Privacy Policy

Last Updated: 26.08.2025

Privacy Contact Information:

Email Address: info@mero.design
Telephone Number: 0544301903
Full Address:
Designated Privacy Officer of the Company: Maya

1. Scope of this Policy

This Privacy Policy template is intended for content/portfolio websites without online purchases.
The policy applies to the website, contact forms, mailing and CRM systems, and communications by email/phone.

2. Definitions

“Personal Data” – Any information about an identified or identifiable individual (name, email, phone, IP address).
“Processing” – Collection, storage, use, transfer, deletion.
“Controller” – Your business, when determining the purposes and means of processing.
“Processor” – External service providers processing data on your behalf.

3. Information We Collect

Data from contact/download forms – name, email, phone, inquiry details.
b. Newsletter subscriptions – name, email, mailing preferences.
c. Technical data from website usage – IP address, cookies, pages viewed, session duration, referral sources.
d. [Optional] Files you choose to attach when submitting an inquiry.

4. Purposes of Processing

Responding to inquiries and providing information about services.
Professional and marketing communications, subject to consent.
Analytics and improvement of the website and user experience.
Website security and prevention of fraud/misuse.
Compliance with legal requirements.

5. Cookies and Similar Technologies

We use cookies for operation, analytics, and marketing purposes.

A cookie banner provides options: Accept / Decline / Manage Preferences.
Until a choice is made, non-essential cookies will not be loaded.
A permanent “Manage Cookie Preferences” link will appear in the site footer.

6. Legal Bases for Processing

Consent – Newsletter subscriptions, non-essential cookies.
Legitimate Interest – Responding to inquiries, improving the website, ensuring security.
Legal Obligation – Retaining basic/accounting records as required.

7. Data Sharing

Cloud, CRM, mailing, and analytics providers – under DPA and appropriate safeguards.
Service providers (freelancers/agencies) with minimal access and confidentiality obligations.
Authorities – when required by law or court order.

8. International Data Transfers

Data may be processed on servers of providers outside Israel. Transfers will comply with applicable laws and appropriate safeguards.

9. Data Retention and Deletion

Inquiry/form data – retained according to the purpose of the inquiry and up to 24 months, or until deletion request.
Mailing list data – until unsubscribed or according to defined retention policies.
Logs – in accordance with security and operational requirements.

10. Data Security

Minimal access control, 2FA on sensitive systems, use of VPN for remote work.
Security updates, antivirus, firewalls, endpoint encryption, and backups.
Incident response and backup/recovery procedures.
No system is fully secure, but measures are taken to reduce risks.

11. Data Subject Rights

Rights include access, rectification, deletion, objection to direct marketing, and request for restriction – in accordance with applicable law.

To exercise these rights, please use the contact details provided at the beginning of this policy.

12. Direct Marketing and Opt-Out

We send professional/marketing content only with consent. Each communication includes an unsubscribe link.
You may also request removal by contacting our support email.

13. Minors

The website is not intended for individuals under the age of 18. If we become aware that data was collected about a minor in violation of this policy, we will act to delete it.

14. Changes to this Policy

We may update this Privacy Policy from time to time and will note the update date. Material changes will be highlighted in a reasonable manner.

15. Contact