Privacy policy

This policy explains what information is collected when you use biyohub.com, the contact form, the configurator, the preparation questionnaire and the engagement and payment process; for what purposes we use the information; who it may be shared with; how long it is kept; and what your rights are in relation to it.

The Hebrew version of this policy is written in the masculine form for convenience only and is addressed to all genders.

1. Data controller

Biyohub is a brand operated by Or Harazi and Barak Dan, who are the controllers of the information collected through the site and the services described in this policy.

Business number: 322992868

Address: HaEla 19, Rishon LeZion

Email: [email protected]

Phone: 055-918-5425

Website: biyohub.com

2. What information we collect

How much information is collected depends on how you use our site and services.

We may collect the following types of information:

• Contact details - full name, phone number, email address, business name and any further details you provide to us.
• Your configurator selections - the services and options you picked, free text you entered to describe your requirements, and the configuration built from your selections.
• Quote information - the price or quote computed from your selections, the components included in it and the relevant version of the quote.
• Preparation questionnaire information - if you choose to fill in the optional preparation questionnaire, we keep the answers you provided, including partial answers saved automatically, and the state of the questionnaire.
• Engagement information - the relevant contract and quote, the transaction details, the time of approval and the record of your consent to the documents presented as part of the engagement.
• Payment and transaction information - the transaction amount, transaction date, payment status, transaction or authorization identifiers, a payment token where one is needed for recurring charges, and further operational information relating to the transaction received from the payment provider.
• Records of consents given on the site - including a record of the consents given, the version of the relevant consent text and the technical information needed to evidence the consent.
• How you reached the site - sanitized, bounded information about how you arrived, such as the referring page, UTM tags and click identifiers from advertisements.
• Technical information - IP address, browser and device type, access times and basic technical usage data needed to operate the site, secure it and prevent abuse.
• Cookies and session identifiers - as detailed further in this policy.

3. Payments, Cardcom and tokenization

Payments on the site and within an engagement with Biyohub are processed through Cardcom, which acts as an external payment provider.

The full credit card number and the card security code (CVV) do not pass through Biyohub systems and are not stored in our systems. Card details are entered and processed within Cardcom's payment environment.

Biyohub does not store the full credit card number or the CVV in its database.

Where a transaction includes a recurring service, such as a monthly payment, tokenization is used. Under it, Cardcom creates a payment token used to make future charges in line with the engagement approved by the customer.

The token is not the full credit card number and is not the CVV. It serves as an identifier for carrying out payment operations through the payment system.

Biyohub may store the token, or an identifier associated with it, together with the customer and engagement details, to the extent needed to make recurring charges, manage the engagement, handle payments and refunds, and handle faults or disputes relating to the transaction.

In addition, we may keep operational information about the transaction, such as amount, date, status, transaction and authorization identifiers, and the results of the payment process.

Processing of payment details by Cardcom and by the financial parties involved in carrying out the transaction may also be subject to their own terms and privacy policies.

4. Cookies and session identifiers (Cookies)

Most cookies on the site are essential or functional cookies needed to operate the site, secure it and prevent abuse.

Among others we use:

• A configurator cookie or session identifier - to keep your configurator session and link it to your inquiry.
• A questionnaire resume cookie - which lets you continue the optional preparation questionnaire from where you left off, including through a secure resume mechanism.
• Security cookies of infrastructure providers - including Cloudflare and Turnstile, to protect against abuse and automated submissions.
• The biyohub_consent cookie - stores your choice regarding advertising measurement so we do not ask for the same choice on every visit. The cookie is kept for 180 days and is needed to manage your choice.
• Meta advertising-measurement cookies, such as _fbp and _fbc - loaded in the browser only after you have given explicit approval. You may decline this measurement without it affecting your use of the site, and change your decision through the measurement settings on the site.

5. Advertising measurement and sharing with Meta

We advertise Biyohub's services online and use limited information to measure the effectiveness of advertising.

For that purpose, information about events that occurred on the site - such as starting to use the configurator, viewing a price or submitting an inquiry - may be transferred to Meta Platforms Ireland Ltd., which operates Facebook and Instagram among others.

The information may include pseudonymous advertising identifiers, a click identifier from an advertisement, IP address, technical information about the browser, the type of event and its time, and the quote amount where that is relevant to measuring an inquiry.

We do not transfer to Meta the content of your inquiry, the free text you entered in the configurator or your preparation questionnaire answers.

Contact details such as phone number and email address are not transferred to Meta by default. If advanced matching based on those details is enabled in future, they will be transferred only after appropriate processing and in a one-way cryptographic form, not as visible text.

Meta processes information transferred to it in accordance with its own policy.

Advertising measurement is not a condition for receiving a service from Biyohub.

6. The purposes for which we use information

We use the personal information collected for the following purposes:

• receiving inquiries and handling them;
• contacting prospects and customers;
• keeping configurator selections and preparing quotes;
• preparing tailored contracts and quotes;
• managing the engagement process with the customer;
• carrying out transactions and payments;
• making recurring charges where the customer has engaged in a service that includes such a charge;
• issuing refunds and handling payment problems;
• recording consents, contracts, quotes and transactions;
• internal management of inquiries and customers;
• keeping preparation questionnaires and allowing them to be continued securely;
• sending operational messages relating to the inquiry, the engagement or the transaction;
• bookkeeping, business record-keeping and complying with obligations that apply to us by law;
• securing the site and Biyohub's systems;
• preventing fraud, abuse, attacks and bots;
• handling faults, queries, disputes and legal proceedings;
• advertising measurement, to the extent and on the terms described in this policy.

Information is not used for a purpose incompatible with the purposes for which it was collected, unless there is consent or authority to do so by law.

7. What we do not do with your information

We do not sell personal information.

We do not transfer personal information to third parties for their own marketing.

We do not use content you provide to us in inquiries, questionnaires or engagements to train artificial-intelligence models.

We do not store full credit card numbers or CVV codes in Biyohub systems.

Information is transferred to service providers needed to operate the site, provide the service, carry out payments, secure the service and measure advertising only for the purposes described in this policy.

8. Providing information is voluntary

As a rule, you are not required by law to provide us with personal information, and you do so voluntarily.

However, some information is needed in order for us to provide a particular service.

For example:

• without suitable contact details we cannot handle an inquiry or get back to you;
• without the details needed to prepare a contract and a quote we cannot complete the engagement;
• without completing the payment process through the payment provider, a transaction requiring payment cannot be carried out;
• the preparation questionnaire is optional and may be skipped;
• approving advertising measurement is not mandatory, and declining it does not prevent use of the service.

9. Sharing information and service providers

We do not sell your personal information.

We rely on providers and authorized parties to operate the site and provide the service. Information is transferred to them only to the extent needed for the role they perform.

Among others, we use the following:

• Railway - hosting and running the site's systems;
• Cardcom - payment processing, clearing, creating payment tokens and making charges in line with the engagement;
• Cloudflare - content delivery network, security and the Turnstile mechanism;
• Cloudflare R2 - media file storage;
• Meta Platforms Ireland Ltd. - advertising measurement, to the extent set out in this policy;
• Biyohub's email platform based on Amazon SES - sending email messages and notifications;
• authorized Biyohub staff and service providers - to the extent access to the information is needed for their role;
• professional advisers, bookkeeping providers or legal parties - where needed to provide the service, run the business or protect legal rights;
• authorities and competent bodies - where disclosure of the information is required by law.

As part of carrying out a credit transaction, information needed to complete the transaction may also be processed by credit card companies, banks and other financial bodies involved in the payment process.

10. Transfers of information outside Israel

Some of the service providers we use may process or store information outside Israel, including in the United States and the European Union.

Such transfers are made in order to operate the services described in this policy and in accordance with the applicable legal provisions.

11. Data retention

We keep information only for as long as needed for the purposes for which it was collected, for managing the engagement and the business, and for meeting legal, accounting or other requirements that apply to us.

Inquiries that do not become a customer engagement may be kept for up to 24 months from the date of the inquiry or from our last communication with you.

Information relating to customers, contracts, quotes, payments, transactions, invoices, queries, disputes and business or legal records may be kept for a longer period to the extent needed for the engagement, for running the business or for meeting legal requirements.

A payment token used for recurring charges will be kept or remain active for as long as it is needed for the engagement and the charges approved under it, and thereafter in line with operational need, the agreement and the provisions of the law.

Preparation questionnaire answers, attribution data and consent records are kept as part of the lifecycle of the inquiry or engagement they belong to.

Secure questionnaire resume links expire automatically after 14 days. We do not store the raw resume token, only a one-way digest of it.

You may contact us with a request to delete information. The request will be considered in accordance with the law, the purposes for which the information is kept and the obligations that apply to us.

12. Information security

We take accepted and reasonable security measures appropriate to the nature of the information and the service.

These measures include, among others, encryption of traffic using HTTPS/TLS, rate limiting, server-side validation and verification of data, security headers, access restrictions and mechanisms to prevent automated abuse.

One of the measures we use to reduce exposure to financial information is the use of an external payment provider and tokenization: the full credit card number and the CVV are not stored in Biyohub systems.

That said, no computer system or security method can guarantee absolute protection against every risk, fault or intrusion.

13. Your rights regarding your information

Under the Protection of Privacy Law, 5741-1981, you have the right to review personal information about you held in a database, subject to the conditions set out in the law.

If information held about you is not correct, complete, clear or up to date, you may request that it be corrected in accordance with the law.

You may also contact us with a request to delete information. Deletion requests will be considered in accordance with the law and our legitimate need to continue holding certain information, including for performing a contract, managing payments, bookkeeping, handling disputes and meeting legal obligations.

To exercise your rights, you can contact us using the contact details at the end of this policy.

We may ask for reasonable details to verify your identity before disclosing information or making a change to it.

14. Marketing communications

Providing details through the contact form, the configurator, the preparation questionnaire, the purchase process or payment for a service does not in itself constitute consent to receive marketing communications.

Promotional content will be sent only where there is appropriate consent or authorization by law.

Where marketing communications are based on consent, that consent may be withdrawn using the opt-out options presented.

Operational messages needed to handle an inquiry, carry out a transaction or deliver the service are not marketing messages.

15. Minors

The services on the site are intended mainly for businesses, organizations and professionals and are not intended for minors.

We do not knowingly collect information about minors through the site.

If you become aware that a minor has provided us with information contrary to this policy, you may contact us and we will consider deleting it in light of the circumstances and the law.

16. Changes to this privacy policy

We may update this policy from time to time, including as a result of changes to the site, the services, the providers we use or legal requirements.

The current version will be published on this page, stating the version number and the date of the last update.

A material change in how we use personal information will be handled in accordance with the applicable legal provisions.

17. Privacy contact

For any question about this policy, a request to review or correct information, or any other privacy-related request, contact us:

• Biyohub is a brand operated by Or Harazi and Barak Dan, who are the controllers of the information collected through the site and the services described in this policy.
• Email: [email protected]
• Phone: 055-918-5425
• Website: biyohub.com
• Address: HaEla 19, Rishon LeZion