This policy explains what information srvshop.co.il collects, what it is used for, who it is shared with, and what your rights are. It is written in accordance with the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13, which came into force in August 2025.
The store is operated by Service 111 Business Computing Ltd, 4 HaTe'ena Street, Mazkeret Batya 7684624, Israel. The company has appointed a Data Protection Officer (DPO), responsible for privacy matters and for answering enquiries from the public, and a Chief Information Security Officer (CISO), responsible for protecting the information.
What we collect
We work to the principle of data minimisation: we collect only what is actually needed to fulfil the order and provide service.
- Order details: name, company name and company registration number (for a business purchase), phone, email and delivery address.
- Payment details: charging is performed by a licensed payment processor. Card details are never stored in our systems and we have no access to them.
- Purchase history and records of service and warranty enquiries.
- Technical information generated by browsing: IP address, browser type and pages viewed - for security, fraud prevention and correct operation of the site.
We do not set out to collect information of special sensitivity as defined in the law - medical, biometric, genetic, criminal record or political opinion.
Notice at the point of collection
When you provide information we tell you, as the law requires: the purpose for which it is given, our identity and the DPO's contact details, who the information may be passed to and why, and your right to review it and ask for it to be corrected or deleted. Providing the information is voluntary, but without it we cannot fulfil the order.
Purposes of use
- Fulfilling the order, ordering the hardware from the distributor and shipping it to you.
- Issuing the invoice and keeping the accounting records the law requires.
- Providing service and handling warranty claims and returns.
- Information security, fraud prevention and operating the site.
- Meeting legal obligations and requirements of competent authorities.
Marketing email is sent only to those who gave separate, explicit consent, and consent can be withdrawn from any message or by contacting us.
Sharing with third parties
We do not sell information and we do not pass it to third parties for marketing. Information is shared only as far as is needed to fulfil the order, or where the law requires:
- The distributor or supplier the hardware is ordered from - name and address details, for delivery only.
- The payment processor - to carry out the charge.
- The courier - name, address and phone, for the delivery.
- The company's internal management and accounting systems, where the order, the invoice and the service record are held.
Suppliers that process information on our behalf are engaged under terms obliging them to protect it and to use it only for the purpose it was given.
Cookies
The site uses cookies that are strictly necessary for it to work - keeping your basket, keeping you signed in, and security. These cannot be switched off, because without them the site does not function. Measurement or advertising cookies are loaded only after you consent, and you can change that decision at any time through the site's cookie settings or through your browser.
Retention
Order and invoice information is kept for as long as the law requires accounting records to be kept. Information no longer needed for the purpose it was collected for is deleted or anonymised.
Information security
Traffic to the site is encrypted (TLS). Information is handled according to the company's written procedures, which follow the ISO 27001 and ISO 27799 standards, under CISO and DPO oversight. We operate access control, encryption, monitoring, periodic testing and risk assessment, and we maintain the processing records required by Amendment 13.
Your rights
The law entitles you to review the information held about you, to ask for it to be corrected if it is inaccurate, and to ask for it to be deleted, subject to retention duties imposed by law. We will answer within 30 days. If we refuse a correction or deletion request you will receive a reasoned notice under section 14(c) of the law, and you may apply to the Privacy Protection Authority.
Security incidents
If a serious security incident affects your information, we will act on the reporting duties set out in Amendment 13 - to the Privacy Protection Authority, and to those affected where the law requires it.
Privacy contact
The Data Protection Officer is your contact point for anything to do with privacy - reviewing information, asking for correction or deletion, and any question about this policy.
- Name: Lior Levi, Data Protection Officer (DPO)
- Email: dpo [at] srvit [dot] co [dot] il
- Phone: +972-72-2281396
- WhatsApp: +972-72-2788080
- Post: 4 HaTe'ena Street, Mazkeret Batya 7684624, P.O.B. 5272, Israel
The company's Chief Information Security Officer is responsible for protecting the information and managing risk, and works alongside the DPO. Enquiries from the public always come through the DPO.
Changes to this policy
This policy will be updated as needed to reflect changes in the law, in technology or in the service. The updated text is published on this page, and a material change will be announced prominently.