Last updated: Jun 04, 2026 · Version 1.0

1. Who we are
Business owner name: Itai Itah
Legal status: Sole proprietor
Commercial name used: Itai Labs (not a registered trade name; the legal entity is “Itai Itah”)
This policy describes how we collect, use, store, and protect your personal information. It is written in accordance with the Israeli Protection of Privacy Law.
2.Information we collect
We collect only the information necessary to provide the service.
2.1 Information you provide voluntarily
In workshop registration forms: full name, email address, professional role (optional), preferred availability (optional), goals (optional), acquisition channel (optional).
In direct email inquiries: any information you choose to share.
When signing up for the newsletter via Substack: email address. Registration is handled by Substack, and their privacy policy also applies.
2.2 Automatically collected information
In accordance with the definition of “personal information” the following is also considered personal data:
-Browser type and operating system
-Pages visited on the site
-Time and duration of visits
-Referring website (referrer)
This information is collected via our hosting provider and is used for security, troubleshooting, and improving the website.

3. Cookies
The website uses minimal cookies:
Essential cookies: required for site functionality (language preference, display mode). These do not require consent.
Analytics and marketing cookies: loaded only if you explicitly consent via the cookie banner. You may withdraw consent at any time via the link in the footer.

4. How long we retain data
Registration inquiries (non-transactional leads): up to 24 months from last interaction, or until you request deletion.
General and marketing email communications (non-transactional): up to 24 months from last interaction, or until you request deletion.
Transaction-related records (invoices, receipts, workshop coordination, cancellation/refund communication): up to 7 years, Analytics data: up to 14 months, in aggregated form only.
Newsletter subscriptions: until you unsubscribe.
We perform annual reviews and delete data that is no longer needed.

5. Your rights and how to exercise them
Under applicable law, you have the right to:
-Access your data
-Correct inaccurate information
-Request deletion (subject to legal retention obligations)
-Withdraw marketing consent at any time
-File a complaint with the Privacy Protection Authority

5.1 DSAR process (Data Subject Access Requests)
To exercise your rights email support@itailabs.com with the subject “Privacy Rights Request” and specify the type of request (access / correction / deletion / opt-out).
Identity verification: we may ask you to confirm identity by sending the request from the email used during registration or by providing two details from your original inquiry.
Confirmation: we will acknowledge receipt within 2 business days.
Full response: within 30 days of verification. In complex cases, this may be extended by up to 60 additional days with justification.
Cost: requests are free of charge. Excessive or repeated requests may be subject to a reasonable fee under the law.
Partial refusal: if we must refuse part of a request (e.g., due to tax record retention obligations), we will explain and refer you to the authority for appeal.
Documentation: all requests are logged internally for auditing purposes.

5.2 Effect of deletion
Deletion requests will remove data from our databases and subprocessors within 30 days, except data we are legally required to retain (e.g., financial records up to 7 years).

6. External links
The website contains links to external sites (As LinkedIn, YouTube, etc.). This privacy policy does not apply to those sites. Please review their policies separately.

7. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page, and the update date will be changed at the top of the document. If changes significantly affect your rights, we will notify you by email if we have your address.

8. Governing law and jurisdiction
This policy and the website’s operations are governed by Israeli law. Exclusive jurisdiction for disputes lies with the competent courts in the Tel Aviv–Jaffa district.