What we collect, and why

Who we are

The site and the studio are operated by X.Enjoy Events and Productions Ltd, company number 514920974, 19 Ben Avigdor St, Tel Aviv-Yafo. The company owns the database and is responsible for the information in it.

For anything to do with privacy: info@cookingstudio.co.il, or 03-303-8115.

This policy covers the whole site, these English pages included.

What you give us

• Booking a class or buying a gift card: name, phone, email, participant details, and for a gift card also the recipient's name and contact details, the greeting and a photo if you chose to upload one.
• Contact forms, the waiting list and the newsletter: what you filled in, so we can answer or send updates. Every newsletter has an unsubscribe link.
• Private events: the organisation and contact person, for a quote and for planning.
• Card details: given directly to the payment provider on its own secure page. They never pass through this site's servers and we do not keep them. We receive only the approval, the amount and the last four digits.
• A card kept for payment on the day: the payment provider gives us an encrypted token and the last four digits. The token is not a card number, a card cannot be reconstructed from it, and it works only against our own terminal and only for that booking. The card is not charged at booking and no hold is placed on it.

What is collected automatically

While you browse, our own measurement system — which we built ourselves and which runs on our servers — records:

• Browsing: which pages were viewed, in what order, for how long, which site or search you came from, and which ad or link brought you.
• Device and general location: device type, screen size, browser, interface language and the city you connected from. Your IP address is kept for up to 90 days, and is used to identify the city and country and to filter out automated access. It is not passed to anyone else.
• Actions on the page: clicks and where they landed, scroll depth, window resizing, and fields you started filling in and did not finish.
• What you typed into forms: kept even if you never pressed send, so we can get back to you if you got stuck mid-order and so we can find fields that confuse people. Card fields are excluded completely and are never captured.
• Session recording: visits are kept as a technical recording that lets us replay the route you took through the site — mouse movement, scrolling, clicks and typing. It is deleted after three days. It does not film you and does not touch anything outside the site's own window: we have no access to your camera, microphone, files or other browser tabs.
• Linking visits together: on your first visit a random identifier is stored on your device, so we can tell it is the same visitor returning. If you place an order, that identifier is linked to the details you gave — and from then on your browsing history on this site is associated with your name.

Why

We are a small business, and without this we are guessing. These are the only uses:

• Improving the site: finding which page confuses, which button is missed, and which step makes people give up.
• Finishing orders: getting in touch if you started a booking or a gift card and did not finish, to check whether something went wrong. If you would rather we did not, tell us and we will mark it.
• Service: answering better on the phone, knowing what you were looking at.
• Business measurement: knowing which advertising channels and which classes people are interested in.

We do not profile for credit scoring, we make no automated decisions that affect price or availability, and we do not show you prices different from anyone else's.

Consent, and withdrawing it

Giving us details in a form is voluntary and not required by law — but without them we cannot complete an order or answer an enquiry.

The automatic collection described above is done on the basis of the notice in this policy, without a separate consent request when you enter the site. You can choose not to be measured, and the site works fully either way.

You can stop the measurement at any time, through the “Privacy settings” link at the bottom of every page. From that moment we stop collecting, and if you ask, we will also delete what was already collected.

A browser that sends an automatic opt-out signal (Do Not Track or Global Privacy Control) is honoured, and in that case nothing is collected at all.

Cookies

• Essential: keeping the order you are building, remembering your privacy choice, and protecting forms from automated submissions. The site will not work without them and they need no consent.
• Measurement: the random identifier described above, and Google Analytics cookies. Loaded when you enter the site, unless you chose not to be measured.
• Advertising: Google Ads cookies (_gcl_aw and _gcl_au), created when you reached us from an ad on Google. They are used to tell which ads bring customers, and to show you our ads afterwards. We run no Facebook, TikTok or other advertising pixels on this site, and we pass no information to them.

Cookies can be deleted or blocked in your browser settings. Parts of the site may work less well after a blanket block.

Who else sees it

We do not sell information and we do not pass it to advertisers. The only parties who see part of it are service providers without whom the business cannot run:

• The payment provider — to take the payment. Card details go to them directly.
• The accounting system and the customer management system — name, contact details and amount, to issue an invoice as the law requires. For a gift card you chose to send by WhatsApp, the recipient's name and phone are passed too, for sending that message only.
• The hosting and mail provider — hosts the servers and sends the confirmation emails.
• CallBox and CallTrackingMetrics — enquiry management and call measurement. When you send a form, its contents pass through them to our customer management system. A CallTrackingMetrics script runs on every page of the site and assigns you a visitor identifier, so we can connect an enquiry left here with a phone call from the same source. They also receive the address of the page the enquiry was sent from, and how you arrived at it. They do not receive card details.
• Google Analytics and Google Search Console — aggregate usage data, with no name, phone or form content. These are operated by Google and may store information outside Israel.
• Google Ads — Google's advertising system. When you reach us from an ad, it receives the fact that the click led to a visit and whether it ended in an enquiry or an order — with no name, phone or form content. It also allows our ads to be shown to you on other sites after you have visited. If you would rather not, you can change the preferences in your Google account or block third-party cookies in your browser.

We will also pass information if required to by a court order or by law.

How long it is kept

• Personal browsing data — the route through the site and form content that was never sent: up to 90 days, then deleted automatically. Session recordings: three days.
• Statistical summaries — numbers only, with nothing identifying: up to 3 years.
• Orders, invoices and gift cards — as long as the gift card is valid, and after that as tax and accounting law require.
• Enquiries and the mailing list — until you ask to be removed.
• A photo uploaded to a gift card — deleted a month after the card is used or expires.

Your rights

Under the Israeli Privacy Protection Law, 5741-1981, you may:

• See the information we hold about you — we will send it within 30 days.
• Correct information that is wrong, incomplete, unclear or out of date.
• Delete — ask us to delete the information collected about you. We delete everything except what we are required by law to keep, such as invoices.
• Unsubscribe from the mailing list — from the link at the bottom of every message, or by contacting us.

For any of these: info@cookingstudio.co.il or 03-303-8115. If we have not answered you properly, you may contact the Privacy Protection Authority at the Ministry of Justice.

Security

The information is stored on secure servers in Israel, protected by passwords and transport encryption, and access is limited to the people who need it for their work. Every entry into a screen showing information about a particular visitor is logged.

We take reasonable measures against intrusion, but no system is completely immune. If a serious security breach involving your information occurs, we will notify you and the Privacy Protection Authority as required.

Minors

Booking classes and courses, kids' classes included, is done by an adult. We do not knowingly collect information about children under 14 other than through a parent or guardian. If you find that your child gave us information, contact us and we will delete it.

Changes

If we change this policy we will update the date below, and for a material change we will ask for your consent again.

Last updated: October 2026.

The binding documents (Hebrew)

Privacy policy · Purchase terms · Terms of use

In any case of a difference between this page and the Hebrew policy, the Hebrew policy prevails.