Legal

Privacy Policy

Last updated August 2026

This policy explains what personal data Terra Firma Israel collects, why, who we share it with, and the rights you have — under the Israeli Privacy Protection Law 5741-1981 (including Amendment 13) and, for clients in the EU and UK, the GDPR and UK GDPR. We serve buyers in the United Kingdom, the European Union, North America, and elsewhere, and handle personal data accordingly.

01

Who we are (controller)

Terra Firma Israel (an Israeli business currently completing incorporation; company registration details will be published here once complete) is the controller of the personal data described in this policy. For any privacy request, contact us by email at office@terrafirmaisrael.com or through the contact form.


02

What we collect

  • Identity and contact data: your name, email address, and (if you provide it) a phone or WhatsApp number.
  • Booking and property data: the property address and details you submit — built area, preferred dates, floor plans you upload — and your chosen tier and preferences.
  • Engagement records: the inspection report and deliverables, photographs and imagery of the property, and our correspondence with you (including Q&A support by email or WhatsApp).
  • Payment and invoicing records: no payment is taken on this site. After the inspection we issue a single invoice; we keep invoicing and payment records, not your card details.
  • Technical data: IP-derived request metadata, browser/user-agent, referring page, and aggregate analytics.
  • Consent records: what you agreed to (terms acceptance, marketing consent) and when.

03

Providing data is voluntary

You are under no legal duty to provide personal data. Providing it is voluntary — but without your contact details and the property details we cannot respond to your inquiry, process a booking, or perform the inspection. That is the only consequence of not providing data.


04

Why we use it and our lawful bases

  • To perform our contract with you — scheduling and conducting your inspection, delivering your report, invoicing, and providing ongoing Q&A support from the engineering team.
  • To take steps at your request before a contract — responding to inquiries and questions you send us before you book.
  • With your consent — sending the sample report and occasional follow-up or marketing where you opted in (you can withdraw at any time).
  • Our legitimate interests — operating, securing, and improving the service, preventing fraud and abuse, and keeping business records.
  • Legal obligations — tax, accounting, and record-keeping requirements.

We do not use automated decision-making that produces legal or similarly significant effects about you.


05

Who we share it with (recipients and processors)

We share personal data only as needed to deliver the service:

  • The registered Israeli engineering practice performing your inspection — to perform the service and, during our introductory period, to issue the post-inspection invoice on our behalf.
  • Make.com — workflow automation that routes your booking or inquiry to us.
  • WhatsApp (Meta Platforms) — messaging, if you choose to contact us or receive support over WhatsApp; Meta also processes those messages under its own terms.
  • Our CRM — to manage your engagement.
  • Resend — transactional and operational email.
  • Vercel — website hosting and privacy-respecting analytics.
  • Professional advisers (accountants, lawyers) and public authorities, where required for our legal obligations or to establish or defend legal claims.

We store your data in access-limited systems restricted to authorized personnel, and we do not sell or rent personal data.


06

International transfers

Your data is processed in Israel, which holds a European Commission adequacy decision (reconfirmed in January 2024) and equivalent UK adequacy regulations — so transfers from the EU/UK to us require no further safeguard. Some of our service providers named above process data in the United States (hosting, automation, email delivery, messaging). We transfer to them in accordance with the Israeli Privacy Protection (Transfer of Data Abroad) Regulations 5761-2001, relying on each provider's contractual data-protection undertakings (data processing agreements incorporating standard contractual clauses or equivalent safeguards).


07

How long we keep it

We keep booking, invoicing, and inspection records — including engineering reports — for up to 7 years, to meet Israeli tax and accounting record-keeping duties and to cover professional-liability claim periods. Inquiry data that does not lead to an engagement is kept only as long as needed to handle the inquiry and is reviewed and purged periodically. Marketing contact data is kept until you unsubscribe. After the applicable period, data is deleted or anonymized.


08

Your rights

Under Israeli law you may request access to data we hold about you, correction of inaccurate data, and removal from any direct-mailing list at any time. If you are in the EU or UK, you additionally have the rights of access, rectification, erasure, restriction, portability, and objection (including an absolute right to object to direct marketing), and the right to withdraw consent at any time without affecting prior processing. To exercise any right, contact us at office@terrafirmaisrael.com or through the contact form; we respond within one month. You may also lodge a complaint with the Israeli Privacy Protection Authority, the UK ICO, or your EU data protection authority.


09

Marketing communications

We send marketing messages (email or WhatsApp) only with your prior consent — given by an unticked checkbox you choose to tick — or, as permitted by Israeli law, to existing customers about similar services after having told you at the time your details were collected and given you the chance to refuse. Every marketing message identifies us, is labeled as such, and carries a free, working unsubscribe in the same medium. Transactional messages — booking confirmations, scheduling, your invoice, report delivery — are kept separate from marketing. Opting out of marketing never affects your service.


10

Cookies and analytics

We use privacy-respecting analytics (Vercel Analytics and Speed Insights) to understand aggregate site performance and usage. We do not run third-party advertising trackers or marketing pixels. Where your jurisdiction requires consent for non-essential cookies or analytics, we honor it; if our use of cookies materially changes, we will update this policy and seek consent where required.


11

Security

We hold personal data on access-controlled cloud services with encryption in transit, limit access to authorized personnel, and maintain security practices in line with the Israeli Privacy Protection (Data Security) Regulations 5777-2017. Security incidents are documented and handled as the law requires.


12

Children

The service is directed at adults purchasing property and not at anyone under 18; we do not knowingly collect data from minors.


13

Changes

We may update this policy from time to time; the current version is always the one published on this page, with the date above.