Privacy Policy

1. Introduction

Bruchim Habaim | ברוכים הבאים ("we," "us," or "our") operates the website and related services (collectively, the "Site"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our Site.

This Privacy Policy complies with the Israeli Protection of Privacy Law, 5741-1981 and its associated regulations, including the Privacy Protection Regulations (Data Security), 5777-2017. For users located in the European Economic Area (EEA), United Kingdom, or Switzerland, this policy also addresses your rights under the General Data Protection Regulation (GDPR) (EU Regulation 2016/679).

By accessing or using the Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use the Site.

2. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal data is:

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information above.

3. Information We Collect

We collect information in the following categories:

3.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, and authentication credentials. If you register as a real estate agent or broker, we may also collect your agency name, phone number, license information, and professional biography.
• Property Listings: If you submit property listings, we collect the listing details you provide, including property descriptions, addresses, prices, photographs, and contact information.
• Inquiries and Communications: When you submit a contact form, inquiry, or communicate with agents through the Site, we collect the content of your messages, your name, email address, and phone number.
• Search Preferences: When you save searches or set up price alerts, we collect your search criteria and notification preferences.
• Reviews and Feedback: If you submit property or agent reviews, we collect the content of your reviews and associated ratings.

3.2 Information Collected Automatically

• Usage Data: We automatically collect information about your interactions with the Site, including pages viewed, properties searched, links clicked, and features used.
• Device and Browser Information: We collect your IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Location Data: We may collect approximate location information based on your IP address to provide localized search results and content. We do not collect precise GPS location unless you explicitly grant permission.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies as described in Section 8 below.

3.3 Information from Third Parties

• Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive your name, email address, and profile information as authorized by you through that service.
• Property Data Sources: We aggregate property listing data from third-party sources, including real estate agencies, brokers, and listing services. This data relates to properties, not to individual users.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To operate the Site, display property listings, process your searches, facilitate communications between users and agents, and deliver the features you request.
• Account Management: To create and manage your account, authenticate your identity, and maintain your preferences and saved searches.
• Communications: To send you service-related notifications, including inquiry confirmations, price alerts, saved search notifications, and account security alerts. We will only send marketing communications with your explicit consent.
• Personalization: To personalize your experience by displaying relevant property recommendations, remembering your search preferences, and providing localized content.
• Analytics and Improvement: To analyze usage patterns, monitor Site performance, diagnose technical issues, and improve our services.
• Security and Fraud Prevention: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our Terms and Conditions.

4.1 Legal Basis for Processing (GDPR)

For users in the EEA, UK, or Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with our services (e.g., account management, property searches, inquiry handling).
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, ensuring security, and conducting analytics, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending marketing communications or using non-essential cookies. You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with legal requirements under Israeli or EU law.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Real Estate Agents and Brokers: When you submit an inquiry about a property or contact an agent, we share your name, email address, phone number, and message content with the relevant agent or broker to facilitate your request.
• Service Providers: We share information with third-party service providers who perform services on our behalf, including cloud hosting (database and storage providers), email delivery (SendGrid), payment processing (Stripe), mapping services (Google Maps), and analytics. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• With Your Consent: We may share your information for other purposes with your explicit consent.

6. International Data Transfers

Our Site is operated from Israel. If you are accessing the Site from outside Israel, please be aware that your information may be transferred to, stored, and processed in Israel and other countries where our service providers operate.

Israel Adequacy Decision: The European Commission has recognized Israel as providing an adequate level of data protection under GDPR Article 45. This means that transfers of personal data from the EEA to Israel are permitted without additional safeguards.

For transfers to countries that have not received an adequacy decision, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an equivalent level of protection.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account Data: Retained for the duration of your account and for up to 3 years after account deletion to comply with legal obligations and resolve disputes.
• Inquiry Data: Retained for up to 2 years after the inquiry is resolved.
• Usage and Analytics Data: Retained in aggregated, anonymized form indefinitely for analytical purposes. Identifiable usage data is retained for up to 12 months.
• Property Listings: Active listings are retained for the duration of their listing period. Expired or removed listings may be retained in archived form for up to 5 years for historical market data purposes.
• Legal Compliance: Where required by Israeli law or other applicable regulations, we may retain certain data for longer periods.

8. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Site to function properly, including authentication tokens, session management, and security features. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language selection, currency display, and search filters. These enhance your experience but are not strictly necessary.
• Analytics Cookies: Used to collect anonymized usage statistics to help us understand how visitors interact with the Site and to improve our services.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set.

9. Your Rights

9.1 Rights Under Israeli Law

Under the Israeli Protection of Privacy Law, you have the right to:

• Access your personal data held in our databases.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to the use of your personal data for direct marketing purposes.

9.2 Rights Under GDPR (EEA/UK/Swiss Users)

If you are located in the EEA, UK, or Switzerland, you have the following additional rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, including the Israeli Law, Information and Technology Authority (ILITA) or your local data protection authority.

9.3 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS). Sensitive data at rest is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. We use role-based access controls and multi-factor authentication for administrative access.
• Infrastructure Security: Our servers and databases are hosted on secure, SOC 2-compliant cloud infrastructure with regular security audits, intrusion detection, and automated vulnerability scanning.
• Incident Response: We maintain an incident response plan to address potential data breaches promptly. In the event of a breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe that we have inadvertently collected information from a child under 18, please contact us at [email protected].

12. Third-Party Services

Our Site integrates with the following third-party services, each of which has its own privacy policy:

• Google Maps: Used to display property locations on maps. Subject to Google's Privacy Policy.
• Stripe: Used for payment processing. Subject to Stripe's Privacy Policy.
• SendGrid: Used for email delivery. Subject to Twilio's Privacy Policy.

We encourage you to review the privacy policies of these third-party services to understand how they collect, use, and protect your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on the Site with a revised "Last Updated" date. For significant changes, we may also provide additional notice, such as an email notification or a prominent notice on the Site.

Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

15. Related Policies

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Site. Together, these documents form the complete agreement regarding your use of our services.