Back to homeAwatief CosmeticsPrivacy Policy

Privacy Policy

Last updated: 2026-09-29

Introduction

Awatief Cosmetics ("we", "us", or "the Center") operates this mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Privacy Law, 5741-1981 (as amended, including Amendment No. 13).

By creating an account, or by booking an appointment as a guest, you explicitly consent to the collection and processing of your data as described below. If you do not agree, you will not be able to create an account or use the booking features of the App.

1. Data Controller

Awatief Cosmetics (Business No. 026197608), Ali Ben Abi Taleb St., Baqa al-Gharbiyye, Israel, is the data controller responsible for your personal data. For contact details, see the "Contact Us" section below.

2. Information We Collect

When you register, book an appointment (including as a guest), and use the App, we collect:

  • Full name (first and last name)
  • Phone number (verified via SMS)
  • Date of birth
  • Gender
  • City
  • Appointment history (staff member, service type, date, time, and status)
  • Gift card order details (denomination and pickup date/time), if you reserve a gift card
  • Deposit payment amount and Tranzila transaction reference number, if you pay an online deposit to book a package
  • Information about a third party — such as their name or relationship to you, their gender, and their age range — if you book an appointment on their behalf
  • In-app notification history (e.g. appointment confirmations, cancellations, and reminders sent to you)
  • Push notification device tokens (if you enable notifications)
  • Language preference
  • Account creation date
  • Consent timestamp (when you agreed to this policy)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent — you provide explicit consent by checking the agreement checkbox during registration.
  • Contractual necessity — processing is required to provide you with the booking service you signed up for.

You are under no legal obligation to provide this information; providing it depends on your consent. However, without it we cannot create your account or book your appointment.

4. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Schedule, modify, and cancel appointments
  • Send appointment reminders and notifications via SMS and push notifications
  • Improve our services

We send only transactional notifications (appointment confirmations, reminders, cancellations, and post-visit thank-you messages, as well as gift card order and pickup confirmations). We do not send marketing or promotional messages.

5. Third-Party Services

We use the following third-party services to operate the App:

  • Firebase (Google Cloud) — your name, phone number, date of birth, gender, appointment data, and device tokens are stored and processed on Google Cloud servers.
  • Twilio — your phone number and name are shared with Twilio to deliver appointment SMS messages (confirmations, cancellations, reminders, and thank-you messages). Phone verification during sign-in is handled directly by Firebase, not Twilio.
  • Apple Push Notification service (APNs) / Firebase Cloud Messaging (FCM) — your device token is used to deliver push notifications to your device.
  • Sentry — when the App encounters an error or crash, a user identifier, the app screen/route where it occurred, and technical error details are sent to Sentry to help us monitor and fix issues.
  • Tranzila — if you pay a package deposit online, your payment card details are entered directly into Tranzila's secure payment form and are processed by Tranzila; the App does not process, transmit, or store your card information itself. We share the deposit amount and your appointment reference with Tranzila to complete the transaction.

6. Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside Israel, including the United States and the European Union, through our use of Firebase (Google Cloud), Twilio, Sentry, and Apple/Google push notification services. By consenting to this Privacy Policy, you acknowledge and agree to these transfers. These service providers maintain security standards and contractual safeguards to protect your data. This section addresses the providers listed above only; it does not describe the cross-border status of other third-party services referenced elsewhere in this Policy, and a provider's absence from this list should not be read as confirmation that its processing is limited to Israel.

7. Data Retention and Deletion

We retain your personal data for as long as your account is active. When you delete your account through the App (Settings > Delete Account), all your personal data, appointment records, and gift card orders are permanently and immediately deleted from our systems. If you booked as a guest without an account, you can ask us to delete your details using the contact details below. Exceptions: if your account was suspended for violating our Terms of Service, we retain your name and phone number after deletion, solely to prevent re-registration under the same phone number; and records of online payments are kept by our payment provider and in our accounting records for as long as required by law (for example, tax and bookkeeping laws).

8. Your Rights

Under Israeli law, you have the right to:

  • Access your personal data — view all information we hold about you through the App's Settings page, or request it by contacting us. We will respond to access and correction requests within 30 days, as required by law.
  • Correct your personal data — update your profile information at any time through Settings.
  • Delete your data — permanently delete your account and all associated data through Settings > Delete Account.
  • Withdraw consent — you may stop using the App and delete your account at any time.
  • File a complaint — you may file a complaint with the Israeli Privacy Protection Authority (PPA) if you believe your privacy rights have been violated.

9. Local Storage

The App uses local device storage (IndexedDB, localStorage, and sessionStorage) to persist your authentication session, language preference, in-progress booking selections, and notification prompt state. This is essential to the App's operation and is not used for tracking or advertising purposes.

10. Data Security

We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS/TLS) for all data in transit, Firebase encryption for data at rest, and access controls that ensure only you can access your personal information.

11. Data Breach Notification

In the event of a data breach that may affect your personal data, we will report it to the Israeli Privacy Protection Authority as required by law, and notify affected users where required.

12. Children

The App may be used by individuals of any age. If an account is created by or on behalf of a minor, we assume the necessary parental or legal guardian consent has been obtained. If you believe a minor's account was created without appropriate parental consent, please contact us and we will address it, including deleting the account if requested.

13. Changes to This Policy

We may update this policy from time to time. The updated version will be published in the App and on our website. Continued use of the App after changes constitutes acceptance of the revised policy.

14. Contact Us

For privacy-related inquiries, data access requests, or to exercise your rights, contact us by phone or WhatsApp at 050-408-3971, by email at support@awatiefcosmetics.com, or at the Center (Ali Ben Abi Taleb St., Baqa al-Gharbiyye, Israel).