Legal
Privacy notice
Draft, pending lawyer review. This text has not yet been reviewed by a lawyer and may change.
Last updated
Summary
orakta.com sets no cookies and runs no analytics or advertising trackers. The only personal data we keep is what you choose to send us through the request form or by email. We use it only to answer you, keep it for 24 months, and share it only with Cloudflare, which runs the site for us. This notice is written to meet section 11 of the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025).
Who is responsible (database controller)
The controller of the database is the Orakta founder (sole proprietor, Israel; full operator details to be added before launch) (see the imprint). For any privacy question or request write to contact@orakta.com.
Is giving your data required?
No. You are under no legal duty to give us any personal data, and giving it depends on your free will and consent. If you do not give the required details or do not tick the consent box, we cannot answer you through the form. You can still write to contact@orakta.com instead.
What we collect, and why
- Request form: your name, work email, organisation and role (optional), the topic, a place and an event date (optional), your message, and the date and time you agreed to this notice with its version (2026-11-15). Purpose: to answer your request, check what Orakta can show at that place, and prepare a quote, a free imagery check, an order or a report you asked for.
- Email to our role addresses: your address and whatever you write. Purpose: the same.
- Technical data: to deliver pages and protect the form from abuse, Cloudflare processes your IP address, browser type and request time. The form server counts requests per IP address for about one minute to stop floods. We do not store your IP address with your request.
We do not use your data for marketing, newsletters or profiling, we do not sell it, and we do not combine it with other sources. We will not add you to any mailing list.
Who receives your data, and why
- Cloudflare, Inc., our hosting provider, acting on our behalf: it serves the site, runs the spam check (Turnstile), stores form requests in a database (Cloudflare D1) and delivers each request by email to our mailbox (Cloudflare Email Service). See Cloudflare’s privacy policy and its Turnstile privacy addendum.
- Our email provider, which hosts the mailbox that receives the request.
- A licensed partner expert, only if you ask for an expert opinion and agree to that transfer for that engagement.
- Authorities, only where the law requires it.
Storage outside Israel
Cloudflare may process and store data outside Israel, including in the European Union and the United States. We rely on Cloudflare’s contractual data protection commitments for these transfers, in line with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. [To be confirmed in legal review.]
How long we keep it
Form requests are deleted automatically 24 months after we receive them. Emails are deleted on the same schedule unless the request became a contract, in which case we keep what the law requires for tax and accounting. You can ask us to delete your data earlier at any time.
Security
Access to requests is limited to the founder. Data travels over encrypted connections (TLS) and is encrypted at rest by Cloudflare. We follow the Privacy Protection (Data Security) Regulations, 5777-2017, at the level that applies to a database of this size. If a serious security incident affects your data, we will act as those regulations require.
Your rights
- Access (section 13): you may see the personal data we hold about you, in Hebrew, Arabic or English.
- Correction (section 14): you may ask us to correct or delete data that is wrong.
- Withdrawal of consent: you may withdraw your consent at any time; we then delete your request.
Write to contact@orakta.com. We answer within 30 days. You may also complain to the Privacy Protection Authority . If you live in the European Union, the General Data Protection Regulation may give you further rights, and you may complain to your local data protection authority.
Shelter Access projects
Shelter Access analyses for authorities use population, age and disability figures only in aggregate (statistical area, district or city), never per person or household. If an authority shares personal data with us for a project, it is processed only for that project under a written agreement and deleted at its end.
Cookies
The site sets no cookies. Cloudflare Turnstile, which loads only on the contact page after you start filling in the form, may use its own technical storage to tell people from bots; it is not used for advertising.
Changes
We update this notice when our practices change and show the date above. Notice version: 2026-11-15.