Privacy Policy
Updated: 9/25/2026
SimplyCard is a service operated by Simple Web, registered Israeli partnership no. 558587713. This policy explains how we collect, use and protect personal data. It is written under the Israeli Protection of Privacy Law, 5741-1981, as amended by Amendment No. 13, which took effect on August 14, 2025.
Who we are: the database controller
The controller of the database is Simple Web, registered Israeli partnership no. 558587713, 1 Ben Gurion, LYFE Tower, Bnei Brak, Israel. For anything privacy-related, contact us at info@simplycard.co.il.
What we collect
Account details: name, email and phone you provide at signup.
The card content you create, and details of people who leave a lead through your card.
Basic usage data (card views and taps) for the card owner's analytics.
Enquiries and orders: for a business enquiry, full name, phone, email, company name, number of employees and a message; for an NFC card order, full name, phone, email, shipping address, the design details to print and order notes. We also store a record of the consent itself (the version of the text you accepted and a timestamp), so that we can demonstrate consent was given.
Billing details: name, business name and business or company number for the invoice. Card details are entered on the payment processor's payment page.
What you write to the site's digital assistant, to the AI card-creation tools or in the support chat.
Technical information collected automatically: IP address, browser, pages visited and traffic source, by measurement and advertising tools and subject to your choice in the cookie banner (see the cookies section below), and technical data about errors on the site so we can find and fix them.
What we use it for, and whether providing it is required
Data is collected to provide the service, manage the account, bill, support you and send messages about your account and card. Enquiry details are used to answer the enquiry, and NFC order details to handle, produce and ship the order and to contact you about it. Providing it depends on your consent and is not a legal obligation, but without it we cannot provide the service.
Analytics data is used to understand and improve the site, and advertising data to measure campaigns and tailor advertising, all strictly per the category you approved in the cookie banner.
If you approved the Marketing category, the email address you give us when signing up or buying a subscription, and the email address and phone number you give us when sending an enquiry or ordering an NFC card, are also passed in hashed form to Google's advertising platform, to attribute the action to the campaign that brought you (Enhanced Conversions). Without that consent this transfer does not happen.
Using your information for a new purpose, materially different from the one it was given for, will happen only after we obtain fresh, separate consent from you.
Legal basis for processing
Israeli law permits processing personal information on the basis of the data subject's informed consent, or under statutory authorization. What we collect rests on your consent: at signup and when you use the service, in the consent box on the enquiry and order forms, and per category in the cookie banner. Invoices and accounting records are also kept under a statutory retention duty in Israeli tax law.
Who we share it with
We do not sell personal data and we do not pass it to third parties for their own marketing. Data goes only to the following, and only for the purpose stated beside each:
Infrastructure and hosting providers: hosting the site, the database and accounts, including the sign-in cookies (see the Cookie Policy). Our payment processor and invoicing provider: processes the payment and issues the invoice. Our email delivery provider: sends service messages, such as address verification and purchase confirmations. Our error-monitoring provider: receives technical data about errors on the site so we can find and fix them.
Our customer-management (CRM) system: receives and stores business enquiries and NFC card orders so we can handle them and get back to you. The production partner that prints the NFC cards and the delivery service that ships them: receive the order details needed to produce and deliver it.
AI providers: when you use the site's digital assistant or the AI card-creation tools, the text you enter is sent to the model provider (Google, and for image generation also an image-generation provider) to produce the answer, draft or image.
Google (Google LLC, US): Google Analytics 4 for usage analytics ("Analytics" category), Google Ads for conversion measurement and advertising ("Marketing" category), and Google Tag Manager, through which Google's tags load; all of them are governed by Google Consent Mode and your choice in the banner. The homepage also embeds a YouTube video in privacy-enhanced mode.
Meta Platforms (Facebook/Instagram): the Meta Pixel for measurement and targeted advertising. The pixel code loads in a blocked state and sets no cookies and sends no identifying data until you approve the "Marketing" category. Microsoft (Microsoft Clarity): session recordings and heatmaps on the public site only, with sensitive fields masked, only after you approve the "Analytics" category. Crisp: the site's support chat, loaded only after you approve the "Analytics" category, receives what you write in it.
Our advertising platforms (Google and Meta) receive, only under the "Marketing" category, reports of actions on the site such as signing up, buying or sending an enquiry, to measure campaigns.
Of those, only Google receives the contact details you gave in a form, hashed and only under the "Marketing" category, as described in "What we use it for".
Our infrastructure, payment, email, error-monitoring and CRM providers, the production partner, the delivery service and the AI providers act on our behalf only. We will name them to anyone who asks at info@simplycard.co.il.
Cookies, pixels & embedded tools
On your first visit you are asked to consent across four categories: Essential (site operation, cannot be turned off), Functional (lets the tools on the site remember preferences), Analytics (Google Analytics, Microsoft Clarity and the Crisp support chat) and Marketing (Meta Pixel and Google Ads). Every non-essential category is denied by default. Main cookies: _ga, _ga_* (Google Analytics, analytics); _clck, _clsk (Microsoft Clarity, analytics); _gcl_au (Google Ads, marketing); _fbp, _fbc (Meta, marketing).
You can change or withdraw your choice at any time via the "Manage cookies" link in the footer; withdrawing is exactly as easy as granting. The homepage embeds a YouTube video in privacy-enhanced mode. See our Cookie Policy for full details, including browser storage and Google Tag Manager.
Your rights
(a) Right of access: under section 13 of the Protection of Privacy Law, you may review the personal information we hold about you.
(b) Right to correct or delete: under section 14 of the Law, if you find the information is inaccurate, incomplete, unclear or out of date, you may ask us to correct or delete it. If we refuse, we will tell you so, and you may take the matter to court.
(c) Withdrawal of consent: you may withdraw at any time: for cookies via "Manage cookies" in the footer, and for the service itself by deleting your account or contacting us. Withdrawal applies going forward and does not affect the lawfulness of use before it.
(d) Complaint: to the Israeli Privacy Protection Authority at the Ministry of Justice.
To exercise any of these: info@simplycard.co.il. Account holders can also review and correct their account details themselves in the account area. Requests from people who left a lead on a business's card go first to the card owner, as set out under "Leads & third-party data".
Data security
We take reasonable measures to secure data (access controls, encryption in transit, and isolation between accounts).
Retention periods
Account details, cards, leads and images are kept while the account is active. Deleting your account from the account area deletes them permanently.
Invoices and accounting records: 7 years, under Israeli tax-law retention duties.
Google Analytics data: up to 14 months.
Your cookie-banner choice is stored in your browser, and we ask again after 6 months.
Leads & third-party data
When you collect leads through your card, you are the data owner and responsible for its lawful use. We process this data on your behalf as a service provider only.
The card owner can export leads and permanently delete individual leads from the lead-management area. Deleting a lead from the Service does not delete copies the card owner has already exported, copied, or transferred elsewhere.
Card owners should review the leads under their control, retain them only as long as needed for the collection purpose, and action lawful access, correction, or deletion requests. Requests about the business's use of a lead should first go to the card owner; questions about platform processing can be sent to us.
A uniform retention period has not yet been adopted and will be published only after legal review. Until then, the Service should not be treated as a permanent archive or a substitute for the business's own retention policy.
Changes to this policy
Policy version: 2026-09-24. We update this policy as needed; the current text appears on this page, with the date of the last update at the top.
Contact
For any privacy question or to exercise your rights, contact Simple Web at info@simplycard.co.il.
Registered business address: 1 Ben Gurion, LYFE Tower, Bnei Brak, Israel.
Israeli Privacy Protection Authority: www.gov.il/privacy