 Order and transaction details, such as products, quantities, price, coupon, delivery method, order status, returns, credits, invoices, purchase history, and service-related preferences.
2.3 Limited payment details, such as payment method type, last four digits, reference number, authorization status, and payment token, as transmitted to the Company. Full card details and security codes are generally processed by clearing and payment providers and are not stored in the Company's systems, unless otherwise stated by law.
2.4 Account, club, and preference details, as these services are enabled, including username, login data, benefits, points, content preferences, marketing consents, and usage of the personal area.
2.5 Communication and service content, such as inquiries via email, phone, WhatsApp, forms, and social media, documents, images, recordings if made lawfully, feedback, complaints, and service history.
2.6 Technical and usage information, such as IP address, device and browser identifiers, operating system, language, general location derived from IP address, access times, pages and actions on the Website, traffic source, system events, security data, cookies, and similar technologies.
2.7 Information related to digital content, including delivery and access times, address to which the content was sent, order number, unique tag or code, and information required for rights protection, preventing unauthorized sharing, and locating sources of leaks, in accordance with the terms and the law.
3. Information Sources
3.1 Information may be obtained directly from the user when browsing, registering, purchasing, paying, joining the club or mailing list, contacting us, participating in a promotion, or using content.
3.2 Information may be obtained automatically from the Website, the device, cookies, and measurement, security, fraud prevention, and customization tools, as well as from commerce, clearing, logistics, shipping, customer service, mailing, advertising, and social media providers, in accordance with the law and the user's settings with those entities.
3.3 The Company may combine information from various sources for the purposes set forth in this policy, provided that the combined use is permitted by law and is consistent with the context in which the information was provided.
4. Provision of Information – Obligatory or Optional
4.1 As a general rule, there is no legal obligation to provide personal information to the Company, and provision depends on the user's desire. However, fields marked as mandatory or information required for placing an order, payment, delivery, identification, or handling an inquiry are necessary to provide the service; without this information, it may not be possible to complete an action or provide a service.
4.2 Where the provision of information is required by law, for fraud prevention, to produce a tax document, or to fulfill another obligation, the Company may condition the action on the provision of the necessary information. Optional information will be used for the purpose presented at the time of collection or for a compatible purpose permitted by law.
4.3 At a point of direct collection of personal information, the Company will present, as required and depending on the context, a clear notice including the identity of the data controller and contact methods; whether there is a legal obligation to provide the information or if provision is voluntary; the consequences of non-provision; the purposes of collection; and to whom or what types of entities the information will be disclosed and for what purposes. A short notice in a form, at checkout, or in an interface will supplement this policy and prevail regarding the specific collection if it is more detailed.
5. Purposes of Using the Information
5.1 The Company may process information for the purpose of operating the Website; opening an account; receiving an order, verifying stock, and payment; delivery, collection, and returns; managing a club and benefits; delivering digital content; customer service; handling requests, cancellations, complaints, and disputes; and contacting the user in connection with a transaction or service.
5.2 Information may also be used for information security, identity verification and authorization, prevention of fraud and abuse, fault detection, enforcement of the Terms of Use, protection of the Company's rights and those of third parties, management of legal proceedings, compliance with legal, tax, accounting, and audit requirements, and responding to competent authorities.
5.3 The Company may use the information to measure and improve the Website, service, products, inventory, content, and campaigns; perform analysis, forecasting, and segmentation; personalize experience, offers, and content; and develop business activity, as permitted by law and in a proportionate scope.
5.4 The Company and its providers may perform automated checks, including identifying unusual transactions, fraud, payment risk, or unauthorized use. The Company may delay an action and request further verification following such a check. Where the law provides a right regarding an automated decision, the Company will act accordingly.
5.5 The Company will not use information for a purpose incompatible with the purpose for which it was collected, unless based on valid consent, legal obligation or authority, or another basis permitted by law.
6. Cookies and Similar Technologies
6.1 The Website may use cookies, pixels, tags, local storage, identifiers, and similar tools of the Company and third parties. These tools may be temporary or stored for a defined period, depending on their purpose and the provider's settings.
6.2 Essential cookies may be used for operating the checkout, shopping cart, account, security, load balancing, storing preferences, and preventing fraud. Other cookies may be used for measurement and statistics, performance improvement, personalization, advertising, campaign measurement, and displaying relevant content.
6.3 As required by law, non-essential tools will be enabled according to the user's choice in the preferences interface. You can change or withdraw a choice through the interface, if offered, or through browser and device settings. Blocking or deleting cookies may affect the availability or functionality of parts of the Website.
6.4 Measurement, advertising, and social media providers may receive data on the use of the Website and combine it with information in their possession, in accordance with the user's settings and their own policies. The Company may change the tools it uses; updated information will be displayed in the cookies interface or this policy, as required.
7. Mailing, Advertising, and Customer Club
7.1 Operational and service messages, such as receipt confirmation, order updates, shipping, security, significant changes to the service, or responses to inquiries, are not dependent on consent to receive advertising and will be sent as necessary for the fulfillment of the service or law.
7.2 Advertisements, offers, benefits, and marketing content will be sent via means requiring consent only after receiving consent as required by law, or based on an exception permitted by law. The act of purchasing, opening an account, or joining the club does not, in itself, constitute general consent for advertising.
7.3 You can withdraw consent or request removal via an unsubscribe link in the message, an appropriate response, or by contacting the Company. Removal will apply prospectively and will not prevent operational messages. The Company may keep a limited record of a removal request in order to honor it and prevent further contact contrary to the request.
7.4 To the extent that direct mailing is performed based on membership in a population group or personal profiling, the Company will act in accordance with the laws applicable to direct mailing, including regarding identification, the source of the information, and the right to request deletion from the database used for mailing.
8. Disclosure of Information to Third Parties
8.1 The Company may disclose information to the extent necessary to service providers acting on its behalf, including Shopify and commerce and hosting providers; clearing, credit, and payment providers; EHOUSE and picking, storage, shipping, and collection providers; cloud, security, support, mailing, CRM, analytics, advertising, accounting, consulting, and audit services.
8.2 Information may be disclosed to a payment provider, bank, credit card company, shipping company, or other party required to execute the transaction, even when that party acts as an independent data controller subject to its own privacy policy.
8.3 The Company may disclose information if required by law, order, or request from a competent authority; for the protection of rights, safety, property, or security; for investigation, fraud prevention, legal proceedings, or debt collection; or with valid consent.
8.4 In the event of a merger, investment, financing, reorganization, transfer of operations, sale of business or assets, information may be disclosed to parties evaluating the transaction and to the transferee, subject to confidentiality, the law, and continued use consistent with the processing purposes or other notification as required.
8.5 The Company may disclose aggregated, statistical, or anonymized information that does not identify a person by reasonable means for business, research, marketing, and operational purposes, subject to the law.
9. International Data Transfer
9.1 The Website and its providers may process or store information in Israel and other countries, including due to the use of international commerce, cloud, clearing, mailing, support, security, and analytics platforms.
9.2 When transferring information outside of Israel, the Company will act in accordance with applicable laws, including regarding the terms of transfer and the recipient's commitments to protect the information. The level of protection in the destination country may differ from that in Israel.
10. Data Retention
10.1 Information will be stored for the period reasonably necessary for the purposes for which it was collected, for managing the customer relationship, for fulfilling contracts and legal, tax, and accounting obligations, for fraud prevention, security, rights protection, and handling disputes and proceedings.
10.2 Retention periods may vary according to the type of information, its sensitivity, scope, purpose, and the risk involved. Information may be stored for the duration of a relevant limitation period, as well as for an additional period in backups and system logs until deletion or overwriting in the normal operational cycle, subject to appropriate safeguards.
10.3 The Company may delete, aggregate, or anonymize information that is no longer necessary, unless there is a justification or obligation to store it. Account deletion does not require immediate deletion of all information related to transactions, payments, rights, security, or legal obligations.
11. Data Security
11.1 The Company takes reasonable and accepted organizational and technological measures, in accordance with the nature of its operations and legal requirements, to minimize the risk of unauthorized access, use, alteration, loss, or disclosure. Access to information is limited by need and role, and the Company may use providers specializing in security and infrastructure.
11.2 No system is completely immune, and the Company cannot guarantee that information will not be exposed due to a malfunction, intrusion, cyber event, or act beyond its reasonable control. In the event of a security incident, the Company will act to investigate, mitigate damage, and provide reporting or notice when required by law.
11.3 The user is responsible for maintaining the confidentiality of login details, choosing appropriate access methods, avoiding the provision of full payment details on a channel not intended for this purpose, and notifying the Company without delay of any suspected unauthorized use.
12. Rights Regarding Personal Information
12.1 A person may contact the Company to request to review personal information about them held in a database, and request its correction if they find it is not accurate, complete, clear, or up-to-date, all in accordance with the conditions, exceptions, and procedures established by law.
12.2 You may request deletion, restriction, cessation of mailing, or exercise another right where the law grants it. These rights are not absolute, and the Company may reject a request, in whole or in part, if the storage or processing of the information is required for the fulfillment of a transaction, legal obligation, legal right, security, fraud prevention, or another purpose permitted by law.
12.3 To process a request, the Company may request reasonable information for identity verification and authorization, so as not to disclose information to a person not entitled to it. The Company will handle the request within the timeframes set by law and document the handling as required.
13. Minors
13.1 Independent purchase on the Website is intended for adults with legal capacity. A minor may use the Website or provide information through a parent or guardian and with their consent, in accordance with the Terms of Use and the law.
13.2 The Company does not knowingly request personal information from a minor without appropriate authorization. If it turns out that such information was collected unlawfully, it will be entitled to delete it or request appropriate approval, subject to a legal need to keep records.
14. External Websites and Services
14.1 The Website may include links, embeds, or third-party interfaces. The Company does not control their privacy or security policies, and their use is subject to their terms. It is recommended to review the relevant policy before providing information.
15. Updating the Policy
15.1 The Company may update this policy from time to time due to changes in law, technology, providers, services, or business activities. The updated version will be published on the Website and will bear an update date.
15.2 A change will apply prospectively. If a material change requires notice or consent by law, the Company will act accordingly. Continued use of the Website after the publication of the change does not, by itself, constitute consent to new processing that requires express consent.
16. Contacting Us
16.1 For a question, request, or exercise of a right regarding privacy, you can contact:
Email: support@celavy.co.il
Phone and WhatsApp: 054-278-2484
Company Address: Derech Eilot 10, Ganei Tikva
16.2 Customer service hours: Sunday-Thursday, 10:00-14:00, excluding holiday eves and holidays.
You can send an inquiry at any time; a response will be provided within a reasonable time and in accordance with the timeframes required by law, as applicable.