Privacy policy

This site is run by Liad Ohayon, a private host in Netanya, Israel. We collect only what we need in order to answer your request and host your stay. We do not sell or trade personal data. This page says exactly what we hold, who touches it and how to get rid of it. It follows the Israeli Protection of Privacy Law, 5741-1981, and — for visitors from the European Union — the GDPR.

What we collect

• When you send a booking request: your name, phone number, email address (optional), the apartment, check-in and check-out dates, number of guests, the language you were using, anything you wrote in the notes field, and the price quoted to you.
• When you write to us on WhatsApp, by phone or by email: the content of the conversation and your contact details, as with any correspondence.
• When a booking is confirmed: the details needed for payment, your arrival time and, where required, an ID document of the lead guest. Card details are handled by the payment provider, never by us.
• When you browse the site: anonymous, cookieless usage statistics — page views, country, device type — via Vercel Web Analytics. No personal profile is built and no advertising tracking takes place.
• Your IP address is processed briefly to deliver the site and to stop the booking form being abused. It is not saved alongside your request.

What we use it for

• Answering your request, confirming availability and price, and running your stay.
• Sending you a confirmation email and the practical messages that go with a booking — arrival instructions, changes.
• Keeping the records we are required to keep for bookkeeping and tax.
• Improving the site on the basis of aggregate statistics.

We do not send marketing newsletters. If that ever changes we will ask for your consent first, and every email will carry an unsubscribe link.

Where the data goes

A small number of service providers keep the site running. Each of them processes data on our behalf, under its own security commitments:

• Supabase — the cloud database where booking requests are stored, over encrypted connections, reachable only from the owner’s admin area.
• Vercel — hosts the website and provides the cookieless analytics.
• Resend — sends the booking emails: the alert to us and the confirmation to you.
• WhatsApp (Meta) — if you choose to carry on in WhatsApp, that conversation happens there under WhatsApp’s own privacy policy. The site only opens a pre-filled message; it sends nothing to WhatsApp by itself.
• Airbnb and Booking.com calendars — we synchronise availability, dates only, so the calendar here is accurate. No guest details are exchanged.

Some of these providers store data outside Israel, for example in the EU or the United States. We choose providers with recognised security standards and contractual data-protection commitments.

Cookies

We use no advertising and no tracking cookies, and our analytics are cookieless. The only cookies this site sets are functional ones: the language you picked, so the site opens in it next time, and the session cookie that keeps the owner’s admin area locked. The admin cookie is never set for guests.

How long we keep it

• Booking requests that never became a booking: up to 12 months, so we can pick up a follow-up question, then deleted.
• Confirmed bookings: as long as bookkeeping and tax obligations in Israel require, generally up to seven years, then deleted.
• WhatsApp and email correspondence: as long as the conversation is useful for hosting you. You can ask us to delete it at any time.

Your rights

You can ask at any time to see the personal data we hold about you, to correct it, or to have it deleted — unless the law requires us to keep it. EU residents can also restrict or object to processing and ask for their data in portable form. To use any of these rights, email liad142@gmail.com from the address you used with us, or write on WhatsApp. We answer within 30 days and usually far sooner. You can also complain to the Israeli Privacy Protection Authority, or to the data-protection authority in your own country.

Security

Connections to the site are encrypted (HTTPS). The booking form is protected against automated abuse. Stored requests can be read only by the owner, behind a password-protected admin area. No system is perfectly secure, which is why we keep what we store to a minimum.

Children

The site is meant for adults making a booking. We process details about a child — an age for a cot, say — only when a parent or guardian gives them to us as part of a booking.

Contact and changes

Data controller: Liad Ohayon, Netanya, Israel · liad142@gmail.com · +972 52 660 2644. We may update this policy; the date at the top of the page tells you when it last changed.