Privacy policy
Last updated: 27.09.2026
This is an English translation provided for convenience. The Hebrew version of this policy is the binding version.
1. General
Eyal Medical Equipment Ltd., company no. 517084554 (the "Company"), operates the website eyalmed.com (the "Website"), a catalog and ordering website for medical and veterinary equipment. The Company respects users' privacy and acts in accordance with the Protection of Privacy Law, 5741-1981 (including Amendment No. 13, in force since 14.08.2025), the Protection of Privacy (Data Security) Regulations, 5777-2017, and Section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982.
This policy also constitutes the notice required under Section 11 of the Protection of Privacy Law.
2. Database controller and contact details
Database controller: Eyal Medical Equipment Ltd., company no. 517084554.
Address: 7 Tkhiya St., Pardes Hanna-Karkur.
Phone: 058-666-6661. Email: office@eyalmed.com.
Privacy requests (access, correction, deletion or any question) may be made through any of these channels.
3. Is there an obligation to provide information, and what happens if you refuse
You are under no legal obligation to provide information; providing it depends on your will and consent. However, without contact details we cannot get back to you about an inquiry; without order details we cannot process and deliver an order; and without registration details, including a license number where required, we cannot open a personal area for you or show you personal prices.
4. Information we collect
a. Inquiries and price quote requests: name, phone, message content and the product you were interested in.
b. Registration for the personal area: first and last name, clinic or business name, license number, company/business registration number, phone, email, address and password. The password is stored encrypted (one-way hash) and is not visible to anyone, including Company employees.
c. Orders: name, clinic name, phone, email, delivery address, notes, order items, prices, coupon code and the IP address from which the order was sent.
d. Personal area: orders, documents (price quotes, invoices, receipts), balances due, payments and the favorites list.
e. Technical information: IP address, login times and login attempts, for data security and to prevent misuse.
The Website does not collect credit card details and has no online payment. The Company does not knowingly collect information of special sensitivity as defined by law, and asks that such information not be entered in free-text fields.
5. Purposes of use
Responding to inquiries and preparing price quotes; receiving, processing and delivering orders; checking eligibility to purchase products whose sale requires a license; managing the personal area and showing personal prices and discounts; issuing accounting documents and bookkeeping as required by law; service, warranty and support; data security and prevention of fraud and misuse; compliance with legal requirements and defense against claims.
The Company will not use the information for any other purpose without your consent, unless required or permitted by law.
6. Marketing mail
The Company will not send advertising by email, text message or any other means except with your explicit prior consent or as permitted by law. You may ask at any time to be removed from the mailing list by writing to office@eyalmed.com or in the way stated in the message itself. Operational messages, such as order receipt confirmation, order status changes, registration approval and password reset, are not advertising.
7. Disclosure to third parties
The Company does not sell or trade in personal information. Information will be disclosed only in these cases: to service providers acting on the Company's behalf and under its instructions (server hosting, email, accounting, shipping and transport), to the extent required to provide the service and subject to confidentiality and data security undertakings; to the manufacturer or importer, for warranty and service, as required; to competent authorities, where required by law or court order; in a merger or transfer of business, to the transferee, provided it undertakes to comply with this policy.
If information is transferred or stored outside Israel, this will be done in accordance with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.
WhatsApp correspondence: when you contact the Company on WhatsApp, the Company's system stores your phone number, your WhatsApp display name, the messages (written and voice), the files you send (photos, videos and documents) and a short summary of previous conversations, to answer you and for sales, service and technical support. Replies in the chat are written and sent automatically by the Company's artificial intelligence agent, and a Company employee joins the conversation when needed; for this purpose the correspondence and files are transferred to an external provider of the artificial intelligence service, acting on the Company's behalf under an agreement and subject to confidentiality and data security undertakings. Apart from this provider, the correspondence is visible to Company staff only. The correspondence is kept as long as it is needed to provide the service and for the business relationship, and you may ask for it to be deleted at any time by contacting the Company. Use of WhatsApp itself is subject to WhatsApp's own terms and privacy policy.
8. Cookies and local browser storage
The Website uses essential cookies only: a login (session) cookie and a security cookie against request forgery (CSRF). In addition, the following are stored in your browser only (Local Storage): the shopping cart, the favorites list of a non-registered user, an entered coupon code and your chosen catalog view. The tab's session storage keeps only a mark that the site's loading screen was already shown, so it does not appear again in the same tab. This data is not sent to any third party and can be deleted at any time in your browser settings.
The Website does not use advertising cookies, tracking tools or third-party analytics services, and all its resources, including fonts and icons, are loaded from the Company's servers.
One exception, with your consent only: a Google visit counter (Google Analytics). Consent is given in the consent bar at the bottom of the page, and you can keep only the essential cookies. You can change your choice at any time by deleting the cookies in your browser.
9. Data security
The Company applies accepted security measures in accordance with the Protection of Privacy (Data Security) Regulations, 5777-2017, including: encrypted communication (HTTPS), encrypted password storage, role-based access permissions, logging of actions in the system (activity log), limits on login attempts, and backups. However, no security is absolute, and the Company cannot guarantee that the Website will be completely immune to unauthorized access. In the event of a serious security incident, the Company will act as required by law, including reporting to the Privacy Protection Authority and to data subjects where required.
10. Retention period
Information will be kept as long as it is needed for the purposes for which it was collected or as required by law. Accounting documents and transaction records are kept for at least seven years, as required by bookkeeping regulations. Inquiries that did not lead to a transaction and rejected registration requests will be deleted or anonymized when no longer needed. Login logs are deleted periodically.
11. Your rights
Under Sections 13 and 14 of the Protection of Privacy Law, you are entitled to review the information held about you in the database, yourself or through an attorney or guardian, and to request the correction or deletion of information that is not correct, complete, clear or up to date. Requests will be answered within 30 days. If the Company refuses a request, you will receive a reasoned notice and may apply to the Magistrates' Court as provided by law. You may also ask at any time to be removed from mailings and to close your personal area. To exercise these rights, the Company may ask for details to verify your identity.
A registered customer can view their details in the personal area; details are updated by contacting the Company.
If you believe your privacy has been violated, you may contact us, and you may also file a complaint with the Privacy Protection Authority at the Ministry of Justice.
12. Minors
The Website is intended for professionals, clinics and businesses and is not intended for anyone under 18. The Company does not knowingly collect information about minors.
13. Links to other websites
The Website may include links to third-party websites and social networks. This policy does not apply to them, and we recommend reading their privacy policies.
14. Changes to the policy
The Company may update this policy from time to time. The updated version will be published on this page, with the update date shown at the top. Material changes will be brought to the attention of registered customers.