Privacy Policy
This policy explains what personal data JOTEB collects when you visit or buy from jotebbeauty.com, why we collect it, who we share it with, and the control you have over it.
Acest document juridic este publicat în limba engleză. Textul în engleză este versiunea autentică.
1. Who is responsible for your data
The data controller is , registered in Israel under company number , at .
For any privacy question, or to exercise the rights in section 7, write to office@joteb-perfume.com. We reply within one business day and resolve requests within 30 days.
2. What we collect and why
We collect only what a specific purpose requires. Each row below states the legal basis we rely on under the GDPR.
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, shipping address | Processing, shipping and supporting your order | Performance of a contract (Art. 6(1)(b)) | 7 years — tax and accounting law |
| Order contents, amount, currency, PayPal order ID | Fulfilling the order, refunds, accounting | Contract and legal obligation (Art. 6(1)(b), (c)) | 7 years |
| Abandoned checkout details | Understanding where checkout fails | Legitimate interest (Art. 6(1)(f)) | 12 months |
| Contact form: name, email, phone, message | Answering your enquiry | Legitimate interest (Art. 6(1)(f)) | 24 months from last contact |
| Pages viewed, time on page, referrer, coarse country, language | Understanding how the shop is used | Consent (Art. 6(1)(a)) | 14 months |
| Advertising and conversion identifiers | Measuring and targeting advertising | Consent (Art. 6(1)(a)) | Per provider, up to 13 months |
3. What we deliberately do not collect
- We do not store your IP address. A previous version of this site sent visitor IP addresses to a third-party geolocation service; that was removed. Country is now inferred from your browser’s own language settings, which never leave your device in identifiable form.
- We never see or store your full card number. PayPal handles card data end to end.
- We do not buy personal data, and we do not sell or rent yours.
- We do not use your data for automated decision-making or profiling that produces legal effects for you.
4. Cookies and similar technologies
Nothing beyond strictly necessary storage is set until you choose "Accept" in the cookie banner. If you never answer, or select "Reject all", no analytics or advertising technology loads at all — that choice is enforced in code, not merely recorded.
You can change your decision at any time through "Cookie settings" in the footer. Withdrawing consent stops the relevant scripts and deletes the cookies listed below.
| Name | Category | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| cookieConsent | Essential | JOTEB | Remembers your cookie choice | Until cleared |
| joteb_cart | Essential | JOTEB | Keeps your basket between visits | Until cleared |
| joteb_shipping | Essential | JOTEB | Retains checkout details you typed | Until cleared |
| joteb_language | Essential | JOTEB | Remembers your language | Until cleared |
| accessibility | Essential | JOTEB | Stores your accessibility preferences | Until cleared |
| _ga, _ga_* | Analytics | Distinguishes visitors and sessions | Up to 13 months | |
| _fbp, _fbc | Marketing | Meta | Attributes visits to advertising | Up to 3 months |
5. Who we share data with
We share personal data only with the service providers needed to run the shop. Each acts on our documented instructions under a data processing agreement.
- Base44: Hosting, application platform and database. Stores order, enquiry and analytics records.
- PayPal: Payment processing. Receives your name, address, order total and email in order to take payment. PayPal is an independent controller for its own purposes.
- Resend: Sends transactional email — order confirmations and enquiry notifications.
- Google (Analytics, Tag Manager): Usage measurement. Loaded only with analytics consent.
- Meta Platforms: Advertising measurement. Loaded only with marketing consent.
We also disclose data where the law requires it — for example to tax authorities, or in response to a valid legal order.
6. International transfers
JOTEB is established in Israel, which the European Commission recognises as providing an adequate level of data protection, so transfers from the EEA to us need no additional safeguard.
Some of the providers in section 5 process data in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, and where applicable on the provider’s certification under the EU–US Data Privacy Framework. You may request a copy of the safeguards in place.
7. Your rights
Wherever you live, we will honour the following on request. We do not charge for this, and we never make service worse because you exercised a right.
- Access: A copy of the personal data we hold about you.
- Rectification: Correction of anything inaccurate or incomplete.
- Erasure: Deletion, except where we must keep records for tax or legal reasons.
- Restriction: A pause on processing while a dispute is resolved.
- Objection: An objection to processing based on legitimate interests, including any direct marketing — which we stop immediately and unconditionally.
- Portability: Your data in a structured, machine-readable format, or sent directly to another provider.
- Withdraw consent: At any time, without affecting processing that already took place.
To exercise any of these, email office@joteb-perfume.com. We may ask you to confirm your identity before acting on a request about someone’s personal data.
8. Complaints
If you believe we have handled your data wrongly, please tell us first — most issues are a misunderstanding we can resolve quickly.
You also have the right to complain to a supervisory authority. In the EEA this is the authority in your country of residence, work or the place of the alleged infringement. In the United Kingdom it is the Information Commissioner’s Office. In Israel it is the Privacy Protection Authority at the Ministry of Justice.
9. How we protect your data
The site is served over HTTPS. Access to order and enquiry records is restricted to administrator accounts. Payment card data never reaches our systems. Backend functions validate and authorise every request rather than trusting the browser.
No system is perfectly secure. If a breach ever affects your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you directly where the law requires it.
10. Children
This shop is not intended for children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to this policy
When we change how we use personal data, we update this page and the date below. Where a change is material — a new processor, a new purpose — we ask for your cookie consent again rather than relying on a decision made against an older disclosure.
12. Contact
, .
Email office@joteb-perfume.com · Telephone .
Last updated: