Skip to content

Privacy Policy

Last updated: April 2026

1. Introduction

This Privacy Policy describes how TO BE RACING LTD (Midaro) ("we") collects, uses, stores and protects personal information of users of the Midaro website. This policy complies with Israel's Protection of Privacy Law (5741-1981), Privacy Protection Regulations (Data Security) 2017, Amendment 13 (2024), and considers GDPR principles.

2. Information We Collect

Directly provided: name, email, phone, shipping address, communication content, language preferences. Automatically collected: IP address, browser type, pages viewed, device identifiers, cookies, approximate location. Third-party sources: data from login providers (Google, Apple) and payment processors.

3. How We Use Information

Order fulfillment, account management, customer service, site improvement, order notifications, marketing (with consent), legal compliance, fraud prevention, and AI-powered search optimization.

4. Information Sharing

We do not sell personal data. We share with: service providers (shipping, payment, hosting) under data processing agreements; authorities upon legal requirement; in business transfers; for rights protection.

5. Marketing Communications

Per Israel's Communications Law (Section 30A): marketing only with explicit consent, easy unsubscribe in every message, removal within 3 business days, service communications unaffected.

6. Cookies

Essential (required), functional (preferences), analytical (performance), marketing (with consent). Manage via browser settings. Non-essential cookies require user consent per Amendment 13.

7. Data Security

SSL/TLS encryption, encrypted storage, role-based access control, monitoring, regular backups, disaster recovery. In case of a data breach, we will notify affected users and the Privacy Protection Authority as required by law.

8. Data Retention

Transaction data: 7 years (tax law). Account data: active period + 3 years. Marketing: until unsubscribe. Browsing/cookies: 13 months.

9. Your Rights

Access, rectification, erasure, objection to direct marketing, data portability. Contact: [email protected]. Response within 30 days.

10. International Transfers

Data may be transferred abroad per Amendment 13 Section 36(b), only to countries with adequate protection or with contractual safeguards.

11. Children's Privacy

The Site is not intended for users under 18. We do not knowingly collect data from minors.

12. Contact — Privacy Officer

Email: [email protected] Phone: +972-53-551-9969 Complaints: Israel Privacy Protection Authority — https://www.gov.il/he/departments/the_privacy_protection_authority