Who is responsible
Demo website and database owner: the fictional grocery shop “Shlomo's”; data and support contact: Dmitry Vilensky (it2business). Demo address: 50 Moshe Dayan St, Pisgat Ze'ev, Jerusalem. Phone: 055-77-49-700. Email: vilensky.dmitry@gmail.com.
Data collected
- Order form: name, phone, delivery address, shopping list and preferred time (morning, afternoon or evening). Contact form: name, phone and message. Submission type, page language and submission time are also stored. Forms do not ask for an email address.
- WhatsApp, phone and email enquiries: information you choose to share.
- The hosting provider may process technical visit data such as pages, time, device, browser and country. Its analytics settings and data scope have not been independently verified.
- The selected language is stored locally in your browser. No advertising cookies are used; Google Analytics is disabled.
Purposes and legal basis
Data is used to answer enquiries and process orders and delivery, and for customers to fulfil contracts and tax obligations. The basis is consent when submitting a form or contacting us, contractual performance and legal requirements.
You do not have to provide data. Without a name and phone number we cannot contact you; without an address and shopping list we cannot deliver. Data is not sold or used for marketing without separate consent.
Storage and access
Orders and enquiries are stored in the protected Lovable Cloud/Supabase database; the site is hosted by Lovable Cloud. Servers may be outside Israel; location and international-transfer terms must be checked before operating a real business. Access is limited to authorised people for work and technical support, using access permissions. Connections use HTTPS encryption.
Data sharing
Data is not shared except with technical providers needed to run the site: Lovable Cloud/Supabase, email providers when you contact us by email, and Meta under its own policy when using WhatsApp. Developer it2business has technical access only for support, not other purposes. Disclosure may be required by law. The site has no online payments and collects no card details.
Retention
Example retention policy: enquiries without a contract or order are kept for up to 24 months after last contact, then deleted; customer and order data is kept during the contract and for 7 further years to the extent required for accounting and tax records. Earlier deletion can be requested where law permits. The responsible person must implement this policy; automatic deletion is not configured on this demo.
Your rights
- Find out what data is held and obtain a copy.
- Request correction of inaccurate data.
- Request deletion or an end to processing.
- Withdraw consent and unsubscribe from marketing.
Contact vilensky.dmitry@gmail.com or 055-77-49-700; we will reply within 30 days. You may contact the Privacy Protection Authority at gov.il if your rights are infringed.
Security
We use HTTPS, row-level database access controls, database-side data checks and protection against automated form submissions. Absolute internet security is impossible. In the event of a breach we will notify users and the regulator as required by law.
Children
The site is intended for adults and does not knowingly collect data from people under 18 without parental consent.
Policy changes
Last updated 2026-11-10. Significant changes are published on this page.