Privacy notice
Privacy notice
This page explains what personal data is collected on romy.co.il, what it is used for, who processes it on my behalf, and how long it is kept. It is deliberately short, and it describes what actually happens.
Last updated November 2026.
Who is responsible
Romy Dar, organizational development and management systems consultant, trading as ROMY.
For any question or request about privacy, contact me directly: [email protected], +972-52-3375029.
What is collected
- What you enter in the contact form: name, organization (optional), email address and the content of your message.
- What you send in direct correspondence by email or tell me by phone.
- Technical traffic data generated by the hosting infrastructure: IP address, browser and operating system, the page viewed and the time of access. This is used to keep the site secure and available.
What is not collected
There is no measurement or analytics tooling on this site. No Google Analytics, no tag manager, no social network pixel, and no visitor profiling.
The site stores no marketing or analytics cookies on your device and uses no browser storage. The content delivery network that serves the site may set a technical cookie for security purposes only.
The fonts used on the site are served from the site itself and are not loaded from an external service, so simply browsing here does not send your IP address to a font provider.
What the data is used for
- Answering your enquiry and getting back to you about it.
- Managing a professional engagement, where one arises.
- Keeping the site secure and running.
There is no marketing mail and no mailing list. Data is not sold, not rented, and not passed to any third party for purposes of their own.
Who processes data on my behalf
Three services are involved in running the site and receiving enquiries. These are all the parties that see the data.
- Web3Forms - the form service that passes the content of the form to my mailbox. According to its own documentation it does not retain submissions, its servers are located in the United States, and it is operated by a subsidiary of Web3Creative registered in India. Server logs that may contain personal data are deleted there every two months.
- Cloudflare - hosts and delivers the site. It processes traffic data and IP addresses in order to deliver and secure the service.
- Microsoft - hosts the business mailbox that enquiries arrive in and are kept in.
This means that data submitted through the site may be transferred outside Israel. Any such transfer is for the delivery of the service and for no other purpose.
How long data is kept
Enquiries are kept in the mailbox for as long as they are relevant to the professional exchange, and for no more than 24 months from the last contact, after which they are deleted.
Where a professional engagement arises, the data relating to it is kept according to the terms of that engagement and the record-keeping obligations that apply to a business.
Your rights
Under the Israeli Privacy Protection Law you may inspect the data held about you, ask for data that is incorrect, incomplete or inaccurate to be corrected, and ask for it to be deleted, subject to law.
To exercise any of these, write to [email protected]. I will respond within 30 days. If the response does not satisfy you, you may approach the Israeli Privacy Protection Authority.
Security
The site is served over encrypted connections only, with HTTPS enforced and browser security headers in place. Access to the mailbox that holds enquiries is protected by multi-factor authentication.
Links to other sites
This site links to external sites, including standards bodies, regulators and professional associations. Their own privacy policies apply to them, not this one.
Changes to this notice
Last updated November 2026. Any substantive change will be published on this page and the date above will change with it.
A question about privacy on this site, or about privacy in your own organization, is welcome. See the privacy and data protection officer services page.