Privacy Policy
ME·J INTERNATIONAL LTD. ("ME·J", "we", "us", "our")
1. Definitions
"Personal Data" – any information relating to an identified or identifiable natural person.
"Cookies & Similar Technologies" – small files, pixels, tags, SDKs, local storage and other tracking technologies capable of storing or accessing information on a device.
"Remarketing" / "Retargeting" – showing ads to you based on your past interaction with our Site across third-party sites or platforms.
"CPRA Sale/Share" – disclosing Personal Data to a third party for cross-context behavioural advertising.
2. Who we are
ME·J INTERNATIONAL LTD., Israeli company reg. no. 516016490, registered office Amal 10, Givatayim, 5332710 IL.
Global Privacy Officer: Yonatan Milliner · privacy@mejplay.com · +972-54-6497670.
EU/UK Representative (Art 27 GDPR): Not yet appointed. Contact privacy@mejplay.com for enquiries.
3. What Personal Data we collect & why
| Category | Examples | Purpose | Legal basis* |
|---|---|---|---|
| Inquiry Data | Name, email, phone, company | Respond to questions, issue quotes, demo access | Consent; pre-contract steps |
| Device & Usage Data | IP (anonymised for analytics), browser, OS, pages viewed, timestamps | Site analytics, fraud detection, optimisation | Legitimate interest |
| Business Intelligence Data | GA4 client IDs, demo request values, lead scoring metrics, conversion events | Measure demo request effectiveness, optimize sales processes, business analytics | Consent (analytics cookies) |
| Communications | Emails, call notes | Contract performance, support, record-keeping | Legitimate interest; legal obligation |
*GDPR references: Art 6 (1)(a) Consent, (b) Contract, (f) Legitimate interest. Equivalent bases apply under LGPD, PIPEDA, APPs. We do not intentionally process sensitive data.
4. How we collect data
- Information you send via forms, email, phone or chat.
- Automatic collection through Cookies & Similar Technologies (see § 6).
- Server logs generated by our hosting provider.
5. How we use Personal Data
- Provide quotations, demos and contractual services.
- Improve, secure and debug the Site.
- Measure and optimise advertising campaigns.
- Comply with legal duties (tax, bookkeeping, sanctions, consumer-protection).
No automated decision-making producing legal effects is carried out.
7. Disclosures
| Recipient | Purpose | Safeguard |
|---|---|---|
| Sub-processors (hosting, cloud email, analytics) | Service delivery | DPA & SCCs |
| Analytics platforms (Google, Microsoft) | Analytics processing, business intelligence, UX improvements | SCCs / Analytics platform DPA |
| Authorities & courts | Legal or regulatory requirement | Legal obligation |
| Corporate transactions | Merger, acquisition or asset sale | Contractual confidentiality |
We do not sell Personal Data for monetary consideration. Under CPRA we share Marketing & Remarketing Data for cross-context behavioural advertising; you may opt out via the cookie banner.
8. International transfers
Personal Data may be processed in Israel, EEA, UK, USA, Canada and other jurisdictions. Transfers outside Israel/EEA rely on adequacy decisions, 2021 EU Standard Contractual Clauses, UK Addendum, and transfer-impact assessments with appropriate technical measures (encryption in transit & at rest).
9. Data retention
| Dataset | Retention | Deletion method |
|---|---|---|
| Inquiry records | 24 m after last contact | Secure deletion or anonymisation |
| GA4 events | 14 m | Automatic GA settings |
| Server logs | 30 d | Rolling overwrite |
| Back-ups | ≤ 180 d | Encrypted purge cycle |
10. Security
We implement TLS 1.3 encryption, role-based access, annual penetration tests, vendor SOC 2/ISO 27001 reviews, and AES-256 encrypted off-site backups. No internet transmission is 100% secure, but we follow industry standards to mitigate risk.
11. Breach response
Suspected incidents are triaged within 24 h. If a breach is confirmed, we: (i) contain; (ii) assess impact; (iii) notify affected users and regulators without undue delay where required by law.
12. Your rights
| Jurisdiction | Rights |
|---|---|
| GDPR/UK GDPR/LGPD | Access, rectify, erase, restrict, port, object, withdraw consent |
| CPRA | Know, correct, delete, opt-out of sale/share, limit sensitive data (not applicable) |
| PIPEDA | Access, correct, withdraw consent |
| APPs (Australia) | Access, correct, complain |
To exercise rights, email privacy@mejplay.com. Identity verification is required. Processing is free unless requests are manifestly unfounded or excessive.
13. Children
The Site is not directed to children under 16 (GDPR) or 13 (COPPA – U.S.). We do not knowingly collect their data. If you believe a child has provided information, contact us for deletion.
14. External links
Third-party sites operate under their own privacy practices. Review their policies before submitting data.
15. Changes
We may update this Policy. Material changes become effective 30 days after posting and notification via banner or email. Check "Last revised" date for current version.
16. Contact
Privacy Officer, ME·J INTERNATIONAL LTD.
Amal 10, Givatayim, 5332710 IL · privacy@mejplay.com · +972-54-6497670
End of Policy