This policy explains what information galitcohenart.com collects, why, and your rights. It follows Israel’s Protection of Privacy Law, 1981 and its regulations (including Amendment 13) and, for visitors from the EU, the GDPR. Data controller: Galit Arin Cohen (כהן גלית ארין), trading as Galit Art Studio, exempt dealer no. 040217077, Israel. Email: msgalitart@gmail.com.
What we collect
- Contact form: name, email, phone, subject and your message.
- Orders: name, shipping address, email, phone and order details. Payment is handled by PayPal — card details are not stored on this site.
- Commissions: the photos and details you send for the painting. They may show other people, including minors — see the consent clause in our Terms.
- Technical data: IP address and basic browsing data (browser type, page, time), recorded in server logs for security and operation.
- WhatsApp: the WhatsApp button opens a chat in the app; messages there are covered by WhatsApp’s policy.
- Cookies and third-party components:
- Essential cookies and browser storage for the site and the cart; and, for our own site analytics, a random visitor number kept in your browser (so we can tell new from returning visits). We use no advertising cookies and no outside analytics services.
- Site analytics: the pages you view, for how long and how far you scroll, clicks, which images and films you look at and for how long, page speed, the address you came from, your device, browser and language, and your approximate location (country, region, city) and IP address as reported by our hosting provider, Cloudflare.
- Visit recordings: a recording of what happens on the screen during a visit (pointer movement, clicks, scrolling), to understand how the site is used. What you type into forms is never recorded. Recordings are deleted after 30 days.
- Google Fonts: the site’s fonts are loaded from Google’s servers, so your IP address is passed to Google when they load.
- The Enable accessibility tool: loaded from the provider’s external server, and may store the accessibility preferences you choose in your browser.
- Films: artwork films are shown from YouTube, which may collect data under its own policy.
Do you have to give us your data?
You are not legally required to give us any data; it is your choice. However, name, email and phone are required so we can reply to you and coordinate orders and commissions; without them we cannot respond. The contact form also asks for a subject, and an order needs a shipping address. Other fields are optional.
How we use it, and on what legal basis
- Orders, shipping, commissions and customer service — to perform our contract with you.
- Bookkeeping, receipts and record-keeping — to meet our legal obligations.
- Site analytics and visit recordings — to improve the site and learn which works interest visitors (our legitimate interest). Visitors in the EU, EEA, UK and Switzerland are asked first, and without their consent are only counted anonymously (no visitor number, IP, city or recording).
- Email updates — only with your consent, which you can withdraw.
- Replying to enquiries, site security, fonts and the accessibility tool — our legitimate interest in running the site properly and safely.
If we send email updates, it will be only with your explicit consent, and you can unsubscribe at any time. We do not sell your data.
Who we share it with
Only as needed: the studio’s shop manager, who handles orders and customer messages on our behalf; our print partners, in Israel and abroad (for example Canada and China), who receive the name and shipping address needed to produce and ship a print; PayPal for payment; the courier that delivers your order; our website host, EZPOINT; and authorities where the law requires. Each receives only what it needs.
Transfers outside Israel
Some recipients are outside Israel, including in the US, the EU, Canada and China — for example our print partner in China, PayPal and Google. Such transfers are made as the law allows, under appropriate contractual safeguards where needed, or because they are necessary to fulfil your order.
How long we keep it
- Order records and receipts — 7 years.
- Enquiries that did not lead to an order — up to 24 months.
- Photos sent for a commission — up to 12 months after delivery, unless you ask otherwise.
Security
The site uses an encrypted connection (HTTPS), and access to data is limited to those who need it to handle orders and enquiries.
Children and the games
The shop is not intended for purchases by minors. The games on the site have no sign-up and no forms: your progress is stored only in your own browser (localStorage) and does not reach us. You can delete it with the reset button or by clearing your browser data. The “Share on WhatsApp” button works only when you tap it, and opens your app with a link to the game; we receive no information about the share.
Your rights
You may ask to see, correct or delete your data, and to restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (for example, for email updates or for site analytics), and ask us to delete your site analytics data and visit recordings. Write to msgalitart@gmail.com; we reply within the time the law sets. You may also complain to the Israeli Privacy Protection Authority or, in the EU, to your local data protection supervisory authority.
Last updated: 22.10.2026.