Policy and Privacy

Privacy Policy

Last updated: July 21, 2025

Welcome to the websitePharmaCare– www.pharmacare.co.il (hereinafter: the “Site”). We attach the utmost importance to protecting user privacy and transparency regarding the way we collect, use, share and protect your personal information. This document has been prepared in accordance with applicable law in the State of Israel, and, where applicable, also with the requirements of the GDPR (European Union) and CCPA (California) regulations, to the extent that you are a resident of those jurisdictions.

1. Key settings

term	Interpretation
“Personal information”	Any information that can directly or indirectly identify you, such as name, ID card, address, email, telephone number, IP address, etc.
“Processing”	Any action or set of actions performed on personal information (for example, collection, storage, use, disclosure to a third party, or deletion).
“Privacy Protection Law”	The Privacy Protection Law, 5741-1981 and its regulations.

2. Legal basis for processing information

We only process personal information when one or more of the following legal bases are met:

Contract fulfillment – To provide products or services you have requested;
Explicit consent – For example, to receive promotional mailings;
Legitimate interest – such as improving services, preventing fraud and securing the site;
Compliance with a legal obligation – Including maintaining accounting documents as required by law.

3. Types of information collected

Information you knowingly provided
- Identification details (full name, ID card number/billing ID, date of birth).
- Contact information (phone number, email address, shipping address).
- Relevant health information (as applicable and with your consent – for example, a doctor's prescription or health declaration when ordering medication).
Information collected automatically
- Device and browsing data: IP address, browser type, device ID, operating system, login and logout times, pages viewed.
- Cookies and similar technologies (Pixel Tags, Local Storage).
Information from third parties
- Payment providers (PayPal, credit) – transaction confirmation, billing status.
- Shipping services – tracking number, shipping status.
- Social networks – when you choose to connect or share content using an external account.

4. Purposes of using information

purpose	Usage examples
Ordering and delivery	Identity verification, payment processing, invoice generation, product shipping.
customer service	Responding to inquiries, managing medical records (if necessary), satisfaction surveys.
Product improvement and research	Analyzing usage patterns, detecting faults, developing new services.
Personalized marketing	Sending newsletters, email/SMS/Push campaigns subject to your consent.
Compliance with the law	Maintaining tax reports, preventing money laundering, responding to the requirements of competent authorities.
Information security	Diagnosing intrusion attempts, preventing credit card fraud, data encryption.

5. Cookies and tracking technologies

We use functional, analytical and marketing cookies.
You can manage your preferences through your browser settings or the cookie management tool on the site. Blocking essential cookies may affect the functionality of the site.

6. Provision of information to third parties

Type of cause	Purpose of delivery	Protective measures
Data Processor	Server hosting (IaaS), CRM systems, mailing systems.	Data processing contracts, access restriction, encryption in transit and at rest.
Payment services	Credit card payments, invoices.	PCI‑DSS compliance, card data encryption, tokenization.
Enforcement/Regulatory Authorities	Court order requirement, criminal investigations.	Transfer by law only, documentation of the request.
Subsidiaries or future acquisitions	Merger or acquisition of an activity.	Commitment to a series of privacy protection commitments.

We will not sell or rent personal information to third parties for direct marketing purposes without your consent.

7. Transferring information outside of Israel

Our servers may also be located throughout the European Union or the United States. We will ensure that transfers are only made to countries that have been declared to “ensure an adequate level of protection” or through binding contractual mechanisms (Standard Contractual Clauses) as required by the GDPR.

8. Information security

The site is secured with the TLS 1.3 (SSL) protocol with 256-bit encryption.
Internal authorization procedures Least Privilege and policy Zero Trust.
Daily encrypted backups in two different geographical locations.
Performing annual Pen-Tests and routine DevSecOps processes.
In the event of a serious security incident, we will notify you and the relevant regulator within 72 hours (as required by GDPR, if applicable).

9. Data Retention

Type of information	Standard period	principle
Order and financial data	7 years for tax and reporting purposes	Obligation to keep invoice documents.
Medical data	As long as there is a therapeutic relationship + 10 years	Ministry of Health returns.
Marketing information	Until consent is withdrawn or 3 years, whichever comes first	Legitimate interest.
Log files (Logs)	12 months	Information Security and Forensics.

Aggregated analytics data may be retained for statistical research purposes without time limit.

10. Your rights as information providers

Right of access – Receive a copy of the personal information processed.
Right to correction – Update incorrect or incomplete information.
Right to erasure (“to be forgotten”) – Subject to legal restrictions.
Right to restriction of processing – In certain cases, such as challenging the accuracy of the information.
Right to mobility – Receiving structured and standardized information for transfer to another party.
Right to object to direct marketing – At any stage, by clicking on the removal link or contacting customer service.

To exercise rights, please contact us as detailed in Section 14. We will endeavor to respond within 30 days (or 45 days under CCPA).

11. Children's Privacy

The Site is not intended for minors under the age of 18. We do not knowingly collect information from children. If you become aware that a child has provided us with personal information without the consent of a parent/guardian, please notify us and we will delete the information.

12. Links to third-party websites

The site may contain external links (blogs, social networks). We are not responsible for the privacy policies or content on these sites. It is recommended that you review the relevant policy of each site.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The date of the last update will be displayed at the top of the page. Any material change will be notified to you by prominent notice on the Site or by email.

14. Contact

For more information, to exercise your rights, or to file a complaint, you can contact us using the following means:

PharmaCare Ltd. (611-509-514)
198 Ahuza St. (Golan Commercial Center), Raanana 4336017, Israel
☎ 09-744-5760
✉ ‎info@pharmacare.co.il‎

You may also file a complaint with the Privacy Commissioner at the Department of Justice (or the EU/California supervisory authority, if applicable).

15. Your consent

By using our website, purchasing products or services, you declare that you have read, understood and agree to the terms of this Privacy Policy.

You can withdraw your consent at any time – however, some services may not be available without certain information being processed.

PharmaCare Committed to protecting your privacy, maintaining customer trust, and operating with complete transparency. Thank you for choosing us.