Privacy Policy
This document explains what data we collect, how we use it, and what your rights are. We believe in full transparency — not deliberately vague language.
1. Who We Are
Lis Quality is an independent quality management and regulatory affairs consultancy, registered in Israel and operating since 2002. Our website is lisquality.co.il.
For the purposes of Israel's Privacy Protection Law 5741-1981 and the Privacy Protection Regulations (Data Security) 5777-2017, Lis Quality is the data controller.
2. What Data We Collect
2.1 Contact Form Submissions
When you submit the contact form on this website, we collect and store:
| Field | Description |
|---|---|
| Full name | Your name |
| Company | Your organisation |
| Phone | Contact telephone number |
| Email address | Optional |
| Certification type | The service area you are enquiring about |
| Notes / Message | Free-text content you choose to provide |
| Source page | The page on our site from which the form was submitted |
| Full referrer URL | Including tracking parameters (utm_source, utm_medium, utm_campaign, gclid, etc.) if present |
| Interface language | Hebrew or English |
| Submission timestamp | Generated automatically at time of submission |
This data is stored in a secured database (Supabase) and also delivered by email to the Lis Quality team.
2.2 Cookies and Browsing Data
Subject to your consent, we collect browsing data through:
- Google Analytics 4 (GA4, ID: G-PRRJQ4C96Z) — page views, session duration, user behaviour
- Google Ads Conversion Tracking (AW-16491403118) — conversion measurement from paid advertising
- Google Tag Manager (GTM-NXRDKJZX, GTM-K38Q9X5S) — tag management
2.3 dataLayer Click-Tracking Events
After consent is granted, the site pushes the following events to the analytics data layer:
phone_click— click on a phone numberwhatsapp_click— click to open WhatsAppform_submit— form submissiongenerate_lead/lead_form_submission— conversion events
2.4 Local Storage
We store exactly one key in your browser's localStorage: lis-consent — your consent decision ("granted" or "denied"). No personal data is written to localStorage.
2.5 What We Do Not Collect
- No user accounts are created on the public website
- No device location, camera, microphone or sensor access
- No automated profiling for decision-making purposes
3. Legal Basis for Processing
| Processing activity | Legal basis |
|---|---|
| Responding to a contact form submission | Legitimate interests — responding to a business enquiry you initiated |
| Sending lead notification emails | Legitimate interests — necessary to complete the enquiry process |
| Analytics and advertising cookies | Consent — explicit opt-in required before activation |
| Storing consent state in localStorage | Legitimate interests — necessary for correct operation of the consent banner |
For EU residents: Consent (Article 6(1)(a) GDPR) for analytics and advertising cookies; Legitimate interests (Article 6(1)(f) GDPR) for processing contact enquiries.
5. International Data Transfers
This website is hosted on Vercel and Supabase infrastructure in the United States. Contact form submissions are stored in the US.
For EU residents: Transfers of personal data to the United States are carried out under Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR. Both Vercel and Supabase incorporate SCCs in their standard data processing terms.
6. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Contact form records (Supabase) | 5 years from the date of submission |
| Lead notification emails | 5 years (Lis Quality internal email retention policy) |
| Analytics data (Google Analytics) | 14 months (GA4 default retention setting) |
| Consent state (localStorage) | Until manually cleared by the user |
8. Your Rights
Under Israel's Privacy Protection Law 5741-1981 (Sections 13–14)
- Right of access: Obtain a copy of the personal data we hold about you
- Right of correction: Correct inaccurate or misleading data
- Right of deletion: Request deletion of data collected unlawfully
Additional Rights for EU Residents under the GDPR
- Right of access (Article 15): Full information about how your data is processed
- Right to rectification (Article 16): Correction of inaccurate data
- Right to erasure / "right to be forgotten" (Article 17): Deletion of your data in defined circumstances
- Right to restriction of processing (Article 18): Limiting how your data is used
- Right to data portability (Article 20): Receiving your data in a structured, machine-readable format
- Right to object (Article 21): Objecting to processing based on legitimate interests
- Right to withdraw consent: Withdraw at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at info@lisquality.co.il. We will respond within 30 days.
9. Data Security
We implement security measures in line with the Privacy Protection Regulations (Data Security) 5777-2017:
- HTTPS encryption on all pages
- Database access restricted to authorised personnel only
- Our service providers (Supabase, Vercel) hold SOC 2 Type II certification
10. Children
This website is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this site, please contact us so we can delete it.
11. Changes to This Policy
We may update this policy periodically. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the site after changes are published constitutes acceptance of the revised policy.
12. Contact Us
For any privacy question, request, or complaint:
Lis Quality
Email: info@lisquality.co.il
Website: lisquality.co.il
EU residents also have the right to lodge a complaint with the data protection authority in their country of residence.