1. General

Dear user! Geek Cig Marketing Ltd. (hereinafter: the 'Company'), which operates the website www.cig.co.il (hereinafter: the 'Site') and the digital means, including the application (together, the 'Services'), respects your privacy, as well as the privacy of all its customers and users of its Services (hereinafter: the 'User' and/or the 'Users').

The purpose of the terms detailed in this Privacy Policy, which form an integral part of the Company's Terms of Service, is to detail the information collected about you as a result of your use of the Services, and to review how the Company uses the information provided to it and collected by it in the course of the use of the Services. Please note that for specific services and/or applications, different rules may apply and a separate policy may be published alongside them regarding the use of information collected in that application.

The Company may, from time to time, change the Privacy Policy and the Terms of Service, together or separately, to reflect technological, business, legal or regulatory changes. Updates to the Privacy Policy will be published in this document, which will be found in its updated form on the Site. Use of the Services is subject to the then-current Privacy Policy and will constitute your consent to the Privacy Policy and any changes thereto—therefore we recommend reviewing the Privacy Policy from time to time. If you do not agree to any term or provision in this document, please refrain from using and/or viewing the Site.

All definitions and terms in the Privacy Policy shall have the meanings given to them in the 'Information and Terms of Service' documents found on the Site (hereinafter and above: the 'Terms of Service'), unless the context requires otherwise.

2. Collection of Information and Its Use

Use of the Services

Use of the Services, including browsing them, requires the provision of personal information about the Users.

The Services can be used as a 'guest' or as a registered user. As a registered user you can enjoy a smoother browsing experience. For example, you can save certain items to a 'Favorites' list, track your purchase history and make purchases more easily and quickly.

When registering for the first time to the Services you will be asked to provide personal information: full name, email address and mobile phone number. At the end of registration you will be asked to create a unique password for your user—this detail must not be shared and you must keep it under your exclusive control. Alternatively, you can register via your personal Facebook profile.

When logging in to the Services as a registered user, you will be asked to enter an email address and password or a mobile phone number to receive an SMS.

When making a purchase you will be asked to enter the following details: first name, last name, email address, phone number, shipping and billing address (if you are a registered user these details, or some of them, may already exist); ID number and payment details, which are not stored in Geek Cig Marketing Ltd.'s databases (payment is processed by an external payment processor).

During use of the Site, information may be stored about actions not completed within the Services (such as a shopping list or stopping a purchase process mid-way, clicking on banners, etc.).

When using the Services, additional technical* information will also be collected: browser type, details about the end device, IP address, browsing data, location data, your usage habits on the Site, including browsing and consumption. This information will be collected using 'cookies' (Cookies), as detailed in Section 4 below.

If you register for the Services through your personal Facebook account, information about you may be transferred to us, in accordance with the terms of use and permissions you set in your accounts on those networks.

Geek Cig Marketing Ltd. is the 'controller of the database' (as defined in the Israeli Privacy Protection Law) with respect to personal information collected in the course of using the Services. For any question related to the Privacy Policy, the collection and use of personal information, and the exercise of your rights regarding your personal information, you can contact us using the contact methods listed in this policy.

You must provide and/or update on the Site information that is correct, reliable and accurate, only on your own behalf and for yourself, and not on behalf of and/or for third parties, except in cases where you have been expressly authorized in writing to do so.

Job Applications

Through the Site you can apply for a position at Geek Cig Marketing Ltd. To do so, you will be asked to provide your full name, contact details, ID number, indicate the relevant role for you, and attach your resume.

Booking an Appointment (Branch)

When booking an appointment for a branch visit, you will be asked to enter your mobile phone number in order to receive an SMS to coordinate the desired appointment.

Contacting Customer Service

When contacting the Company (as part of a customer service inquiry, feedback form, etc.), via phone, email or another communication method, information related to the contact will be collected, including the content provided in the inquiry and in the response.

3. Purpose and Manner of Use of Information

The information you provide will be used by the Company to personalize your browsing experience, the advertisements displayed, offers and benefits. We will also collect the information to improve the Services and content offered to you, and to streamline and manage the Company's relationship with you. In addition, certain information may and will be used for the maintenance and improvement of the Services and displayed content, development of additional Company products, prevention of fraud, operation, security, detection of fraud and/or any other illegal activity. The information will also be used for marketing (including targeted and user-tailored marketing), commercial and statistical purposes, conducting statistical research, and even to provide statistical information that will not personally identify you to third parties, including advertisers.

The collection of an identifying number (whether of a private individual or a company) is done for payment verification purposes and will be stored in a database under the customer card and order details. Accordingly, an identifying number may be used by customer service and sales personnel to locate the customer card in the system. In addition, an identifying number may appear on an invoice and/or receipt for the purpose of delivering the order to the customer.

Without derogating from the above, subject to the provision of contact details, the Company may send, from time to time, by email, text message, chats and/or other means of communication, marketing and promotional information, offers and benefits, and more (hereinafter: 'Marketing Mailings'), subject to your consent. A user who consents to receive Marketing Mailings declares that he/she is aware of the provisions relating to the sending of advertisements as set out in the Telecommunications (Bezeq and Broadcasting) Law, 2008 (hereinafter: the 'Telecommunications Law'), and expressly agrees to receive Marketing Mailings from Geek Cig Marketing Ltd. by any means listed in the Telecommunications Law and any future relevant means. It is clarified that in order to send you the most suitable content, we may use information about you to enable optimal profiling of the types of offers and services most suitable for you. You may revoke your consent to receive Marketing Mailings by using the links available in the messages sent to you and/or by contacting the Company in writing/by phone or using the contact methods listed in this policy. For this purpose, Geek Cig Marketing Ltd. may use its service providers and, within this framework, transfer various details to them, subject to its commitment to protect privacy.

4. Use of Monitoring Tools and Cookies

The Services use information-collecting software, cookies and similar tools—such as cookies, pixels, tags, SDKs (together, 'Cookies'), for their regular and proper operation, for data security within them and of the information provided, and, among other things, to collect statistical data about the use of the Services, to make decisions about your user profile and/or your activity, for detail verification and identification, fraud prevention, to improve the browsing experience and use of the Services while tailoring content to your personal preferences, to profile suitable products for you and deliver advertisements and content relevant to you.

Cookies, in general and briefly, are text files that the user's browser or app creates at the command of the Company's computers. Some Cookies will expire when you close the relevant browser or application, and others are stored on your device's memory or your computer.

Cookies contain and collect a variety of information such as the pages you visited, the time you spent on the Site and/or app, where you came to the Site and/or page from, your IP address, your device characteristics and more. Cookies may also store information about your browsing habits on other sites, including the sites you visited, the pages you opened and any other action there.

Cookies may also be set by third parties—for example, Cookies from Google such as those embedded through Google Analytics, which help tailor the browsing or usage experience for the user and derive statistical insights regarding overall usage of the Services, and/or the use of Facebook tools. For more information about third-party use of Cookies, you can consult: Google , Facebook. If you wish to opt out of these or similar tools, you can use one of the addresses above.

If you do not want to receive Cookies, you can avoid this by changing the settings in your browser. Please refer to your browser's help file for instructions. In such a case, certain Services, in whole or in part, may not function properly. For example, automatic recognition, usage preferences or language may not be saved. It may also not be possible to complete an order on the Site. Changing your browser settings as stated is your sole responsibility.

5. Disclosure of Information to Third Parties

The Company may transfer information about you to third parties from time to time, as detailed below and/or in any other case where the Company is required to transfer it:

At the request of the User and/or with his/her explicit consent;
For the purpose of transferring it to external suppliers of the products and/or when required for the operation of the Services, such as shipping companies, payment processors, cloud service providers, and the like;
As part of its activity with business-related companies, for the declared and lawful purposes of use, for the provision and optimization of the Services;
In any case where you violate the Terms of Service found on the Site, including the Site Regulations, the terms of the Privacy Policy and/or in cases where you carry out or attempt to carry out, by yourself and/or through anyone on your behalf, via the Services and/or in connection with them, actions contrary to the Terms of Service, including violation of any law;
For legal needs, such as disclosure to an authority due to a legal obligation or due to an order imposed on the Company by a court order instructing the Company to provide the information to third parties, or for the purpose of managing legal proceedings or disputes, etc.;
In any case where the Company believes that the disclosure of the information is necessary to prevent serious harm to the Company and/or to the property and/or body of the User and/or third parties, or to prevent other serious harm at its sole discretion;
In the event that the Company transfers and/or sells and/or assigns to a third party its activity and/or its rights and obligations toward the User, all or part thereof, including a change of control in the Company, by way of merger, acquisition, or purchase of its assets, in whole or in part, provided that such third parties assume the obligations detailed in this Privacy Policy.

The Company may provide statistical information to third parties, including advertisers, subject to this Privacy Policy and any applicable law. Statistical information provided to third parties will not personally identify the User.

The foregoing does not derogate from the Company's right to transfer non-personal information to third parties.

6. Digital Invoice

The service provided by the Company includes issuing a digital invoice directly to the customer's phone number or requested email address and, at the User's choice, saving and processing the information it contains.

The service will allow the User to view receipts and invoices from purchases made with the Company via a digital document sent to the email address provided by the User when placing an order or when contacting customer service.

7. Data Security

The Company does everything in its power to protect the confidentiality of the data provided by the User, by taking accepted precautions and using appropriate security technologies. The Company dedicates resources and takes measures to prevent intrusions into the platforms offering the Services and to thwart possible harm to the User's privacy; however, it cannot completely prevent such harm or other disruptions.

As part of the Company's Services, advertisements and/or links to external sites and/or applications may appear. Clicking a link is at your sole discretion and responsibility, since you will exit the Company's Services and be directed to an external site and/or application, where you will be subject to its terms, including its privacy policy. From that point on, the Company will have no control over what is done with your information and therefore will not bear any responsibility in this regard.

The purchase process on the Site and in the app, including credit card details provided by the customer, is secured under the PCI DSS standard and performed by the service provider—Placard.

Credit card details provided with the customer's consent for a current and/or future purchase are not stored in the Company's databases, but via a unique identifier (token) issued by the payment processor.

You acknowledge and agree that Geek Cig Marketing Ltd. shall not be liable for any damage of any kind, indirect or direct, caused to you and/or anyone on your behalf, if the information is lost, exposed or used in any unauthorized way, and you acknowledge and agree that you will have no claim and/or demand and/or suit against Geek Cig Marketing Ltd. and/or anyone on its behalf in such circumstances and for any damages caused to you, if any, as a result.

If you identify a security gap or wish to report a security incident, please contact us at info@cig.co.il or via the contact methods listed on the Site and detailed in this Privacy Policy.

8. Retention of Personal Information

The Company will retain your personal information only for the period required for the purposes for which it is processed and in accordance with applicable law. We will periodically review the personal information in our possession and, if we find that there is no legal, business or customer-service need to continue retaining it, we will delete it securely or, in certain cases, anonymize it.

However, the Company may retain your personal information for a longer period in the following cases: (a) where the law or an instruction from a competent authority requires it; (b) where the Company is contractually obligated to do so; (c) where the information is required for legal defense or for handling disputes.

9. Privacy Inquiries

1. The Company respects your privacy and your control over your personal information. In accordance with the Israeli Privacy Protection Law, your rights regarding your personal information held in the Company's databases are as follows:

a. You may request to review your personal information held by the Company.

b. You may request the correction and/or deletion of your personal information if you find that it is incorrect and/or not up to date.

c. If you do not wish to receive marketing communications, you may, at any time, request to be removed from the mailing list using the 'unsubscribe' option in the marketing message sent and/or in accordance with other instructions appearing in the mailing received.

2. You may request to exercise your rights above by contacting info@cig.co.il or via the contact methods listed on the Site and detailed in this Privacy Policy. When requesting to correct and/or review and/or delete personal information as stated above, and in order to protect the privacy of Users, the Company may request certain details for identification purposes before responding and/or fulfilling the request.

3. It is clarified that information required by the Company for the management of its business, including documentation of actions taken in connection with a service provided, will continue to be retained in accordance with the law, but will no longer be used for contacting you for marketing purposes and/or for any other purpose except to comply with legal requirements and/or protect the Company's rights under the law.

* Non-personal information that, by itself, does not enable identification of or contact with the user.