Privacy Policy
Last updated: April 2026
1. Introduction
This Privacy Policy describes how TO BE RACING LTD (Midaro) ("we") collects, uses, stores and protects personal information of users of the Midaro website. This policy complies with Israel's Protection of Privacy Law (5741-1981), Privacy Protection Regulations (Data Security) 2017, Amendment 13 (2024), and considers GDPR principles.
2. Information We Collect
Directly provided: name, email, phone, shipping address, communication content, language preferences.
Automatically collected: IP address, browser type, pages viewed, device identifiers, cookies, approximate location.
Third-party sources: data from login providers (Google, Apple) and payment processors.
3. How We Use Information
Order fulfillment, account management, customer service, site improvement, order notifications, marketing (with consent), legal compliance, fraud prevention, and AI-powered search optimization.
4. Information Sharing
We do not sell personal data. We share with: service providers (shipping, payment, hosting) under data processing agreements; authorities upon legal requirement; in business transfers; for rights protection.
5. Marketing Communications
Per Israel's Communications Law (Section 30A): marketing only with explicit consent, easy unsubscribe in every message, removal within 3 business days, service communications unaffected.
6. Cookies
Essential (required), functional (preferences), analytical (performance), marketing (with consent). Manage via browser settings. Non-essential cookies require user consent per Amendment 13.
7. Data Security
SSL/TLS encryption, encrypted storage, role-based access control, monitoring, regular backups, disaster recovery. In case of a data breach, we will notify affected users and the Privacy Protection Authority as required by law.
8. Data Retention
Transaction data: 7 years (tax law). Account data: active period + 3 years. Marketing: until unsubscribe. Browsing/cookies: 13 months.
9. Your Rights
Access, rectification, erasure, objection to direct marketing, data portability. Contact: [email protected]. Response within 30 days.
10. International Transfers
Data may be transferred abroad per Amendment 13 Section 36(b), only to countries with adequate protection or with contractual safeguards.
11. Children's Privacy
The Site is not intended for users under 18. We do not knowingly collect data from minors.
12. Contact — Privacy Officer
Email: [email protected]
Phone: +972-53-551-9969
Complaints: Israel Privacy Protection Authority — https://www.gov.il/he/departments/the_privacy_protection_authority
