Privacy policy

Who collects the data

The site is owned and operated by Giraffa Urban Experiences Ltd., company no. 516096815, Hanatziv 41, Tel Aviv, Israel. For any privacy question write to info@biss.tours.

This site uses no cookies

There are no cookies, no browser storage, and no analytics or advertising tools of any kind. Everything the page loads comes from our own servers: no external fonts, no embedded social media, no third party scripts. That is also why there is no cookie consent banner here, because there is nothing to consent to.

What we ask for, and when

Only what we need in order to answer you. Data is collected only when you choose to submit a form:

• Contact form: name, email, your message, and a phone number that is optional
• Creator signup: name, email, phone, city, a link to your work if you have one, and a few words about you
• Simply browsing the site collects nothing

What we use it for

Only to reply to that specific enquiry. We do not send marketing email to people who contacted us through the site, and we do not sell, rent or pass the data to third parties for marketing.

Who receives it

Enquiries reach us by email through Resend, an email delivery provider. Beyond that, the data goes nowhere else. The site is hosted on Vercel, which sees technical traffic data as any web server does.

Purchases happen elsewhere

This site markets and explains only; no purchase takes place here. Purchases happen in the system at app.biss.tours, where payment details are handled by the payment processor. Card details never pass through us and are never stored by us. At checkout, the consents you tick are recorded with a timestamp.

How long we keep it

An enquiry stays in our mailbox as long as it is relevant for handling and record keeping. You can ask us to delete it at any time.

Your rights

Under Israeli privacy law you may review the data we hold about you, ask to correct it if it is wrong, and ask us to delete it. One email is enough, and we will handle it within a reasonable time.

Security and incidents

The site is served over HTTPS only. If a material security incident occurs, we will report it to the Privacy Protection Authority and to those affected, as Amendment 13 requires.

Changes

If this policy changes, the date at the top will change with it. If we ever add analytics or cookies, we will update this page and ask for consent before switching them on.