Privacy policy

Introduction

This document is effective from 7 October 2026 (version 4).

Kosher Traveling respects your privacy. This document explains what information the site collects, why, on what basis, how long it is kept, who it is shared with, and what you can do about it. It is built from the system itself, so it describes what the site actually does right now.

Who is responsible for the data

The site is operated by Kosher Traveling.

Israel

Email: [email protected]

What this document covers

The policy covers the site in all languages, user accounts, saved places, trip planning and sharing, messages, reports, confirmations and recordings, group requests and privacy requests. External sites you visit also apply their own policies.

What is collected, why and for how long

Running the site

Show the site in the language and preferences you chose, and fix broken links

Legal basis: Legitimate interest

Security and abuse prevention

Protect the site from flooding, spam and intrusion attempts

Legal basis: Legitimate interest

Recording your privacy choice

Remember what you allowed and be able to prove it - without identifying you

Legal basis: Legal obligation

User account

Open an account, sign in to it and keep it safe

Legal basis: Providing the service you asked for

Profile and preferences

Show your name and adapt the site to your preferences

Legal basis: Providing the service you asked for

Saved places

Keep places and personal notes for your trip

Legal basis: Providing the service you asked for

Messages to places

Pass your enquiry to the business and bring you its reply

Legal basis: Providing the service you asked for

Browser preferences

Remember optional preferences you approve

Legal basis: Consent

Submitting places and corrections

Add a new place or correct an existing detail

Legal basis: Legitimate interest

Reports about places

Check a report about an inaccurate detail and fix it

Legal basis: Legitimate interest

Community groups

Tell you when a group opens for the destination you asked about

Legal basis: Consent

Data requests

Handle a request to access, correct, delete or object

Legal basis: Legal obligation

Measurement

Understand useful pages and unsuccessful searches. Aggregate counts alongside daily visitor identifiers; search text may contain personal information.

Legal basis: Consent

Affiliate links

Know which page leads to a booking - anonymous counting

Legal basis: Consent

You are not obliged to give us any information, and not giving it does not prevent you from browsing the site. Some services - an account, messages, requests - are not possible without the details they need.

Sensitive information

• Kashrut preference - Preferred kashrut level

Providing preferences is optional. They are used to tailor the service and can be changed or removed from your profile. Information already included in messages or retained copies is subject to the retention periods and exceptions in this policy.

Kashrut preferences are optional and tailor the service. You can change or remove them from your profile. Information included in a message or shared plan may be visible to its recipient according to your selected action. Removal requests are subject to law and the retention exceptions in this policy.

Cookies

The site keeps 12 items in your browser - cookies and preferences. The full list, by category and duration, is in the Cookie policy.

Your consent

Beyond the essentials, nothing is collected until you consent.

• Essential - Sign-in, language and security - the site does not work without them
• Preferences and embedded content - Remember recent searches and load external content, such as maps and videos, after approval
• Measurement - Counts of views and searches without an account link; search text can contain details you enter
• Partners - Counting clicks on affiliate links

Your choice is kept for 365 days, and you can change it at any moment through "Manage consent" at the bottom of the page.

If your browser sends a "Do Not Track" or Global Privacy Control signal, we honour it and do not count.

We record how many visitors chose what - daily numbers only, with no identification.

Sharing with providers

We do not sell or rent personal data. Authentication, hosting and email providers receive information needed for their service. A place you message or a booking service you visit may process information for its own purposes under its policy.

Transfers outside the country

Information may be stored or processed outside Israel through the providers listed here. Known processing locations and arrangements are listed in the providers table:

• Supabase - European Union · Data processing agreement; hosted in Europe
• Twilio - United States
• Brevo - European Union
• Hetzner - Not specified
• Cloudflare - United States
• Booking partners - Other countries
• Google Analytics - United States · EU-US Data Privacy Framework and standard contractual clauses

How long information is kept

At the end of retention, information is deleted or identifiers are removed according to the record type and policy exceptions. Removing an account identifier or replacing it with a hash does not guarantee that remaining content is anonymous. Backup removal depends on the backup cycle and provider agreement; contact us for details.

Security

Site communication is encrypted and information access is limited by role. Site abuse-prevention mechanisms use a secret-keyed network-address hash; infrastructure providers or external sites may receive network addresses. Export approval requires privacy permission and current confirmed-email verification. Absolute security cannot be guaranteed. Security incidents and notifications will be handled as applicable law requires.

Disclosure to authorities and third parties

We will disclose personal information only where the law requires it, under an order of a court or competent authority, or to protect our rights, the safety of visitors, or the public. If the site or its activity is transferred to another body, the information will move with it and this policy will continue to apply.

Your rights

• Access the information stored about you
• Request correction or deletion of information that is inaccurate, incomplete, unclear or outdated
• Delete the information
• Receive a copy in a portable format
• Object to the use of my information
• Restrict its use
• Withdraw consent you gave - without affecting what was done before

Registered users can request a data copy and delete site data from your account. An export request is reviewed by a staff member; after approval, the copy is sent to the verified account email.

For any other request - the form at the bottom of the page - our initial review target is 14 days; the response will follow the applicable deadline for the request type under law.

You can also write to us: [email protected]

Providing form information is optional. Public information can be browsed without an account; sign-in, sending a message or handling a request require the details needed for that action. Without them, we may be unable to provide it.

These rights are subject to applicable law, identity verification and exceptions such as necessary retention to protect legal rights. Staff approval is a verification and handling step and does not require waiving a legal right.

Lodging a complaint

If you believe we have infringed your privacy, we would welcome hearing from you first. You may also lodge a complaint with the Israeli Privacy Protection Authority.

This policy is governed by the law of Israel.

Automated decisions

The site tailors results and plans to your choices. Automated summaries and answers use directory data and may be inaccurate. They do not determine legal eligibility, kashrut certification or booking approval. Avoid unnecessary personal details in public search questions.

Children

Accounts are intended for people aged 16 or older. An adult planning a trip may enter information about family members, including children; enter only necessary information you are authorized to provide and avoid unnecessary identifying details. Contact us to review and delete information about a child provided without appropriate authorization, as required by law.

External sites

The site links to the sites of businesses, communities and booking partners. We are not responsible for their privacy policies, and we recommend reading them before giving them any information.

Changes to this policy

This is version 4 of the policy, effective from 7 October 2026.

When the policy is updated, its version number rises and the previous text is kept.

If the change is material, we will ask you about your privacy choice again.

Contact

[email protected]

or through the data request form.