Privacy Policy

You have reached the privacy policy page of the Sign & Drive website, company no. 516083680, located at 23 Sderot HaRishonim, Rishon LeZion (hereinafter respectively: the “Company” or the “Website”).

The Website and the brand were established and are managed by the Company. The Company may be contacted by email at info@signandrive.co.il or by mail at the Company’s address specified above.

The Company respects the privacy of Website users and its customers and is committed to protecting it. Accordingly, the Website’s privacy policy is set out below. Please note that the cookie policy page, which forms an integral part of the Privacy Policy, can be viewed in the Website’s footer.

1. Review of the Terms of Use and Privacy Policy before use:

1.1 Use of the Website and the information appearing on it, as well as any order placed through the Website, is subject to the Terms of Use and Privacy Policy. It is important to read this document fully and carefully, as its provisions are binding and cannot be amended. Use of the Website in any manner will be deemed full and express consent to the Privacy Policy. If all or any of these terms are unacceptable to you, you must refrain from any use of the Website and the information it contains.

1.2 Website users must act in accordance with the Privacy Policy, which applies to every type of use of the Website. Because these matters are dynamic, the Company reserves the right to update the Privacy Policy from time to time, and users are required to keep abreast of relevant notices. If the Privacy Policy is updated, users will be notified in advance.

2. Use of the Website:

2.1 Use is subject to the Terms of Use and Purchase, which are set out in a separate document. The Terms of Use can be accessed from the Website’s footer.

3. Privacy Policy:

3.1 Information the Company collects and retains about Website users as a result of their use of the Website:
When the Website and the Company’s digital assets are used, technical and/or personal information about users is collected and retained, as detailed below. Please note: there is no legal or other obligation to consent to the collection and processing of information. However, use of the Website itself involves the collection of information (as detailed in the Cookie Policy, which may be declined separately), and placing an order through the Website involves the collection of details. Therefore, providing information when placing an order constitutes express consent to its collection. If you wish to refuse the collection of any information, you must decline the Cookie Policy and refrain from placing an order through the Website.

The information collected and the relevant explanations are set out below:
(a) Statistical information about usage habits (passive): When the Website is used, information about users’ habits will be collected in order to tailor information, offers, advertisements and services found to be of interest to them. This includes information about activity patterns, times, browsing paths, page visits, purchase attempts, smart-product usage habits and technical data about the user’s device (such as IP address, device identifier, browser type and geographic location, all in accordance with the device settings). As stated in the Cookie Policy, the Company also uses cookies and PIXELS originating from third parties, including GOOGLE, META and other social networks. For more information about cookies and PIXELS, please review the Company’s Cookie Policy.
(b) Information provided by users (actively): Details knowingly and voluntarily provided by users when joining the mailing list or placing an order. This information may include full name, telephone number, home address and email address.
(c) Information collected to carry out a transaction: Information required to carry out and complete the transaction is collected. In addition to details provided directly by users, information about orders and when they were placed is also collected, as is information relating to the provision of customer service, where relevant. Regarding payment methods, the Company does not retain payment-method details; payment is made securely through an external provider named PayPlus. For further details, please review the privacy policy and terms of use governing the external provider’s services.
(d) Information collected after and in connection with transactions: Details of orders, returns and exchanges, discounts and credits granted, communications with customer service, fulfillment instructions, partial data from incomplete purchase processes, and any information concerning the use of the Company’s digital assets.
(e) Information provided by users through their use of social networks: If users use social-network services such as X, Google, Meta, LinkedIn and others, certain information about them may be transferred to the Company by those platforms. This is subject to the privacy policies and terms of use of those platforms and the users’ settings on them. The Company is in no way responsible for the activities of social networks. Users are nevertheless advised to review the privacy policy and terms of use of each platform, particularly social networks.

3.2 Purpose of retaining and collecting information: The Company collects and processes the information detailed in Section 3.1 above to contact prospective and actual buyers, for its contractual needs (to fulfill its legal obligations and protect its legal interests), for its commercial, business and marketing needs, and to improve the user and customer experience. The Company may use details relating to you for mailings and to send advertising material, subject to express consent. Website users expressly authorize the Company to collect the information—including anonymous, aggregated and statistical information—and use it for the purposes specified above and below, including to tailor services, offers and advertisements, which users acknowledge they understand may be sent to them.

3.3 Parties with access to the information: Access to information other than statistical or anonymous information is restricted to the Company, its owners, its employees and service providers with which it has agreements relating to the operation of the Website and the Company’s activities in connection with actual vehicle orders. All parties granted access to the information are required in advance to undertake to maintain confidentiality and prevent its disclosure to any other party. Users acknowledge and agree that their information may also be transferred outside the borders of the State of Israel, including for storage and processing in countries that do not provide the same standard of protection as that afforded under Israeli law with respect to users’ privacy and the security of their personal information. Users expressly acknowledge and consent to the transfer outside Israel of information they provided or that was collected about them. In addition, the Company may disclose information to a state authority, public body or other authorized entity if required to do so by a valid court order or binding provision of law. In every such case, the Company will act to limit the scope of disclosure to the minimum required in the circumstances.

3.4 Information retention period: The Company will not retain the information for longer than necessary to fulfill the purposes for which it was collected or provided, except where there are grounds or a necessity to retain it.

3.5 Your rights regarding the information: (a) Access: You have the right to determine whether the Company holds information relating to you and to request access to it at any time. (b) Removal: You also have the right to request that details relating to you, or some of them, be removed, not retained or no longer used. (c) Correction and deletion: You have the right to demand the deletion of information where permitted by law. (d) Objection: You also have the right to object to the use of certain information for marketing or other purposes. (e) Withdrawal of consent: You have the right to withdraw your consent to the use of information at any time. Withdrawal of consent will not affect the lawfulness of information processing that took place beforehand. Any request concerning these matters must be submitted in writing by email to: info@signandrive.co.il. The relevant person responsible for privacy matters at the Company will respond within 14 business days. For this purpose, Mr. Yevgeny is the relevant person. Those requesting access to information should note that it will generally be provided digitally. The Company may therefore require you to prove your identity before information relating to you is provided.

3.6 Information security and confidentiality: The information is stored securely and in accordance with the law. For this purpose, the Company employs electronic and physical measures adapted to legal requirements, to the extent that the law applies to the Company, and follows industry-standard information-security procedures intended to help protect against information leaks, unauthorized access and use, and the transfer, disclosure, copying and deletion of information. The Company does everything it can to minimize existing risks. Nevertheless, it is important to emphasize that no fully comprehensive and absolute security solution has yet been found anywhere in the world. Users understand that services based on information processing always entail some risk, particularly when information is transmitted over the internet. They consent to the provision and collection of information in accordance with the Privacy Policy and the law and assume the risk of information-security incidents that may affect the confidentiality, integrity or availability of the information. The Company will bear no liability for any resulting damage caused to users or anyone acting on their behalf.

3.7 To protect the information and maintain its confidentiality, the Company takes the following measures: (1) managing and restricting access permissions to the Company’s information systems; (2) password management; (3) installing firewalls; (4) documenting access to the Company’s software and security incidents that raise concerns about harm to the integrity of the information or its unauthorized use; (5) frequent periodic backups of the information; (6) adopting internal organizational procedures to protect and secure the information; (7) conducting routine audits to ensure that the above rules are enforced; (8) operating a secure payment system using advanced encryption technology under the stringent PCI DSS Level 1 security standard; (9) reporting serious information-security incidents. The servers used by the business are hosted by Fly.io, and details relating to the mailing list and mailings may be synchronized with Google systems. Access to the Company’s servers and computers is secured using the SSL protocol. As stated, the physical servers are maintained by the hosting companies rather than by the business. The business follows secure-browsing rules and conducts penetration tests periodically.

4. Disclosure of information to third parties:

4.1 As detailed in Section 3 concerning the Privacy Policy, the Company protects users’ privacy and accordingly will not, on its own initiative, provide third parties with information that reveals users’ personal details. However, the Company may depart from this provision and provide required information in the following cases: (a) upon receiving the user’s consent; (b) if a court order is issued against the business or its owners, they will comply with it; (c) if legal disputes arise between the Company and its users, the Company may use the information it has collected; (d) as part of the Company’s collaborations with its business partners; (e) to enforce the Company’s Privacy Policy and if use of the information is necessary to prevent serious and immediate harm; (f) if the information may be relevant to detecting, preventing or addressing deception, fraud, abuse, safety and security issues, or to identifying, analyzing and resolving technical problems; (g) if the business changes its corporate structure, it may also use the information under the new structure, and if this is regarded as a transfer to a third party, users will be deemed to have consented to that transfer.

4.2 The provisions of Section 4.1 above do not apply to the use or transfer of statistical information that does not reveal users’ identities.

5. General and miscellaneous:

5.1 Reporting a privacy violation: If you believe your privacy has been violated during or as a result of using the Website, please contact the Company immediately by email at info@signandrive.co.il.

5.2 Governing law: The provisions of the Terms of Use and Privacy Policy are governed exclusively by the laws of the State of Israel. Local jurisdiction over any dispute relating to these provisions will be determined in accordance with Israeli law.

5.3 The Company does not undertake to operate the Website and has the exclusive right to discontinue its operation at any time or change the nature of its operation without providing any reason or advance notice. Website users will have no claim, action, complaint or demand in connection with the discontinuation of operations or any change in their nature.