Privacy Policy - Ohad Michaeli Consulting

Effective Date: September 4, 2025
Last Updated: September 4, 2025

This Privacy Policy explains how Ohad Michaeli Consulting (“we,” “us,” or “our”) collects, uses, shares, and safeguards personal information when you visit ohadmichaeli.com (the “Site”), subscribe to our content, or engage our consulting services.

By using our Site and services, you agree to this Privacy Policy.

1) Who We Are (Controller)

Ohad Michaeli Consulting
Address: Wedgewood 32 St. Haifa Israel
Email: privacy@ohadmichaeli.com
Website: https://ohadmichaeli.com

2) Information We Collect

We collect information in three ways: you provide it, we collect it automatically, or we receive it from service providers.

A. Information you provide

Contact details: name, email address, phone, company name, role/title.
Business context: details shared during discovery calls, audits, and consulting engagements.
Transactional data: invoices, payment confirmations, and communications related to services. (We do not store full credit card numbers; payments are handled by our payment providers if applicable.)
Newsletter data: your email and your marketing preferences.

B. Information collected automatically

Usage data: IP address, device and browser type, pages viewed, referring URLs, time spent, and general location (city/country-level, where available).
Cookies, pixels, and similar technologies for analytics, performance, and (if enabled) marketing measurement. See §10.

C. Information from service providers

Scheduling platforms, analytics providers, email service providers, payment processors, and hosting providers may share limited data needed to run our services (e.g., form submissions, delivery status, aggregated analytics).

3) How We Use Your Information (Purposes)

Provide and improve our consulting services.
Respond to inquiries and manage discovery calls.
Send newsletters, resources, and service updates (you can opt out anytime).
Analyze Site performance and improve user experience.
Detect, prevent, and address security or technical issues.
Comply with legal, tax, and regulatory obligations.

4) Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data based on:

Consent (e.g., newsletter sign-ups, certain cookies).
Contract (to provide services you requested).
Legitimate interests (business operations, analytics, security, customer communications).
Legal obligation (recordkeeping, compliance).

You can withdraw consent at any time (see §12).

5) Sharing of Information

We do not sell personal information. We may share it with:

Service providers acting on our behalf (hosting, email delivery, analytics, scheduling, payment processing, security).
Professional advisors (legal, accounting) where needed.
Authorities when required by law or to protect rights/safety.
Business transfers in connection with a merger, acquisition, or asset sale.

These parties are bound by contractual and confidentiality obligations and may only use data as instructed.

6) International Transfers

Your information may be processed in countries other than where you reside. We use appropriate safeguards (e.g., data processing agreements and standard contractual clauses with service providers) to protect your information when transferred internationally.

7) Data Retention

We keep personal information only as long as necessary for the purposes in this Policy:

Newsletter data: until you unsubscribe or after 24 months of inactivity.
Client/project records and invoices: typically 7 years for tax/legal reasons.
Web logs/analytics: typically up to 12–24 months in aggregated or pseudonymized form.
We may retain data longer if required by law or to establish/defend legal claims.

8) Security

We use reasonable technical and organizational measures to protect information (encrypted transport, access controls, least-privilege practices). No method is 100% secure; we cannot guarantee absolute security.

9) Children’s Privacy

Our Site and services are not directed to individuals under 18, and we do not knowingly collect data from minors.

10) Cookies, Pixels & Analytics

We use cookies and similar technologies to:

Run the Site and remember preferences (strictly necessary).
Measure performance and improve content (analytics).
(If enabled) assess marketing effectiveness.

Your choices:

Use your browser settings to block or delete cookies.
If a cookie banner is presented on the Site, set your preferences there.
Some browsers send a Global Privacy Control (GPC) signal; we treat it as a request to opt out of sale/sharing where legally required.

Blocking certain cookies may affect Site functionality.

11) Email Marketing (CAN-SPAM compliance)

If you subscribe to our newsletter or request resources:

We will clearly identify promotional emails and include our physical mailing address.
You can unsubscribe at any time via the link in our emails or by emailing privacy@ohadmichaeli.com.
We honor opt-out requests within 10 business days.
We do not use deceptive headers or misleading subject lines.
We do not sell email lists.

Mailing address for email compliance:
Wedgewood 32 St. Haifa Israel

12) Your Rights

Your privacy rights depend on your location. You may have the right to:

EEA/UK (GDPR)

Access, correct, or delete your data.
Object to or restrict processing.
Data portability.
Withdraw consent at any time (does not affect prior lawful processing).
Lodge a complaint with your local supervisory authority.

United States (including CA/VA/CO/CT/UT)

Know/access categories and specific pieces of personal information collected.
Request deletion, correction, or portability (where applicable).
Opt out of “sale” or “sharing” for cross-context behavioral advertising (we do not sell data; if ad cookies are used, opt out via the cookie banner, browser controls, or GPC).
Limit the use of sensitive personal information (we do not seek to collect it).
Non-discrimination for exercising your rights.

How to exercise:
Email privacy@ohadmichaeli.com with your request and sufficient details to verify your identity. If you are an authorized agent (e.g., under California law), include proof of authorization.

13) Do Not Track & GPC

Browsers may offer Do Not Track. There is no common standard; we do not respond to DNT. We will honor Global Privacy Control (GPC) signals as an opt-out where applicable law requires.

14) Third-Party Links

Our Site may link to third-party websites or services. Their practices are governed by their own policies. We are not responsible for their content or privacy practices.

15) Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date shows the latest revision. Material changes will be posted on this page and, where required, we will notify you by email.

16) Contact Us