Last updated: 15 October 2026

1. General

1.1. Prizma Optics, licensed dealer no. 305934697, of 32 Herzl Street, Ashkelon (hereinafter: "the Company"), respects the privacy of its customers, including anyone who has registered for its event or contacted it in any manner (hereinafter: "the Customer"), and of the users of its website at prizma-optic.co.il (hereinafter: "the User" and "the Website", respectively), and operates in accordance with applicable law in Israel, including the Privacy Protection Law, 5741-1981 and the regulations promulgated thereunder (hereinafter: "the Law").

1.2. In this policy, "personal information" has the meaning given to it in the Law, namely data relating to an identified person or to a person who can be identified; whatever is stated in this policy in the singular also applies to the plural, and vice versa.

1.3. The Company is the controller of the database that contains the information described in this policy. The Company's contact details are set out in Section 13 below.

1.4. This policy sets out what personal information the Company collects, the purposes for which it is used, to whom it may be transferred, how it is retained and secured, and what rights are available to the person to whom the information relates. It applies to information provided to the Company or collected by it through any channel, including the Website, the branch, event registration, WhatsApp, SMS, email and telephone.

1.5. This policy forms an integral part of the Company's terms and conditions. In any matter concerning the collection, use, retention and transfer of personal information, this policy shall prevail over any other provision of the Company's terms and conditions.

2. Information Collection

2.1. Providing information to the Company is not required by law, and depends on the wishes and consent of the Customer. However, certain services cannot be provided without certain information: without contact details, the Company cannot respond to an inquiry or manage an event registration; without a prescription or the results of an eye examination, prescription glasses or made-to-measure lenses cannot be prepared; and without the details required to issue an invoice, a purchase cannot be completed.

2.2. The Company may collect and process the following information:

2.2.1. Personal and contact details, including name, telephone number, email address and address, and, where necessary, also ID number and date of birth;

2.2.2. Medical information relating to optical services, including eye examination results, prescriptions and fitting data for glasses and contact lenses;

2.2.3. Information about purchases, orders, payments, deliveries and event registration. Credit card details are entered into the payment processor's system, and the full card number is not stored in the Company's systems;

2.2.4. The content of inquiries and correspondence with the Company, including in forms on the Website, WhatsApp, SMS and email;

2.2.5. Technical usage data on the Website, including IP address, browser and device type, pages viewed and duration of the visit, as well as data collected by means of Cookies and similar technologies, as set out in Section 8 below.

2.3. The information is provided to the Company, among other ways, by the Customer personally, is generated in the course of providing the service to the Customer, such as the results of an eye examination conducted at the branch, or is received from service providers acting on the Company's behalf within the service the Customer requested, such as payment confirmation from the payment processor.

2.4. A Customer who provides the Company with information about another person, including a family member, declares that he or she has obtained that person's consent to the provision and processing of the information in accordance with this policy. Information about a minor is provided to the Company by his or her parent or guardian, or with their consent.

2.5. Contacting the Company through a third-party platform, such as WhatsApp, Facebook or Instagram, is also subject to the terms of use and privacy policy of the platform operator, which processes the content of the inquiry in accordance with them. This policy applies to the information from the moment it reaches the Company.

3. Purposes of Use of Information

3.1. The Company uses personal information for the following purposes:

3.1.1. Providing optical services, including eye examinations, prescription fitting, preparation and supply of glasses and lenses, and customer service;

3.1.2. Managing the Company's business, including processing orders, issuing invoices, collecting payments and complying with contractual obligations and legal requirements;

3.1.3. Maintaining continuity of care and prescription history;

3.1.4. Managing event registration and sending service messages, as set out in Section 3.2 below;

3.1.5. Sending marketing messages to those who have given their consent to this, as set out in Section 3.3 below;

3.1.6. Improving the service, the Website and the user experience, including producing aggregated statistical data that does not identify a person;

3.1.7. Securing the Website and systems, protecting the Company's rights, including conducting legal proceedings, and dealing with fraud and breaches of the terms of use.

3.2. Service messages: Messages relating to an order, an appointment, a service the Customer has received or an event for which the Customer has registered, including registration confirmation, reminders, notice of the opening of registration, a coupon code or personal barcode, and updates on dates and changes, are sent as part of the service the Customer requested and are not conditional on consent to marketing messages. Every message relating to an event includes an option to stop receiving it.

3.3. Marketing messages: Promotions, benefits, invitations to other events and other marketing content will be sent by WhatsApp, SMS or email only to a Customer who has given explicit and separate consent to this, which is not a condition for a purchase, for registration or for receiving a service. Consent may be withdrawn at any time and free of charge, by replying «הסר» to the message, by clicking the unsubscribe link that appears in it, or by contacting the Company.

4. Information Retention

4.1. The Company will retain personal information for as long as necessary for the purposes set out above, including in order to comply with legal requirements.

4.2. Without derogating from the above:

4.2.1. Transaction data will be retained for at least seven (7) years, in accordance with bookkeeping laws;

4.2.2. Inquiries made through "Contact Us" forms or service requests will be retained for up to twenty-four (24) months from the date of the inquiry;

4.2.3. Medical information will be retained for the period required for the continuation of optometric care and in accordance with legal obligations.

4.3. Information that is no longer needed will be deleted or anonymized.

4.4. Information is kept in the Company's databases, which are stored on secure servers of leading cloud service providers located, among other places, in member states of the European Union. The Company may transfer information to service providers operating outside the State of Israel, subject to all applicable law, including the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001.

4.5. In order to respond to inquiries faster, the Company may use an artificial intelligence service of a cloud provider (Amazon Web Services), operating on servers in the European Union, to draft replies to inquiries and to send them. Some of the replies are reviewed by the Company's team before they are sent, and some may be sent automatically. You may at any time request a reply from the Company's team. The provider does not retain the content of the inquiry after handling it and does not use it to train models.

5. Transfer of Information to Third Parties

5.1. The Company does not sell or lease personal information, and does not transfer it to third parties except in the following cases:

5.1.1. To service providers acting on behalf of the Company, including providers of cloud, storage and computing services, laboratories and lens manufacturers, messaging and mailing service providers, payment processors, bookkeeping and invoicing providers, couriers, and website security and accessibility providers. These providers may use the information solely to the extent required to provide the service to the Company;

5.1.2. To the extent required by law, court order or the demand of a competent authority;

5.1.3. For the purpose of protecting the Company's rights, preventing fraud, and handling disputes or breaches of the terms of use;

5.1.4. In the course of a transfer of the Company's business, in whole or in part, including a merger, sale or acquisition, provided that the receiving party undertakes to comply with the provisions of this policy;

5.1.5. At the Customer's request or with the Customer's consent, including the transfer of a prescription to a party designated by the Customer.

5.2. Advertising and Measurement on Social Networks

The Company may transfer to advertising platforms and social networks, such as Meta (Facebook and Instagram), contact details of customers and users, including telephone number and email address, in encrypted form, as well as information on actions performed on the website (such as registration for an event). The information is transferred for the purpose of measuring the effectiveness of the Company's marketing activities and for displaying tailored content and advertisements, all in accordance with applicable law. A request that the information not be transferred for these purposes may be made at any time by contacting the Company at service@prizma-optic.co.il, and the Company will act to stop its transfer.

6. Medical Information

6.1. Medical information, including eye examination results and prescriptions, is information of special sensitivity as defined in the Law.

6.2. The Company uses medical information solely for the purpose of providing optical services and continuing the Customer's care, and does not transfer it to a third party except to the extent required to provide the service, including to secure cloud service providers and laboratories acting on its behalf, or at the Customer's request.

6.3. Eye examination results and prescriptions are not transferred to advertising platforms.

6.4. Access to medical information is granted only to authorized employees, as required for their role, and they are bound by a duty of confidentiality by law.

7. Information Security

7.1. The Company takes reasonable technological and organizational measures, including the use of encryption protocols (SSL/TLS), server security systems and access controls, to prevent unauthorized use, loss of or harm to personal information.

7.2. It is clarified that despite these efforts, the transmission of information over the internet is not completely secure, and the Company cannot guarantee absolute security.

7.3. In the event of an information security incident, the Company will act in accordance with the law, including with regard to reporting to the Privacy Protection Authority to the extent that the law so requires.

8. Cookies and Measurement Tools

8.1. The Website uses Cookies and similar technologies, divided into the following categories:

8.1.1. Necessary - required for the operation and security of the Website, and always active;

8.1.2. Analytics - tools for analyzing how the Website is used in order to improve it, such as Microsoft Clarity, which records usage data such as scrolling, clicks and mouse movements;

8.1.3. Marketing - tools for measuring advertising activity and tailoring advertisements, such as the Meta pixel;

8.1.4. Personalization - saving the User's preferences on the Website.

8.2. Cookies that are not necessary are activated only after the User has approved the relevant category in the cookie banner. The choice may be changed at any time using the "Cookie preferences" link at the bottom of the Website. In addition, the analytics tools are not activated when the browser sends a "Do Not Track" request.

8.3. Providers of measurement and advertising tools may also process the information collected through them in accordance with their own privacy policies.

8.4. Cookies can also be blocked in the browser settings. Such blocking may impair some of the Website's functions.

9. Personal Page on the Website

9.1. The Company may send the Customer a personal link to a personal page on the Website, which displays information relating to the Customer, such as event registration details, a reserved place, a coupon and an appointment.

9.2. The personal link is intended for the Customer's use only, and anyone who holds it can view the page. The link should be safeguarded and not passed on to others. Anyone who has received a personal link that is not intended for him or her is requested not to use it and to notify the Company accordingly.

10. Rights of Data Subjects

10.1. Pursuant to Section 13 of the Law, every person is entitled to review the information about him or her held in the Company's database, personally, through a person authorized by him or her in writing for this purpose, or through a guardian.

10.2. Pursuant to Section 14 of the Law, a person who has found that information about him or her is not correct, complete, clear or up to date may ask the Company to correct or delete it. If the Company grants the request, it will also notify the parties that received the information from it.

10.3. Any person may at any time ask to be removed from the marketing mailing list, as set out in Section 3.3, and may also ask that the information not be transferred to advertising platforms, as set out in Section 5.2.

10.4. Requests under this section may be addressed to the Company through the contact details set out in Section 13 below. To protect the information, the Company may ask the requester for details to verify his or her identity before handling the request. The Company will respond to the request within 30 days, and if it decides not to grant it, in whole or in part, it will notify the requester of its decision in accordance with the law.

10.5. Nothing in this policy derogates from the right of any person to contact the Privacy Protection Authority.

11. Changes to the Policy

The Company may update this policy from time to time. The updated version will be published on this page, stating the date of the update, and a material change will also be published in a prominent notice on the Website.

12. Governing Law and Jurisdiction

This policy is governed by the laws of the State of Israel, and jurisdiction over any dispute relating to it lies with the competent courts in Israel.

13. Contact

For questions and requests regarding this policy and personal information, you may contact:

Prizma Optics, licensed dealer no. 305934697

Email: service@prizma-optic.co.il

Phone / WhatsApp: 053-364-5404

Mailing address: 32 Herzl Street, Ashkelon