Legal

Privacy Policy

Last updated — · Working draft — pending final legal review

Draft notice. This document is a working draft prepared for the site owner and their legal counsel. Highlighted [ items ] are placeholders still to be confirmed. It is not legal advice and is not yet a final, binding notice — it must be reviewed by a qualified lawyer before the site goes live.

This policy explains what personal data ChiChi-Verse collects, why, and the choices you have. It is written to reflect duties under the Israeli Protection of Privacy Law (including Amendment 13) and, where it applies to you, the EU/UK GDPR.

Who is responsible for your data

The controller of your personal data is [ legal entity — ChiChi sole proprietor / Emberline company ], contactable at hello@chichi-verse.com, [ registered address ]. [ EU representative under GDPR Art. 27, if required ].

What we collect

  • Enquiry details you send us — your name, email, and message — through the contact form, the on-site enquiry widget, email, or Discord.
  • Lead-widget data. An embedded third-party widget (“Toolix Site Kit”) captures the enquiry fields you submit and routes them to our customer-relationship tool. Exact fields, provider, and any cookies it sets: [ widget fields, CRM vendor & host, cookies/trackers set ].
  • Payment information. Payments are handled by [ payment processor ]. We do not store full card details; the processor handles them under its own privacy terms.
  • Technical data your browser sends (e.g. device/browser type). Analytics: [ none / provider if any ].

Why we use it and our legal basis

  • To respond to your enquiry and provide the services you request (performance of a contract / your request).
  • To run and improve the business (legitimate interests), where that does not override your rights.
  • To send marketing only where you have separately opted in — see below. [ marketing: yes / no ].

Marketing

We will only send you marketing (newsletters, offers) if you have given clear, separate opt-in consent, in line with the Israeli anti-spam rules (Communications Law s.30A). Every marketing message identifies the sender and includes a working way to opt out. Submitting an enquiry is not, by itself, consent to marketing.

Who we share it with

We share data only with service providers who help us operate — our CRM/lead-widget provider, our payment processor, and our email provider — under agreements that limit their use of it. We do not sell your personal data. Full processor list and data-processing agreements: [ processor list ].

International transfers

We operate from Israel and your data may be processed there or by providers located elsewhere. Where the GDPR applies, transfers rely on an appropriate safeguard (for example, an adequacy decision or standard contractual clauses). [ transfer mechanism to confirm with counsel ].

How long we keep it

We keep enquiry and customer data for [ retention period ], then delete or anonymise it.

Your rights

Subject to the applicable law, you can ask us to access, correct, or delete your data, to restrict or object to processing, and (under GDPR) to receive a portable copy. To exercise any right, email hello@chichi-verse.com. If you are in the EU/UK, you may also complain to your local data-protection authority.

Cookies & tracking

The site itself uses only what is needed to function. Embedded third-party content (the enquiry widget and any social embeds) may set its own cookies; where required, we ask for your consent first via our cookie banner. See the banner's preferences to change your choice. Exact cookie inventory: [ cookie audit of widget & embeds ].

Children

The site is not directed at children and we do not knowingly collect data from anyone under [ 16 / 18 — confirm ].

Changes & contact

We may update this policy; the date above shows the latest version. Questions? Email hello@chichi-verse.com.