Privacy Policy

Introduction

Welcome to chromaluxe.co.il (the "Site"), operated by Or Many Fine Art Printing ("Company", "we", or "us"). Your privacy matters to us. This Privacy Policy explains what personal information we collect, how we use it, your rights under Israeli law, and how to contact us regarding your privacy.

This policy is an integral part of the Terms of Use. Use of the Site, including placing an order, signing up to our mailing list, or contacting us, constitutes consent to this policy.

1. Data Controller & Contact Information

Controller	Or Many Fine Art Printing (אור מני – אומנות הדפסה)
Address	8 Ha-Sadna Street, Unit 1-24, Holon, Israel
Phone	+972-50-340-4444
Email	info@ormany.co.il
Website	https://chromaluxe.co.il
Hours	Sunday-Thursday, 10:00-17:00 (GMT+2)

2. Definitions

• "Personal Information" – any information relating to you by which you can be directly or indirectly identified, as defined in the Israeli Privacy Protection Law.
• "Highly Sensitive Information" – information defined as such under the Law (as amended by Amendment 13), including health data, sexual orientation, political opinions, biometric data, genetic data, financial information, information about minors, location data, and more.
• "Processing" – any operation performed on Personal Information, including collection, recording, storage, modification, transfer, deletion, and use.
• "The Law" – the Israeli Privacy Protection Law, 5741-1981, as amended (including Amendment 13).

3. Information We Collect

A. Information you provide voluntarily

• Identification and contact details: first and last name, email address, phone number.
• Shipping address: street, house number, city, postal code.
• Order details: product type (HD Metal, acrylic, canvas, wood, framing, etc.), dimensions, quantity.
• Files you upload: photographs, artworks, and graphic files uploaded for printing.
• Communications: contents of messages, contact forms, chat, and WhatsApp.

B. Payment information

Your credit-card details are never stored on our servers. Payments are processed securely by authorized third-party payment processors: iCount and PayMe, and Shopify Payments / PayPal as applicable. These providers are PCI-DSS compliant.

C. Information collected automatically

• IP address, browser type, and operating system.
• Pages visited, time spent, referring source.
• Click and navigation data.
• Device information (device type, screen resolution, language).

D. Information from third parties

• Analytics: Google Analytics.
• Marketing pixels: Meta Pixel (Facebook/Instagram).
• Commerce platform: Shopify.
• Photo upload interface (iframe): Lovable.
• Cloud storage of uploaded images and files: Supabase.
• Email marketing: Mailchimp / ActiveTrail.
• Communication services: WhatsApp Business / chat.

4. Notice Obligation & Purposes of Processing (Section 11 of the Law)

In compliance with the notification duty under the Privacy Protection Law (as clarified by Amendment 13), we hereby disclose the following:

(a) Purposes of processing

• Order fulfilment – producing your prints, framing, packaging, and shipping.
• Customer service and support.
• Accounting, billing, and tax compliance.
• Improving the user experience and analyzing usage patterns.
• Sending direct mailings, promotions, and offers (subject to your explicit consent).
• Fraud prevention and Site security.
• Compliance with legal obligations (Consumer Protection Law, Standard Contracts Law, Income Tax Ordinance, VAT Law).

(b) Disclosure of information

The information is stored in the Company's database. It may be disclosed to external service providers that assist us (payment processors, shipping companies, email marketing providers, the Shopify platform, analytics and advertising tools), all subject to the requirements of the Law and appropriate confidentiality undertakings — as detailed in Section 5 below.

(c) Whether providing the information is legally mandatory

You provide information voluntarily and based on your consent. You are not legally obligated to provide any information. However, certain information (such as your name, shipping address, and payment details) is required to complete an order.

(d) Consequences of not providing information

Failure to provide essential information may prevent us from processing your order, delivering your product, or providing our services.

(e) Your rights

A full description of your rights — including rights of access, correction, and deletion — appears in Section 10 of this Policy.

5. Sharing With Third Parties

We do not sell, rent, or trade your Personal Information. We share information only in the following circumstances:

A. Service providers

• Payment processors: iCount, PayMe, Shopify Payments, PayPal.
• Shipping carriers: Israel Post, courier companies.
• Print and framing partners (where collaborative production is required).
• Cloud and platform providers: Shopify Inc.
• Photo upload interface (iframe): Lovable.
• Cloud storage of uploaded images and files: Supabase (stored in a secure Company-owned account, with encryption at rest and in transit).
• Email marketing tools: Mailchimp / ActiveTrail.
• Analytics and advertising tools: Google, Meta.
• Communication services: WhatsApp Business.

B. Legal requirements

When required by court order, by an authorized regulator, or to protect our legal rights.

C. Explicit consent

In any other case, we will share Personal Information only after obtaining your explicit consent.

6. Cookies and Tracking Technologies

The Site uses cookies and similar technologies (pixels, Local Storage). Cookies enable:

• Proper Site operation and remembering items in your shopping cart.
• Traffic analysis and user-experience improvement (Google Analytics).
• Personalized marketing and re-marketing (Meta Pixel).
• Recognising returning users.

You can block cookies through your browser settings; doing so may affect proper functionality of certain Site features.

7. Direct Marketing (Section 30A of the Communications Law and Section 17F of the Privacy Protection Law)

Marketing emails, SMS messages, WhatsApp messages, and similar communications will only be sent after we receive your explicit consent, in accordance with the Communications Law (Telecommunications and Broadcasts), 5742-1982 (the "Anti-Spam Law").

You may unsubscribe at any time:

• By clicking "Unsubscribe" in any marketing email.
• By emailing info@ormany.co.il with the subject "Unsubscribe".
• For SMS – by replying with "STOP".

Unsubscribe requests will be processed promptly, and no later than 30 days from receipt.

8. Information Security

We act to safeguard the information in accordance with the Israeli Privacy Protection (Information Security) Regulations, 5777-2017, and accepted industry standards. Security measures include:

• Encrypted communication via SSL/TLS.
• Storage on the Shopify platform, which complies with SOC 2 and PCI DSS.
• Access controls and authorization policies.
• Regular backups.
• Monitoring of unusual activity.

Notwithstanding the foregoing, no security system provides absolute protection. In the event of a serious security incident (as defined in the Regulations), we will act in accordance with our reporting obligations to the Privacy Protection Authority and will notify you, where required, if it materially affects your privacy.

9. Data Retention

• Order-related information: 7 years, in accordance with accounting and tax obligations.
• Marketing data: until you withdraw consent to direct marketing.
• Uploaded image files: until production is complete and up to 12 months from your last order (to facilitate reorders), unless you request earlier deletion.
• Analytics data: 26 months (Google Analytics default).
• Information collected for security and fraud prevention: as required by applicable law.

10. Your Rights Under Israeli Law

Under the Privacy Protection Law, you have the following rights:

A. Right of Access (Section 13)

The right to know whether your Personal Information is held in our database and to inspect it.

B. Right to Correction (Section 14)

If the information is inaccurate, incomplete, unclear, or outdated, you may request its correction.

C. Right to Deletion

You may request deletion of your information, subject to retention obligations under applicable law (such as accounting requirements).

D. Right to Object to Direct Marketing (Section 17F)

An unconditional right to be removed from our mailing list at any time.

E. Right to Removal from Direct Mail Service (Section 17F(b))

The right to request that information about you not be included in any "Direct Mail Service" operated by the Company.

F. Right to file a Complaint

If you cannot find a satisfactory resolution, you may file a complaint with the Israeli Privacy Protection Authority at the Ministry of Justice: www.gov.il — Privacy Protection Authority.

11. International Data Transfers

Some of our service providers (such as Shopify, Google, Meta, Lovable, Supabase, Mailchimp/ActiveTrail) store or process information outside Israel — primarily in the United States and the European Union. Transfers are made in accordance with the Privacy Protection (Transfer of Information to Databases Outside the State Borders) Regulations, 5761-2001, subject to appropriate safeguards including Standard Contractual Clauses, Data Processing Agreements, and provider commitments to a level of protection comparable to that under Israeli law.

12. Uploaded Files and Content

The photo-upload interface on the Site is provided as an iframe by Lovable, and the image and graphic files you upload are stored on Supabase cloud infrastructure, in a secure Company-owned account with encryption at rest and in transit. The files are stored solely for the purpose of fulfilling your order. Access to the images is restricted to Company personnel and to service providers required to fulfil the order (such as the print provider).

We do not use your photos for any commercial purpose, do not display them publicly, do not advertise them, and do not transfer them to third parties beyond the service providers required to fulfil your order. We recommend uploading only content that you own or are otherwise authorised to print.

13. Third-Party Links

The Site may contain links to external websites. This Privacy Policy does not apply to those sites, and we encourage you to review the privacy policy of any site you visit.

14. Minors

The Site is not intended for use by individuals under the age of 18. We do not knowingly collect Personal Information from minors under 18 without parental consent. If you become aware that information was provided by a minor, please notify us and we will take steps to delete it.

15. Changes to This Policy

We may update this Policy from time to time. Material updates will be posted on the Site and become effective 30 days after publication. The "Last updated" date appears at the top of this document.

16. Governing Law and Jurisdiction

This Policy is governed exclusively by Israeli law. Any dispute will be subject to the exclusive jurisdiction of the competent courts in Tel Aviv-Yafo.

17. Contact Us

For privacy-related inquiries, exercising your rights, or any questions about this Policy, please contact us:

Email	info@ormany.co.il
Phone	+972-50-340-4444
Address	8 Ha-Sadna Street, Unit 1-24, Holon, Israel
Hours	Sunday-Thursday, 10:00-17:00 (GMT+2)

---

This document reflects the Company's obligations under Israeli law, in particular Amendment 13 to the Privacy Protection Law. It does not constitute legal advice. For questions or business-specific tailoring, we recommend consulting a privacy-law attorney.