Privacy policy

Information collected and its purposes

The inquiry form collects your name, phone number, email address if provided, preferred contact method (WhatsApp, phone call or email) and a message of 5–2,000 characters. The inquiry time, handling status, the administrator's internal note and notification delivery status, where enabled, are also saved.

Providing your details is voluntary and is not a legal requirement. Your name, phone number, preferred contact method and message are required to handle and respond to your inquiry; an email address is optional. Choosing WhatsApp as your preferred reply method does not send the form to that service. Do not provide an identity document, medical information, payment details or sensitive information that is unnecessary for the inquiry.

The details are used solely to respond to the inquiry, arrange a transaction if desired, resolve a dispute or meet a legal obligation where necessary. Inquiries and/or submitted information are not used for internal or external marketing mailings.

Providing information in the form is voluntary. Without the required fields, the inquiry cannot be processed. The data controller is TalBricks, a private site operated by Tal. The information is used only to respond to inquiries and coordinate transactions, and may be processed by the hosting and email providers described in this policy. You may request access to or correction of personal information using the contact details in this policy.

Providing information in the form is voluntary; without the required fields, the inquiry cannot be processed. The information is used only to respond to inquiries and coordinate transactions, and may be processed by the hosting and email providers described in this policy. You may request access to or correction of personal information using the contact details in this policy.

Search terms entered on the site are saved to improve search and access to information. This log does not store an IP address, user identifier, cookie or device details. Do not enter personal or sensitive information in the search field.

When an inquiry is submitted from an item page or through My list, a structured snapshot of the included items is saved with it: internal and site identifiers, set or item number, name, condition, requested quantity, price at submission, item-page link and inquiry time. Item details and prices are checked against site data on the server. This information is used to handle the inquiry and identify the items of interest.

Internal browsing statistics store the viewed page address, view time and a random, hashed browser identifier. The application does not store IP addresses, contact details or form content for this purpose, and does not send measurement data to an external advertising or analytics service.

To prevent flooding and duplicate submissions, a random request identifier, a hash of the request details and a hashed identifier based on the IP address are stored. Hashing does not guarantee anonymity. Hosting providers may process IP addresses and technical information for operation and security; the extent of logging and retention period have not yet been verified.

Storage, access and providers

Information may be disclosed where required by law or to resolve a dispute, to the extent necessary for that purpose and insofar as it still exists in the database. Inquiry details will not be sold or given to advertisers for advertising purposes. Hosting, storage and notification providers may process information as necessary to operate the site and provide the services described in this policy.

When email notifications are enabled, the administrator receives a notification through Resend containing the inquiry number, receipt time, message content, product summary and a link to the protected administration area. The sender's name and contact-detail fields are not included. Common email addresses and phone numbers are filtered from the message, but identification of every personal detail in free text cannot be guaranteed. Please avoid including contact details in the message body.

According to Resend's documentation, information processed by the service, including message content and delivery logs, is stored in the United States. Retention periods depend on the account type and the provider's policy.

Information retention and deletion

Inquiries are retained until handling with the sender is complete, and in exceptional cases requiring longer retention. You may contact the site owner at any time to request proactive deletion of an inquiry or its details. The request will be handled after verifying a connection between the requester and the inquiry, subject to law and any need to retain information for an existing dispute or legal obligation.

Information retained for a dispute or legal obligation will be limited to what is necessary, and the need for retention will be reviewed when that reason ends.

You may contact the site owner at any time to request access to, correction of, or consideration of deletion of information relating to you. Identity verification is proportionate and, where possible, uses contact details already provided; do not attach a copy of an identity document to the form. Records of request handling are limited to the necessary minimum and need not duplicate the entire inquiry. The request is considered subject to law and any need to preserve information for an existing dispute or legal obligation.

Inquiries are stored in the site's administration area. There is currently no automatic deletion. Under the administrator's manual retention procedure, handled inquiries are reviewed and deleted 12 months after handling unless there is a documented need to retain them for a legal obligation or dispute. Open inquiries are reviewed monthly to determine whether retention is still necessary.

Portable backups downloaded by the administrator are kept in a protected, encrypted location with restricted access for up to 30 days, maintaining a current, valid backup under the recovery plan. Retention exceptions for legal obligations or disputes are reviewed and limited to the necessary information and period. This procedure applies to copies under the administrator's control; retention of copies in infrastructure providers' backups has not been fully verified, and immediate deletion from every copy is not guaranteed.

Cookies and external links

The application code reviewed did not contain Google Analytics, Meta Pixel or advertising and advertising-tracking tools. The site operates only the limited internal browsing measurement described in this policy. Cookies used by the hosting and sign-in providers still require practical verification; this is not a statement that the site uses no infrastructure cookies.

My list is saved in the browser's localStorage for seven days from the last change. It contains the selected product details and quantities, requires no sign-in and is not synchronized across devices or browsers. To check availability and prices, item identifiers and quantities are sent to the server when the list is opened, refreshed and before submission. Contact details and the message are stored with the list only after the inquiry form is submitted. You can delete the list using its remove or clear actions; clearing the site's browser data also deletes it.

After selecting I agree in the privacy notice, an acknowledgment is stored in localStorage for up to 400 days to avoid showing the notice on every visit. It contains no contact details. Clearing the site's browser data removes it and displays the notice again.

For browsing measurement, a random browser identifier is saved in localStorage for up to 400 days. The random browser identifier, a random event identifier and the page address are sent to the server. The server stores a hash of the browser identifier and records receipt time. This identifier is not a user account and is not synchronized between devices. Clearing the site's browser data resets it. Measurement is disabled when the browser sends a Global Privacy Control or Do Not Track signal supported by the application.

Requests concerning personal information

You may contact the administrator using any offered method and identify your request as a privacy request. Following verification appropriate to the scope and nature of the request, you may request access to information, correction of inaccurate or outdated information, and consideration of deletion, subject to the rights and conditions established by law. This policy does not limit any legal right.

Proportionate identity verification may be needed to handle a request. Do not attach a copy of an identity document to the form. A deletion request will also be considered against legal needs to retain information; there is no guarantee of an unconditional right to deletion in every circumstance.

-

Site administrator: Tal.

Contact by email: talbricks.com@gmail.com