Privacy policy

Last updated: 17 October 2026 · This document is a general template, not legal advice.

Who we are

The Almond Flour website is operated by קמח שקדים בע"מ, company / business no. 516000000, רחוב הלחם 1, תל אביב ("we"). We respect your privacy and follow Israel's Protection of Privacy Law, 5741-1981, the Privacy Protection (Data Security) Regulations, 5777-2017, and Amendment No. 13 to the Law. This policy explains what we collect, why, how long we keep it and what your rights are.

What we collect

Order details: name, phone, email, delivery address, the products ordered, the pickup or delivery time and any notes you wrote (including allergy information you chose to give).
Customer account: if you open one, also a password (stored one-way encrypted), saved addresses, favourite products and a birthday if you chose to give it.
Payment: payment is handled by a payment provider. We never see or store your card number; we keep only the transaction reference and payment status.
Reviews and messages: what you write in reviews and messages to us.
Newsletter: your email address and language, if you subscribed.
Technical data: essential cookies (cart, login, language) and basic usage data, as described in the cookie policy.

You are not required by law to give us information, but without order details we cannot fulfil your order.

Why we use it

To handle your order: preparation, payment, pickup or delivery, and updates about it by email and SMS.
To run your account and give customer service.
To send newsletters and offers, only if you agreed. You can unsubscribe at any time from the link in every message (Communications Law, section 30A).
To meet our legal duties (such as accounting records and invoices) and protect our rights.
To improve and secure the site.

Who we share it with

We never sell personal information. We pass information only to suppliers who help us run the service, and only as much as they need:

The payment provider (to take the payment).
Email and SMS providers (order confirmations and updates).
Couriers (name, phone and delivery address only).
The site's hosting and platform provider (CeraHex), which stores the data on secured servers.
Authorities, where the law requires it.

Some suppliers may store data outside Israel, as allowed by the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.

How long we keep it

Orders and invoices: as long as tax and accounting law requires (usually 7 years).
Customer accounts: while the account is active, or until you ask us to delete it.
Newsletter list: until you unsubscribe.
Backups: deleted in rotation under the site's backup policy.

Security

Data is kept on secured servers, traffic to the site is encrypted (HTTPS), passwords are stored one-way encrypted and third-party keys are stored encrypted. Only staff who need the data can reach it. No security is perfect; if a serious security incident happens we will act as the law requires, including reporting to the Privacy Protection Authority.

Your rights

Access: ask to see the information we hold about you (section 13 of the Law).
Correction and deletion: ask us to correct wrong or outdated information, or delete information we are not required to keep (section 14 of the Law).
Unsubscribe: at any time, from the link in a message or by contacting us.
Delete your account: from your account page or by contacting us.

For privacy requests: [email protected] or 03-0000000. We answer within 30 days. If you are not satisfied, you may contact the Privacy Protection Authority.

Children

The site is not meant for children under 18, and we do not knowingly collect information about them.

Changes

We update this policy from time to time. The version on the site, with its last-updated date, is the one that applies.