Document last updated: 10 October 2026
This translation is provided for convenience. The Hebrew version of this document is the binding one; in case of any discrepancy, the Hebrew text prevails.
1. Who is responsible for the information
The website noam-markovich.co.il is operated by Noam Markovich, a provider of makeup services. Noam is the controller of the personal information processed for the purposes of the business, meaning that she determines the purposes for which it is used.
You may get in touch on any matter relating to privacy by phone or WhatsApp on 0526210121, or by e-mail at by.noam.markovich@gmail.com.
This policy explains what information is received in the course of browsing, enquiries and service bookings, for what purposes it is used, to whom it may be disclosed and what your rights are. It is not a request for blanket consent to every use of the information. Where consent is required for a particular use, it will be requested separately and in the manner appropriate to that use.
2. Information you provide
When you make an enquiry through the website, by phone, by WhatsApp, by e-mail, on Instagram or on TikTok, your name, your phone number, your e-mail address, the type of service requested, the date of the event, the place where the service is to be provided, the content of the enquiry and the follow-up correspondence may be received.
In the course of a booking, the service details, the correspondence, the payment details and the documents provided or produced in connection with the booking may be collected and kept. Enquiries and correspondence are kept in the Gmail mailbox and the WhatsApp account that Noam uses for the business. The website has no mechanism for payment or for entering credit card details, and such details must not be sent in a free-text message.
There is no legal obligation to contact the business or to provide information for an initial enquiry. Providing the information depends on your wishes and your consent. Without suitable contact details it will not be possible to get back to you, and without the necessary service and location details it will not be possible to complete the arrangement and the booking. At the time of a transaction, information may be required for record-keeping and for producing documents in accordance with the law.
In fields that are not marked as required, you may choose whether to provide information. Please provide only the information needed for the enquiry, and avoid detailed medical information, ID numbers, personal documents or details of other people that are not needed.
3. What happens when the contact form is sent
Clicking the send button on the form triggers two actions: the transfer of the form details to the Netlify forms service in order to receive the enquiry and keep a copy, and the opening of WhatsApp with a message prepared from the details you filled in.
The transfer of the details through the forms service does not depend on pressing "send" within WhatsApp. Therefore the enquiry details may be received and kept by the business even if you chose not to send the WhatsApp message. A copy of the enquiry is also sent to the business's Gmail mailbox.
Opening the WhatsApp link takes you to an external service, which may process the link details and the prepared message in accordance with its own policy. The WhatsApp message to Noam is sent from within that service only after you have chosen to send it. An enquiry or a success message on the website is not confirmation of a service booking or of a reserved date.
The forms service includes mechanisms for detecting spam messages, including filtering by means of Akismet according to the service configuration. For this purpose, the filtering providers may process the content of the enquiry and technical data relating to it.
A cancellation notice or a request to change the date sent through the form on the noam-markovich.co.il/en/cancel page is also stored in the Netlify forms service, together with the time it was sent, and goes through spam filtering as described above. It contains the type of request, your name and phone number, and also the date of the service, a detail for locating the booking and notes, if you chose to add them. The information is used to handle the request, to record when it was given and to clarify rights relating to the booking. A copy of it is also sent to the business's Gmail mailbox. If you choose to send a copy from the page by WhatsApp or e-mail, the copy passes through the service you chose. There is no obligation to use the form: a cancellation notice can also be given by phone, WhatsApp, e-mail or registered post, as set out in section 12 of the terms of service.
4. Technical information, cookies and preferences
While you browse, the hosting and infrastructure providers may process technical data, such as IP address, time of access, page address, browser and device type and error data, for the purpose of displaying, securing and operating the website.
The website stores your choice of display language, your accessibility settings and your choice regarding measurement tools in the browser, by means of local storage. You can reset the accessibility preferences in the relevant menu, and delete site data in the browser settings. Deletion may require you to select the preferences again.
The website uses the Google Analytics 4 tool to understand how the website is used and to improve it. The measurement tool is loaded after approval in the cookie banner. It may process online identifiers, device and browser data, pages viewed, referral source and interactions on the website, including clicking a link to TikTok or to another contact channel. Such information is not necessarily anonymous. There is no need to approve measurement tools in order to view the website or to make an enquiry about a service. When the booking form is submitted, a submission event is recorded in Google Analytics together with the type of makeup selected in the form, without your name, phone number or any other detail from the form.
Google Analytics cookies are stored in the browser under names beginning with _ga, for up to two years from the last visit to the website, unless they are deleted earlier or the choice is withdrawn. Detailed measurement data are deleted from the business’s Google Analytics account after 14 months, and aggregated statistical reports may be kept after that period as well. The data are processed by Google and may be processed on its servers or those of its providers outside Israel. Information about how Google uses information from sites that use its services appears on the page "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites).
You can change your choice through "Cookie settings" on the website or restrict cookies through the browser. Withdrawing the choice is intended to stop measurement during further use, and does not automatically delete information already passed to the provider before the withdrawal. With regard to earlier information, you may contact Noam for clarification and to exercise rights in accordance with the law.
The link to the TikTok account on the website leads to an external service. As at the date of this document, no TikTok pixel or embedded TikTok player was found in the website code that was examined. The mere addition of the link does not indicate that the contact form details are sent to TikTok. If tracking components or embedded content are added, the required information collection and notification will be examined in advance and consent will be requested where it is required.
The "Kind words" section displays reviews published about the business on Google Maps: the reviewer's name, profile picture and a link to their Google profile, as they appear on Google, the rating, the text and the time. The ratings, names and texts arrive through the website's server, and your browser does not contact Google for them. The reviewers' profile pictures are loaded directly from Google's servers when the section is displayed, and Google therefore receives, for that purpose, your IP address and technical data about your browser, without the address of the page you are on. The website does not store the reviews. For cost control purposes, it only counts how many times a day it contacts Google, without any information about visitors.
Details of the processing of information by Google appear in Google's privacy policy (policies.google.com/privacy). The use of data within Google services also depends on the relevant service settings.
5. Purposes of use
The information is used to respond to enquiries, check availability, prepare quotes, arrange makeup services and carry out the booking. It is also used for communication relating to the booking, for handling payment, refunds, complaints and requests, for documenting consents and for the accounting management of the business.
Technical information is used to operate the website, identify faults, prevent misuse and protect the information. Measurement data is used to understand how the website is used, in accordance with the choice you made. Information required by law may be kept or disclosed in order to comply with a legal obligation, resolve a dispute or protect rights, to the extent necessary for that purpose.
The business does not currently send advertisements, marketing mailings or commercial offers to a mailing list. Leaving your details is not registration for an advertising list. Paid advertising is planned for the future. Advertisements in which photographs or videos of clients appear are shown only in accordance with the permission that each client has given, in the channels and placements that she has approved. Before pixels are activated, customer lists are uploaded or audiences based on personal information are created, the appropriate purposes of use, disclosures and permissions will be put in place. This policy is not advance consent to uses that have not yet been defined. Messages relating to an enquiry or a booking, such as arranging a time or a change of location, may be sent for the purpose of handling them.
6. Information about sensitivities and adapting the service
If you choose to provide information about an allergy, sensitivity or limitation that is directly related to the provision of the service, it will be used to clarify how the service is to be adapted and to carry it out. There is no need to provide a full medical history, and such information must not be sent in the website form.
A suitable way of providing necessary information can be arranged. If information is provided by e-mail or a messaging app, it may also be kept by the service provider and in its backups. Providing the information is not consent to its publication. Access to it will be limited to the purpose for which it was provided, subject to legal obligations and to the need to investigate an incident relating to the service.
7. Photographs and videos
The business displays photographs of makeup work. If a recommendation or feedback intended for publication is provided, the publication of your name, your likeness or identifiable conversation content will be arranged separately and in accordance with the permission given. A review that you published yourself on Google may be displayed on the website (up to 5 reviews, as selected by Google), as Google provides it (section 4), for as long as it is published there. Editing or deleting the review on Google is also reflected on the website. Photography for record-keeping and the publication of a photograph are separate uses. A photograph or video in which a client can be identified will be published on the basis of separate and defined consent, which will state the approved content and the publication channels, such as the website, Instagram or TikTok. Approval for a particular channel is not approval for publication on another channel, for a photograph from before the makeup, for use of your voice or for a paid advertisement.
Approval for the publication of photographs and videos is given on a dedicated page of the website, after Noam has sent the client, by WhatsApp, the photographs and videos to which the request relates. The page is written in Hebrew only. A client who does not read Hebrew well will not be asked to give approval on it, and identifiable content of hers will not be published on the basis of the page. The page runs in the browser and does not send the name or the choices to the website. The hosting provider may record technical data, such as the IP address and the reference number contained in the page address. At the end of the page, a prepared WhatsApp message to Noam opens, and the client sends it herself. In some cases, for example on a computer, or when the WhatsApp link opens in a browser rather than directly in the app, the text of the message is transferred to the servers of WhatsApp, a Meta service, as soon as the link is opened. The message that was sent, containing the name, the choices and the time of creation, together with the phone number and the profile name from which it was sent, is the record of the approval or the refusal, and it is kept in Noam's WhatsApp account, in its encrypted backup and in an encrypted copy. An approval message is kept for up to seven years from the removal of the last publication or from the request to stop, whichever is later, solely for the purpose of proving consent and clarifying rights. A refusal message is kept only for as long as photographs or videos from the same request are kept by the business, and is deleted together with them. Approval for publication is given on a dedicated page of the website or in writing in a direct message (for example on WhatsApp). The record of the approval is kept and deleted under the same rules. Content published on Instagram or TikTok is uploaded to the servers of Meta and of TikTok, which may be located outside Israel, and is processed by them also in accordance with their own policies, including for the development of artificial intelligence. A quotation, a recommendation or a screenshot of a conversation will be published only with separate approval, except for reviews that their authors published publicly on Google themselves, which are displayed as Google provides them (section 4).
You may refuse photography, publication, tagging or the publication of before and after photographs, without the refusal affecting your receipt of the service. Consent to the publication of a photograph is not consent to the publication of medical information, contact details or other personal information not included in the approval.
You may ask for future use to stop and for a publication to be removed from channels under the business's control, using the contact details above. The request takes effect from the moment it is received. Paid advertisements will be stopped on the same day, and existing publications will be removed from the channels under the business's control within 3 business days. A request to hide a review from the website will be handled within 3 business days; deleting the review from Google is done through Google. If the request comes from an unrecognised number or account, proportionate identity verification may be carried out, but the removal will not be delayed because of it. Once a photograph has been published on the internet, copies or shares may have been created by others that are not under the business's control. In such a case, an explanation of the limits of removal will be given and, where possible, help will be provided in approaching the relevant party.
The publication approval and the records needed to handle requests may be kept in order to prove consent and to clarify rights, even after the photograph has been removed from public display. At this stage, there is no publication approval process for minors, and content that identifies a minor will not be published.
8. Who may receive information
The business does not sell or rent customer lists. Information may be disclosed to providers who assist in operating the website and managing the service, to the extent required for their role. These include Netlify for hosting and forms, spam filtering providers, Google for e-mail, measurement and the display of reviews, and the WhatsApp, Instagram and TikTok services when they are used for communication or for approved publication. Photographs and videos approved for publication are displayed to the public in the approved channels and, in approved advertisements, also through the advertising systems of Meta and of TikTok. Anyone who assists Noam in maintaining the website may handle the files for the purpose of uploading and removing them.
Information needed for managing payments, bookkeeping or professional advice may be disclosed to the providers and professionals who provide these services to the business. Information may also be disclosed by virtue of a legal obligation, an order or an authorised demand, and for the purpose of clarifying and protecting rights to the extent necessary and in accordance with the law. Any further use going beyond the stated purposes will be examined separately, and consent will be requested where it is required.
Some providers process information on behalf of the business, and others also determine their own processing purposes under their terms of service. This does not mean that the enquiry details are accessible only to Noam. Further information appears in the Netlify policy, the WhatsApp policy, the Meta policy and the TikTok policy.
When you go to a social network, it may collect information about your activity and your device in accordance with its policy. If you send a message, comment or provide content on Noam's channel, Noam may see your username, your visible details and the content you provided, and use them to respond to and handle the enquiry. Posting a public comment may also expose it to others. There is no need to use a social network in order to get in touch; you can also get in touch by phone or e-mail.
9. Processing of information outside Israel
Some of the services used are operated by international providers, so information may be stored or processed outside Israel, including in the United States and in other countries in which the providers and their sub-processors operate. The main providers are: Netlify, Inc., a company from the United States, for hosting the website and storing the enquiry and cancellation forms; Google, for Gmail e-mail, for measurement with Google Analytics 4 if you approved it, and for displaying the reviews; Automattic, for spam filtering by means of Akismet; WhatsApp LLC, for WhatsApp messages, including in the United States; Meta and TikTok, for content approved for Instagram or TikTok, on servers that may be located, for example, in the United States and in Singapore. The privacy laws in those countries may differ from the law in Israel. Enquiries sent through the contact form and the cancellation form are stored with Netlify, and a copy of them is sent to the business's Gmail mailbox (a Google service). Sending a form on the website is also consent to the storage of the details with these providers outside Israel. The backup of the conversations and the copy of the records are kept encrypted in the phone's backup service or in a cloud service, both of which may operate outside Israel.
Such transfers of information are subject to the requirements of the applicable law, including the requirements relating to the transfer of information from databases in Israel to outside Israel. This notice does not detract from the business's obligations in selecting providers and in arranging the transfer.
10. Retention periods and security
The retention period is determined by the type of information, the purpose for which it was collected and the need for it. An enquiry that did not result in a booking, including its copies in the forms service, in e-mail and in WhatsApp, is deleted no later than 12 months after the last contact, unless it needs to be kept to clarify a claim or a proceeding. Information about a booking, payment, a cancellation notice or a request to change the date, consent or dispute may be kept for the period needed to manage the engagement, comply with document retention obligations and clarify rights. Information that is no longer required will be deleted or handled in a way that ends its identifiable use, subject to the law and to legitimate backup limitations. Records of publication approvals and of requests to stop use are kept for up to seven years from the removal of the last content or from the request, whichever is later, and are then deleted, unless an inquiry or a proceeding is under way. If it turns out that the person photographed was under the age of 18, the records are kept for up to seven years from the day she turned 18, if that is later. A message refusing publication is kept for as long as photographs or videos from the same request are kept by the business, and is deleted together with them.
The business is required to take security measures appropriate to the type of information and to the requirements of the law. There is no way to guarantee absolute immunity from a fault or unauthorised access. This statement does not exempt the business from the information security and incident handling obligations that apply to it.
11. Rights and requests
Subject to the Privacy Protection Law, you have the right to inspect information about you held in a database, yourself or through a person lawfully authorised to do so (section 13 of the Law). If the information is not correct, complete, clear or up to date, you may ask for it to be corrected or deleted in accordance with the conditions set out in the law (section 14 of the Law).
You may also submit a request to delete information that is no longer needed, to withdraw consent to a particular use or to remove a photograph. Each request will be examined according to the type of information, the basis for its use and the provisions of the law. A deletion request does not necessarily require the deletion of documents that must be kept, or that there is a lawful need to keep, such as payment records or information needed to resolve a dispute. This is not permission to continue marketing use or any other use not required for the purpose of retention.
Proportionate identity verification may be required in order to handle a request. Do not send a copy of your identity card on your own initiative. Noam will explain what information is required, and will respond in accordance with the time limits and requirements set out in the law. A request for inspection will be answered within the time limits set out in the regulations. You may get in touch through any of the means of contact above, and there is no need for a registered letter. You may also contact the Privacy Protection Authority or a competent court, as the case may be.
12. Minors
A service for a minor is booked through a parent or guardian. Only the information needed for the arrangement and the service should be provided. Information and publication relating to minors require special attention and are not used for publication on the basis of a booking confirmation alone. If information about a minor has been provided without appropriate authorisation, you may contact Noam to clarify the matter and arrange how it is handled. At this stage, there is no publication approval process for minors, and content that identifies a minor will not be published.
13. Updates and contact
The policy may be updated following a change in the business's activity, the website's services or the requirements of the law. The current version will be published with the update date. A material change in the purposes for which the information is used will not be deemed approved merely because the wording on the website has changed. Further notice will be given and consent will be requested where required.
For enquiries: Noam Markovich, phone or WhatsApp 0526210121, e-mail by.noam.markovich@gmail.com.