Privacy policy

This policy explains what personal data Ne'eman B'Israel collects, why, who can see it, who we share it with, and how long we keep it, for couples, guests, and shop buyers alike. It applies to the whole site, in both English and Hebrew.

The party responsible for your data is the operator named under “Who we are” in our Terms.

We collect only what the service needs, and what that is depends on how you use it:

Anyone with a registry's link can see the couple's names, wedding date, city, personal message and cover photo, and the list of gifts, each marked as available, reserved (a guest is paying for it) or purchased. A registry never shows who bought a gift, or a guest's email, message or the amount paid.

Unless the couple switches it off under Profile → Privacy & data, the registry also appears in our public search and in the list of upcoming weddings, which show the couple's names, city and wedding date. A registry that isn't listed can still be opened by anyone who has its link.

The couple sees who bought each gift in their dashboard — the guest's name, email, message and the amount paid — and is notified by email, and optionally by push notification, when a gift is purchased.

Our team sees order details, including a buyer's or recipient's name, phone number and delivery address, on a protected admin page, to fulfil orders and arrange delivery. The emails that tell our team about a new shop order or contact message are only a notice: they do not contain the buyer's details or the text of your message.

To run a registry and the shop: creating and displaying a registry, processing a gift purchase or shop order, arranging fulfilment and delivery, and sending order and shipping updates.

To operate the service securely: authenticating your account (including checking that a new password hasn't appeared in a known data breach), limiting abuse such as repeated sign-in attempts and spam through the contact form, preventing a gift from being bought twice, and, if you opt in, sending you a push notification when a guest buys a gift.

To communicate with you: sending account emails such as email confirmation and password reset, and replying to contact messages and requests about your data.

To meet our legal obligations: keeping order records for tax and accounting.

Card payments are entered and processed entirely on Stripe's own hosted payment page (Stripe Checkout). We never receive, see, or store your card number — only the payment reference id Stripe returns once a payment succeeds, which we use to confirm and track it.

We use a session cookie to keep you signed in and a locale cookie (nb_locale) to remember whether you prefer English or Hebrew, and a currency cookie (nb_currency) to remember which currency you chose for displaying approximate prices. We don't use advertising or tracking cookies. To understand how the site is used we use Vercel Web Analytics, which is cookieless: it counts page views and a few anonymous actions (such as a registry being created or a gift being paid for) in aggregate, sets no cookies and does not follow you across other sites. The page addresses it records leave out names, codes and query strings.

If you turn on push notifications, your browser creates a subscription that we store so we can notify you. You can turn it off at any time, and signing out turns it off for that browser.

We share only what each provider needs to do its job. Each processes data under its own terms and only for the purpose we use it for.

These providers are mainly based in the United States and the European Union, so your data may be processed outside Israel. We do this only as needed to run the service, and in line with Israeli privacy law, including the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.

We keep personal data only as long as it's needed, then delete or anonymize it. In practice:

Our providers keep their own records under their own terms, for example payment records at Stripe and email delivery logs at our email provider. Deleting or anonymizing data on our side does not change those copies. Likewise, emails already sitting in our team's inbox, such as a message you sent us directly, are not erased automatically; we delete them by hand when we act on a deletion request.

Under Israel's Privacy Protection Law, you can ask to access, correct, or request deletion of the personal data we hold about you, and to object to certain uses of it.

If you have an account, you can do much of this yourself under Profile → Privacy & data: download a copy of your data, remove your registry from the public directory, or delete your account. Gifts that guests have paid for but that haven't shipped yet must ship first, so that their payments aren't lost. From your Profile you can also change your password and sign out of your other devices.

If you bought a gift, placed a shop order or wrote to us, use our contact page and tell us what you'd like. We'll find your data by the email address you used, and may need to verify your identity first. We answer within 30 days. We can delete unfinished checkouts and contact messages; for a completed order we anonymize your personal details once it has shipped, but must keep the amounts and dates for our accounting records.

You can also write to us at [Postal address].

We use industry-standard safeguards — including encryption in transit (HTTPS for the site and TLS for the connection to our database), hashed passwords with a breach check and rate limiting on sign-in, and access controls that limit order details to our admins — to protect the data we hold, and we never store card numbers ourselves.

Ne'eman B'Israel is intended for adults aged 18 and over. We don't knowingly collect personal data from anyone under 18.

We may update this policy from time to time; the date below reflects the latest revision. We encourage you to review it occasionally.

Questions about this policy or your data? Reach us through our contact page, by phone at [Phone number], or by post at [Postal address].