Howazit Ltd. Privacy Policy

PRIVACY POLICY

[Last Updated: April 10, 2025]

Howazit Ltd. (“Howazit”, “us” or “we”) provides its customers (“Customer”) with a Software-as-a-Service cloud-based managing solution (“Platform”) allowing Customers to enhance their business’s customer experience through digital engagement tools, including feedback and surveys, with integrated analytics to measure performance (together with the Platform and the feature, be “Services”).  

This privacy policy (“Privacy Policy”) describes how Howazit collects, uses, and processes Personal Data, specifically the types of Personal Data collected, the purposes for which we will use it, how long we will retain it, with whom we share it, and your rights regarding your Personal Data.

  • Any individuals, including representatives of prospects and potential business partners, who access and use our website or other digital assets under our domain, including requesting a demo, or other similar forums as available through our website (respectively “website” and “Prospects”);
  • Customers that access and use the Services (through the Platform). However, specifically excludes any data processed by Howazit in its role as a data processor, processing Personal Data on behalf of the Customer, which is subject to our commercial agreements and a data processing agreement with the Customer;
  • Authorized users, employees or contractors, using and accessing the Services or marketplace on behalf of a Customer or Supplier (“Authorized User”); and

Customer and Prospect shall be, collectively and separately, referred herein as “you”.

ANY PERSONAL DATA YOU PROVIDE IS MADE AT YOUR FREE WILL AND CONSENT (WHERE REQUIRED UNDER APPLICABLE DATA PROTECTION LAWS), AND YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY STATUTORY OBLIGATION TO PROVIDE PERSONAL DATA TO HOWAZIT. HOWEVER, IF YOU WILL NOT PROVIDE US WITH CERTAIN PERSONAL DATA, WE WILL NOT BE ABLE TO FULFILL CERTAIN SERVICES.

This Privacy Policy further includes or incorporates specific information required under applicable data protection laws for residents of certain jurisdictions, among others:

If you are a located in the EEA or UK – this Privacy Policy further details our lawful basis for processing Personal Data, information regarding cross border data transfer and your rights, as well as additional information we are required to disclose to you under the EU and the UK General Data Protection Regulations (collectively “GDPR”).

If you are a California resident – please also review our CCPA Privacy Notice which serves as a Notice at Collection as required under the California Privacy Rights Act (“CCPA”) and further details the categories of information collected and additional information regarding our privacy practices, including your rights.

Additional Information to certain United States Residents – please also review Section 12 of this Privacy Policy “Additional Notice for US Residents to learn more about our privacy practices and your rights under these territories.

  • POLICY AMENDMENTS

We reserve the right to amend this Privacy Policy from time to time, at our sole discretion. The most recent version of this Privacy Policy will always be posted on the website and the update date will be reflected in the “Last Updated” heading. We will provide notice to you if these changes are material, and, where required by applicable law, we will obtain your consent. Any amendments to the Privacy Policy will become effective immediately, unless we notify otherwise. We recommend you review this Privacy Policy periodically to ensure that you understand our most updated privacy practices.

 

  • CONTACT INFORMATION AND DATA CONTROLLER INFORMATION

Howazit, a company incorporated under the laws of the state of Israel, is the “Data Controller (as such term is defined under applicable privacy and data protection legislation, which refers to the organization that determines the means and the processing of the personal data) of the Personal Data collected as described under this Privacy Policy.

For any question, inquiry or concern related to this Privacy Policy or the processing of your Personal Data, you may contact as follows:

By Mail: 42 Ben Yehuda St., Herzliya, 4680444  Israel

By Email: privacy@howazit.com

Representative for Data Subjects in the EU and UK Contact Information:

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the European Union and United Kingdom.

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following websitehttps://app.prighter.com/portal/11447821152

 

  • DATA PROCESSING, PURPOSES OF USE AND LAWFUL BASIS

You will find below information regarding the types of data we collect, the purposes for which we process Personal Data as well as our lawful basis for processing (where the GDPR applies to your Personal Data).

We may collect aggregated, non-personal, and non-identifiable information which may be made available or gathered via your use of the website or Services (“Non-Personal Data”). We are not aware of the identity of the individual from who we have collected the Non-Personal Data and cannot link between the data and the individual with reasonable means. This refers mainly to technical information, or aggregated data.

We further collect individually identifiable information, namely information that identifies an individual or may with reasonable effort be used to identify an individual (“Personal Data”). This may include online identifiers, names, emails, etc., subject to applicable law. 

For the avoidance of doubt, any Non-Personal Data connected or linked to Personal Data shall be deemed as Personal Data as long as such connection or linkage exists.

Below we detail the Personal Data we collect and how and for which purposes we process and use your Personal Data, as well as our lawful basis for processing (subject to the GDPR, if applicable). 

Personal Data Sets

Purposes of Processing

Legal Basis under the GDPR

Prospects Data

Usage Data:

When you access our website, and interact with it, we may collect certain online identifiers, such as your Internet Protocol (IP) address, Cookie ID, user agent, and other unique identifiers, tags, etc. as well as information related to your usage, such as actions made on the website, pages viewed, access time and date, session durations, language preferences, etc.

(“Usage Data”).

We process the Usage Data for the following purposes:

·  To operate and secure the website.

·  For analytic purposes and to enhance and improve our website, etc. For example, we process this data to understand how Prospects use our website or the most viewed content, to improve the way we present such content.

·  To promote, advertise and market our website and Services. This includes targeted advertisements (which further depends on your cookies’ settings and preferences) on our website or third party’s platforms across the website.

Except when we use cookies for essential features of the website, all other Usage Data processing conducted through third-party tools, APIs, cookies, agents or other tracking and monitoring technologies, is subject to your explicit consent. The consent is obtained through the cookie notice presented when you first access the website.

You may withdraw consent or change your preference at any time by using the cookie preference settings tool available on our website.

Contact Information and Communications:

If you voluntarily contact us in any manner, whether for support, to submit a request, to book a demo, register to our newsletter or for other inquiries, whether  by sending us an email or through other means of communications, you will be requested to provide us with your contact information, which depending on the interaction with us may include your name, email address or business email address, your organization and position (“Contact Details”).

When we communicate with you, we will further process and store our communications with you, including email correspondence and, where applicable call and meeting recording, and may also receive insights related to such communications such as, interactions with email communications (access time and date, whether opened or not) (all collectively shall be referred as “Communications”).

We process Contact Details and Communications for the following purposes:

·  To respond to your inquiries or request, establish a potential business relationship, to provide you with the information you have requested or the materials you have signed up to receive.

·  To improve and optimize our sales activity.

·  To send additional information and marketing materials directly related to your interest and engagement with us (“Direct Marketing”).

·  We may keep records of our Communications in the event we determine it is needed for legal requirements.

Processing Contact Details and Communications to respond to your inquiry or request or send information you have signed up to receive, is based on your consent.

Processing Contact Details and Communications for our unsolicited marketing campaigns, including Direct Marketing, is based on our legitimate interests.

Processing Contact Details and Communications to improve our marketing efforts and for internal records keeping, is based on our legitimate interests.

You have the right to withdraw your consent at any time. You may further opt-out from our newsletter and marketing communications by using the “unsubscribe” or other option we provide within the body of the message.

 

Customers Data

Account Data:

To use our Services, our Customers, as applicable, will need to initially create an account or will be designated with an account, which will include basic Contact Details (of the Customer and Authorized Users) and other business information (address, billing information, etc.).

 

We process Account Data for the following purposes:

·  To create and designate the account, authentication and validate access, enable log-in, access and use of the Services.

·  To send Customers with needed service, operation or transaction information related to our engagement (e.g., billing and invoicing, technical updates, etc.).

·  For Direct marketing purposes (as defined above), meaning, as our Customer or its representative, we may send you marketing related communications (by email or other contact details you have provided), materials and content regarding the Services you are currently using or any services we may offer in the future to keep you up to date and promote or Services.

·  Customer support. In this case we might also process the communication information related to such support request.

Account Data for the purpose of account creation and validation, enable log-in and for transactional or operational messages, including customer support and management matters, are all based on contract necessity.

Processing Account Data for Direct Marketing purposes is based on our legitimate interest. You can opt-out at any time using the “unsubscribe” option within the body of the message.

Please note that if you choose to unsubscribe from our Direct Marketing, we will still retain your contact details and send you service-related emails, such as invoices.

Platform and Service Usage Data:

When you use our Services we will collect telemetry data and information regarding your use of the Service, including access logs, activity logs, crash data, session recordings  and analytics (“Service Usage Data”).

We process Service Usage Data for the following purposes:

·   To secure our Services, and detect any potential threats or fraudulent activities, and for example, to resolve technical errors. 

·  To gain a better understanding on how Customers use the Services, account, dashboard, and other features.

·  To improve our Services, the overall performance, user-experience, and value generated therefrom.

·  To enforce our policies and agreements regarding the use of our Services and to have internal records to evidence the Services provided or used, in the event we find needed subject to any potential, actual or threatened claim or dispute with us, and to comply with applicable laws or security standards.

·  To comply with legal obligations and requirements, and maintain our compliance with applicable laws, regulations, and standards.

Processing of Service Usage Data is based on our legitimate interest.

 

Reviews and Feedback:

If you voluntarily provide your feedback on our Services and agree we publish it on the website, we may process and publish your name, title, the content of your feedback and your picture.

We will process and use this information for publication on our website.

We process this information solely subject to your consent which you may withdraw at any time.

 

Please note that the actual processing operation per each purpose of use and lawful basis detailed in the table above may differ, and we are only responsible for the Personal Data we collect and process as the controller of the Personal Data. Such processing operation usually includes a set of operations made by automated means, such as collection, storage, use, disclosure by transmission, erasure, or destruction.

In addition, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of our Services, and to enforce our terms of use and other policies, as well as to protect the security or integrity of our databases and Services, and to take precautions or defend against legal liability and claims. Such processing is based on our legitimate interests.

 

  • HOW WE COLLECT PERSONAL DATA

Depending on the nature of your interaction with us, we may collect Personal Data as follows:

  • Automatically– we may use cookies (as elaborated below) or similar tracking technologies to gather some information automatically when you interact with our website or Services.
  • Provided by you voluntarily– we will collect Personal Data you provide us with, such as when you contact us, etc.

 

  • COOKIES AND TRACKING TECHNOLOGIES

We use “cookies” (or similar tracking technologies such as tags and pixels) when you interact with our website. The use of cookies is a standard industry-wide practice. Cookies and similar technologies are a small piece of information, text, or code that a website assigns and stores on your computer or browser while you access a website.

Cookies can be used for various purposes, including allowing you to navigate between pages efficiently, for statistical purposes, for operation and security purposes, as well as for advertising purposes.

The information generally collected and stored by cookies includes Online Identifiers, Usage Data, and Service Usage Data (as defined under Section 3 of this Privacy Policy “Data Processing, Purposes of Use and Lawful Basis”). 

You can find more information about cookies here: www.allaboutcookies.org

Please see our cookie list available through the Cookie Manager accessed through the icon (in the website footer), which details the cookies we use on our website. You may change your cookies preference at any time.  Note that, certain cookies used for strict operation and security purposes are considered as “strictly necessary” and cannot be disabled.

Please note that once you choose to opt out or disable cookies, some features of our website may not operate properly, and your online experience may be limited.

 

  • DISCLOSURE OF PERSONAL DATA

We may disclose your Personal Data to third parties, including our affiliated companies, partners or service providers that help us manage our business operations or provide our Services. You can find in the table below information about the categories of such third-party recipients.

Category of Recipient

Data That Will Be Shared

Purpose of Sharing

Service Providers

 

All types of Personal Data as needed for the service provided, on a case-by-case basis

We employ other companies and individuals to perform functions and services on our behalf. Such third parties may include hosting service providers, data security services, billing and payment processing services, fraud detection and prevention services, performance measurement, data optimization and marketing services, social and advertising networks, customer relation management systems, and our legal, financial and compliance advisors, etc. These third-party service providers have access to Personal Data needed to perform their functions, but they are prohibited, through contractual obligations, from using your Personal Data for any purposes other than providing us with requested services.

Partners, Affiliated Companies and Corporate Transactions

All types of Personal Data as needed, on a case-by-case basis.

We may share in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation, or asset sale) or in the event of a corporate reorganization.  

Law enforcement, governmental agencies or authorized third parties  

All types of Personal Data as needed, on a case-by-case basis

We may disclose certain Personal Data to law enforcement, governmental agencies, or authorized third parties, in order to comply with applicable laws or in response to a verified request or order. We may further disclose Personal Data to enforce our policies and agreements, as well as defend our rights, including the investigation of potential violations thereof, alleged illegal activity or any other activity that may expose us to legal liability, and solely to the extent required. In addition, we may disclose Personal Data to detect, prevent, or otherwise address fraud, security, or technical issues, solely to the extent required.

 

For the avoidance of doubt, we may share Personal Data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share, or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.

 

  • USERS RIGHTS

We acknowledge that different people have different privacy concerns and preferences. Our goal is ‎to be clear about what Personal Data we collect so that you can make meaningful choices about ‎how it is used. We allow you to exercise certain choices, rights, and controls in connection with ‎your Personal Data. Depending on your relationship with us, your jurisdiction and the applicable ‎data protection laws that apply to you, you have the right to control and request certain limitations ‎or rights to be executed. ‎

Note that, as further explained below, some of your rights can be exercised independently through ‎your browser settings, and to exercise certain rights – you will be requested to submit a request by ‎filling out the Data Subject Request (“DSR”) form available https://www.howazit.com/privacy-policy/DSR and send it to our team at: privacy@howazit.com

In the table below you can review your choices depending on your interaction with us, how you can ‎exercise them, and appeal a decision we take in this regard. Any specification per geo-location or ‎territory are available below the table:‎

RIGHT TO BE INFORMED, RIGHT TO KNOW

You have the right to confirm whether we collect Personal Data about you. You may also have the right, at our option, to receive a list of the specific third parties to which we have disclosed either your Personal Data or any Personal Data. If you wish to know if we collect Personal Data about you, please review this Privacy Policy. If you have additional questions, please feel free to reach out at: privacy@howazit.com

ACCESS RIGHTS

(or under different regulations may be referred to as the right to inspect or review the personal data processed)

You further have the right to know which Personal Data we specifically hold about you, and receive a copy of such or access it, if you wish to receive a copy of the Personal Data or Personal Information, please send us an e-mail to: privacy@howazit.com

 

RIGHT TO CORRECTION AND RECTIFICATION OF THE PERSONAL DATA 

You have the right to correct inaccuracies in your Personal Data, taking into account the nature and purposes of each processing activity.

If you wish to exercise this right, please contact us at: privacy@howazit.com

RIGHT TO BE FORGOTTEN, RIGHT TO DELETION

In certain circumstances, you have the right to request deletion of your Personal Data that we hold about you. Unfortunately this right is not absolute and if we are not able to delete all or part of your Personal Data we will inform you.

If you wish to exercise this right, please contact us at: privacy@howazit.com

You are not required to create an account with us to submit a deletion request.

In the event you are a Customer – note that termination of the engagement or closing your account does not automatically resolve in deletion of Customer Data or the Personal Data processed on you or the Authorized Users. If you wish to delete the data, please ensure to contact us with such request.

 

RIGHT TO PORTABILITY

You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. We will select the format in which we provide your copy.

If you wish to exercise this right, please contact us at: privacy@howazit.com

RIGHT TO OPT OUT OR WITHDRAW CONSENT (AS APPLICABLE) AND EXERCISING THE RIGHT TO NOT SHARE OR SELL PERSONAL INFORMATION, OPT OUT FROM TARGETED ADVERTISING AND, OPT OUT FROM PROFILING AND AUTOMATED DECISION MAKING

Marketing Communications: You have the right to opt-out from Directing Marketing, or otherwise withdraw consent, by unsubscribing through the message received.

Cookies: You have the right to opt-out or otherwise withdraw consent from processing of Personal Data through our use of cookies, by changing your preferences through the Cookie Setting tool available on our website and click the “withdraw your consent” button. 

Sale of Personal Data for targeted advertising, monetary gain or profiling, or Share or Sale of Personal Information for analytic or marketing: If and to the extent applicable, you have the right to opt out of the “sale” or “share” of your Personal Data – meaning to opt-out of our practice of using cookies for the purposes of targeted advertising, analytic, etc. through the cookie settings tool available on our website. 

You are further able to install privacy-controls in the browser’s settings to automatically signal the opt-out preference to all websites you visit (like the “Global Privacy Control”).

RIGHT TO OBJECT

You have the right to object to processing of your Personal Data (subject to certain conditions under data protection laws).

If you wish to exercise this right, please contact us at: privacy@howazit.com

RIGHT TO RESTRICT PROCESSING

You have the right to ask us to restrict or limit the purpose for which we process your Personal Data (subject to certain conditions under data protection laws).

If you wish to exercise this right, please send us an e-mail to: privacy@howazit.com

RIGHT TO APPEAL OR COMPLAINT

If we decline to take action on your request, we will inform you without undue delay as required under applicable laws. The notification will include a justification for declining to take action and instructions on how you may appeal, if applicable. Under the EU you have the right to lodge a complaint with the supervisor authority or the Information Commissioner in the UK. 

NON-DISCRIMINATION

Such discrimination may include denying a good or service, providing a different level or quality of service, or charging different prices. We do not discriminate our users.

 

  • CROSS-BORDER DATA TRANSFER:

Transfers of your Personal Data will be made in accordance with applicable laws. When Personal Data is transferred outside the country where it was originally collected, we will take the steps necessary (and to the extent required by applicable laws) to ensure that sufficient safeguards are provided to such data during its transfer and processing. Some of the measures implemented to safeguard your Personal Data include ensuring that the recipient is bound by specific contractual clauses approved by relevant data protection authorities to provide adequate protection for Personal Data. Where applicable, you can request a copy of the relevant contractual safeguards that we have put in place. 

 

  • DATA RETENTION

We retain Personal Data we collect as long as it remains necessary for the purposes set forth above, all in accordance with applicable laws, or until an individual expresses a preference to opt-out.

Other circumstances in which we will retain your Personal Data for longer periods of time include:

  • Where we are required to do so in accordance with legal, regulatory, tax, or accounting requirements;
  • For us to have an accurate record of your dealings with us in the event of any complaints or challenges; or
  • If we reasonably believe there is a prospect of litigation relating to your Personal Data.

Please note that except as required by applicable law, we may at our sole discretion, delete or amend information from our systems, without notice to you, once we deem it is no longer necessary for such purposes.

 

  • SECURITY

We take great care in implementing and maintaining the security of your Personal Data. We employ ‎industry standard procedures and policies to ensure the safety of individuals’ information and ‎prevent unauthorized use of any such.‎

We have implemented technical, physical and administrative security measures to protect the ‎Personal Data we process. Although we take reasonable steps to safeguard information, we cannot ‎be responsible for the acts of those who gain unauthorized access or abuse our website, and we ‎make no warranty, express, implied or otherwise, that we will always be able to prevent such ‎access.‎

Please contact us at: privacy@howazit.com if you feel that your privacy was not dealt with properly, in a way that was ‎in breach of our Privacy Policy, or if you become aware of a third party’s attempt to gain ‎unauthorized access to any of your Personal Data. We will make a reasonable effort to notify you ‎and the appropriate authorities (if required by applicable law) in the event that we discover a ‎security incident related to your Personal Data.‎

  • CHILDREN

Our Services are not intended for use by children, and we do not knowingly collect or maintain information about anyone under the age of 16. Please contact us at:  privacy@howazit.com if you have reason to believe that a child has shared any information with us. 

 

  • ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

This section applies only to California residents. Pursuant to the California Consumer Privacy Act of 2018 effective November 2020, and as amended by the CPRA, effective January 1, 2023 (collectively “CCPA”). 

Please see our CCPA Privacy Notice, which discloses the categories of personal information collected, purpose of processing, source, categories of recipients with whom we share the personal information for a business purpose, whether the personal information is sole or shared, the retention period, and how to exercise your rights as a California resident.

 

  • ADDITIONAL NOTICE TO US RESIDENTS

The section is applicable to residents of certain U.S. states (depending on the applicable state law, acting in an individual or household context and not in a commercial or employment context or as a representative of business), including the following state laws:  Colorado Privacy Act; Connecticut Data Privacy Act; Delaware Personal Data Privacy Act; Florida Digital Bill of Rights; Indiana Consumer Data Protection Act; Iowa Consumer Data Protection Act; Kentucky Consumer Data Protection Act; Maryland Online Data Privacy Act; Minnesota Consumer Data Privacy Act; Montana Consumer Data Privacy Act; Nebraska Data Privacy Act; Nevada S.B. 370; New Hampshire Data Privacy Act; New Jersey Data Protection Act; Oregon Consumer Privacy Act; Rhode Island Data Transparency and Privacy Protection Act; Texas Data Privacy and Security Act; Tennessee Information Protection Act; Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act.

We are required to provide you with a clear and accessible privacy notice that includes the categories of Personal Data processed, purpose of processing, instructions for exercising consumer rights and appealing decisions, categories of Personal Data shared with third parties, categories of third parties with whom data is shared, and any sale of data or targeted advertising.

Under Section 3 – “Data Processing, Purposes of Use and Lawful Basis” of this Privacy Policy, we describe our collection and processing of Personal Data, the categories of Personal Data that are collecting and processing, and the purposes for which Personal Data is processed, stored or used.

Under Section 6 – “Disclosure of Personal Data” of this Privacy Policy, we detail and disclose the categories of third parties we share Personal Data with for business purposes. We will not collect additional categories of Personal Data or use the Personal Data we collected for a materially different, unrelated, or incompatible purpose without obtaining your consent.

Additionally, under Section 7 – “Users Rightsof this Privacy Policy, we detail and disclose your rights and how to exercise such requests.

 

“Sale” of Personal Data:

Under US privacy laws, in principle, the term “sale” is referring to disclosing or making available Personal Data to a third-party in exchange for monetary or other valuable consideration, including for targeted advertising purposes. We do not “sell” information as this term is commonly understood, meaning – we do not, and will not, disclose your Personal Data in direct exchange for money or some other form of payment. However, subject to the definition of the term “sale” under applicable US privacy laws, our practice of using “cookies or other third-party advertising services and sharing Personal Data for such purpose is considered as a “sale”.

 

Appeal Rights:

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request, by contacting us as instructed in our response. Please send your appeal request with a summary of the request and decision you want to appeal to: privacy@howazit.com

Not more than 60 days after receipt of an appeal, and always in accordance with the timelines set by the applicable US Privacy Laws, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reason for the decision.

If you are not happy with our response, depending on your jurisdiction, you may have the right to lodge a complaint against us with the relevant State’s Attorney General:

 

Contact us

If you have any questions regarding this Privacy Policy or the practices described above, you are always welcome to contact us at info@howazit.com.