Privacy Policy

1. Introduction

Nula ("we", "us", "our") operates the Nula marketplace platform at nula.me (the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use our Platform. By using the Platform, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and complying with applicable data protection laws, including the Israeli Protection of Privacy Law 5741-1981, the General Data Protection Regulation (GDPR), and other relevant legislation.

2. Data Controller

The data controller for information collected through the Platform is:

• Company: Kamal Agbaria (Reg. No. 034650887)
• Address: Almadina 62, Umm el Fahem, Israel
• Email: legal@nula.me
• Phone: +972 50-229-2309

3. Information We Collect

3.1 Information You Provide

• Account information: name, email address, phone number, and profile details when you create an account.
• Booking information: appointment details, service preferences, and scheduling data when you book services through the Platform.
• Communications: messages, reviews, ratings, and any content you submit through the Platform.
• Payment information: when payment processing is enabled, payment details are collected and processed securely by our payment processor, AllPay. We do not store your full payment card details.

3.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage data: pages visited, features used, booking patterns, search queries, and interaction data.
• Location data: approximate location derived from your IP address to show relevant businesses near you.
• Cookies and similar technologies: as described in Section 8 below.

3.3 Information from Third Parties

• Business partners: service providers listed on the Platform may share information related to your bookings and appointments.
• Authentication providers: if you sign in using a third-party service (e.g., Google, Apple), we receive basic profile information as authorized by you.

4. How We Use Your Information

We use your personal information for the following purposes:

• Providing the service: operating the marketplace, enabling bookings, managing your account, and connecting you with service providers.
• Communication: sending booking confirmations, reminders, service updates, and responding to your inquiries.
• Improvement: analyzing usage patterns to improve Platform features, user experience, and service quality.
• Safety and security: detecting and preventing fraud, abuse, and unauthorized access.
• Legal compliance: complying with applicable laws, regulations, and legal processes.
• Payment processing: when enabled, facilitating secure payment transactions through AllPay.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal data includes:

• Contract performance: processing necessary to provide services you have requested (e.g., managing bookings, account management).
• Legitimate interests: improving our Platform, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
• Consent: where you have given explicit consent for specific processing activities (e.g., marketing communications). You may withdraw consent at any time.
• Legal obligation: processing necessary to comply with legal requirements under Israeli and EU law.

6. Data Sharing

We may share your personal information with:

• Service providers on the Platform: businesses you book with receive your name, contact details, and booking information necessary to provide the requested service.
• Payment processor: AllPay (allpay.co.il) processes payment transactions on our behalf. AllPay receives only the information necessary to process your payment securely.
• Infrastructure providers: hosting, analytics, and email providers who assist us in operating the Platform, bound by data processing agreements.
• Legal authorities: when required by law, court order, or governmental request, or to protect our rights, property, or safety.

We do not sell your personal data to third parties.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including Israel and countries where our infrastructure providers operate. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions.

Israel has been recognized by the European Commission as providing an adequate level of data protection.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for the Platform to function properly (e.g., session management, authentication).
• Analytics cookies: help us understand how visitors use the Platform (e.g., Vercel Analytics).
• Preference cookies: remember your settings and preferences (e.g., language, locale).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account data: retained while your account is active and for up to 12 months after deletion.
• Booking history: retained for up to 36 months for service records and dispute resolution.
• Payment records: retained as required by Israeli tax law (up to 7 years).
• Analytics data: aggregated and anonymized data may be retained indefinitely.

10. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure storage, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Rights

11.1 Under GDPR (EEA Residents)

You have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

11.2 Under Israeli Privacy Law

Under the Protection of Privacy Law 5741-1981 (as amended by Amendment No. 13), you have the right to access, correct, and delete your personal information held by us. You may also object to the use of your information for direct marketing purposes.

11.3 Exercising Your Rights

To exercise any of these rights, contact us at legal@nula.me. We will respond to your request within 30 days, or within the timeframe required by applicable law.

12. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Platform at least 14 days before taking effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: legal@nula.me
• Phone: +972 50-229-2309
• Address: Almadina 62, Umm el Fahem, Israel