המעבדה — Privacy Policy

Terms of Use Integration

This Privacy Policy (the "Policy") constitutes an integral part of the המעבדה Terms of Use (the "Terms"). Any term not explicitly defined herein shall be interpreted according to the definitions set forth in the Terms.

Scope of Application

This Policy applies to the Platform, domains, website, and services managed by the Operator. This Policy does not apply to applications, websites, products, or platforms of any third party accessible via links provided through our Services. Such third parties operate independently, and any personal data provided to them is subject to their own respective privacy policies. The Operator assumes no responsibility or liability for the privacy practices or content of such independent third-party sites.

Consent and Policy Updates

You are under no legal obligation to provide the Operator with Personal Information. You hereby acknowledge and agree that the provision of such information is done of your own free will and for the purpose of utilizing the Platform's Services. Without providing the required information, you will be unable to book a call or join the Lab. By using the Platform, you expressly consent to this Policy and the collection, processing, and sharing of your information as detailed herein. The Operator may modify this Policy at its sole discretion at any time. Continued use of the Service following such changes constitutes acceptance of the updated terms.

Processing Activities

This Policy applies when you interact with us by: (i) visiting our website, including the paid landing pages; (ii) booking a call through the scheduling tool embedded in the site; (iii) holding a membership in the Lab; or (iv) receiving communications from us.

Information Collected and Methods of Collection

The Operator collects information in the following ways:

Direct Contact: When you contact us by email, you may provide your name, email address, and the content of your inquiry.

Booking a Call: The website embeds a third-party scheduling tool. When you book a call you provide your name, email address, time zone, and any answers you give to the questions on the booking form. That information is collected and stored by the scheduling provider, and is visible to the Operator. Where you arrive from an advertisement, the campaign parameters in the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term) are passed to the booking so the Operator can attribute the booking to the campaign that produced it.

Membership Registration: Joining the Lab is handled by a third-party checkout provider, which collects the details required to register you and to process payment. Payment card details are handled entirely by that provider and are never collected or stored by the Operator.

Research Submissions: Members may submit research for review. Such a submission may include a research summary, hypotheses, data descriptions, code, results, and any notes the member chooses to include.

Automated Collection: While you browse the website, technical information is collected automatically, including device type, page views, referring pages, and session metadata, through server logs and the analytics and advertising technologies described below.

Log Files and System Monitoring

When you interact with the Platform, the hosting provider's servers automatically record essential technical metadata in log files, including IP addresses, browser types, language settings, and date/time stamps. This information is processed exclusively for server administration, system security, diagnostic troubleshooting, and monitoring the technical integrity of the Platform.

Cookies, Analytics and Advertising Technologies

The Main Site. The main marketing site does not set cookies of its own. Where web analytics is enabled, the Operator uses Plausible Analytics, a privacy-focused, cookieless service that collects aggregated information about page visits — page URLs, referring pages, country-level location and device type — and does not use cookies, does not collect personal identifiers, and does not perform cross-site tracking. Embedded video is served through youtube-nocookie.com, which does not set tracking cookies unless the video is played.

The Paid Landing Pages. The paid landing pages, reachable at /lp/, additionally load advertising measurement technologies: a Meta (Facebook) Pixel and a Google Ads tag. These technologies do set cookies and identifiers, do report your interactions with those pages back to Meta and to Google, and are used to measure the performance of advertising campaigns and to build advertising audiences. They are loaded only on those pages and only when the Operator has configured them. The main marketing site does not load them.

The Scheduling Embed. The booking calendar is embedded from a third-party scheduling provider and may set its own cookies when it loads. Its use of that data is governed by its own privacy policy.

Browser Controls. The User may configure his web browser to block or delete cookies, and may use the advertising controls offered by Meta and by Google to limit the use of this data for advertising. Blocking cookies does not prevent access to the website, which does not require a logged-in session.

Purposes of Processing Personal Information

In accordance with the Israeli Privacy Protection Law, 5741-1981, and the principle of purpose limitation, the Operator shall process, store, and utilize Personal Information strictly for the following legally defined and designated purposes, and for no other incompatible purposes:

• •To operate the Platform, schedule and conduct calls, deliver the membership and its components, provide technical support, manage our contractual relationship with the User, and administer billing.
• •To conduct internal, aggregated statistical analysis, measure site performance, and monitor usage trends. Any data utilized for these internal improvements shall be processed in a manner that does not compromise individual User privacy.
• •To measure the performance of advertising campaigns, attribute bookings and registrations to the campaign that produced them, and build advertising audiences, by means of the technologies described above and limited to the paid landing pages.
• •To enforce the Terms of Use, protect the Operator's legal rights, prevent system abuse, detect fraud, and mitigate risks or potentially unlawful activities that threaten the integrity of the Platform or third parties.

The Operator may utilize your contact details (such as your email address) to transmit technical updates, administrative announcements, and operational notices relating to your membership.

The Operator expressly warrants that it does not sell, lease, or commercially license your Personal Information to any third-party entities, nor does it make your information available to third parties for independent marketing purposes without your explicit, informed prior consent.

The Operator does not currently transmit commercial marketing materials, advertisements, or newsletters to its Users. However, in the event that the Operator elects to introduce commercial marketing communications in the future, such activities shall be conducted strictly in accordance with the provisions of Section 30A of the Israeli Communications Law (Telecommunications and Broadcasting), 5742-1982 (the "Spam Law"). Under such circumstances, any commercial communications will be subject to the User's prior explicit consent (Opt-In), and the User shall retain the absolute right to opt out and remove himself from the distribution list at any time via a clear and accessible mechanism.

Data Sharing and Transfer to Third Parties

In strict compliance with the Israeli Privacy Protection Law, 5741-1981, and its ancillary regulations, the Operator will not disclose, share, or transfer your Personal Information or data to third parties, except under the following legally defined circumstances:

Authorized Third-Party Service Providers (Processors): For the performance, maintenance, and delivery of the Services, the Operator utilizes specialized third-party vendors. These vendors are permitted to process the data solely for their designated functions. Where a vendor is identified below by its function rather than by name, its identity will be stated here once it is in service, and your use of it will additionally be governed by its own privacy policy:

• •Vercel: web application hosting, content delivery and server logs.
• •Calendly: scheduling and management of the fit call, including the details you enter on the booking form.
• •Plausible Analytics: aggregated, cookieless website analytics, where enabled.
• •Meta Platforms and Google: advertising measurement and audience building, limited to the paid landing pages.
• •YouTube (Google): delivery of embedded video, served in its no-cookie mode.
• •A third-party checkout provider: registration and secure billing of membership fees. The Operator does not collect, process, or store credit card numbers or raw financial authentication details on its own infrastructure.
• •A third-party community platform: hosting of the closed member community and the access granted to it.

Cross-Border Data Transfers: To the extent that any of the aforementioned service providers process or store data outside the borders of the State of Israel (including, but not limited to, the United States), the Operator shall employ commercial best efforts to verify and ensure that such extraterritorial transfers strictly comply with the Privacy Protection Regulations (Transfer of Data to Databases Outside the State Borders), 5761-2001. The Operator shall employ commercial best efforts to verify and ensure that the recipient jurisdiction provides a level of data protection no less than that mandated under applicable Israeli law, or alternatively, that such provider is bound by strict Data Processing Agreements (DPAs) ensuring contractually equivalent safeguards.

Judicial Orders and Legal Obligations: The Operator may disclose data if explicitly required to do so by a valid judicial decree, court order, search warrant, or statutory requirement issued by an authorized Israeli judicial body, law enforcement agency, or government authority.

Protection of Rights and Litigation: In the event of a legal dispute, claim, litigation, or administrative proceeding between the User and the Operator, or if the User breaches the Terms of Use or Privacy Policy, the Operator may disclose relevant data to its legal advisors, insurers, or competent courts to protect its legitimate rights and interests.

Prevention of Immediate Harm: The Operator may disclose information if it holds a good-faith belief that such action is immediately necessary to prevent severe physical injury, loss of life, or substantial property damage to the User or any third party.

Corporate Restructuring: In the event of a material corporate transition, including but not limited to a merger, acquisition, structural reorganization, or sale of substantially all assets, the Operator is authorized to transfer its databases to the acquiring entity, provided that the acquiring entity undertakes to be bound by provisions no less restrictive than those set forth in this Privacy Policy.

Data Storage and Security

In accordance with the Israeli Privacy Protection Regulations (Data Security), 5777-2017, the Operator implements and maintains industry-standard technological and organizational security measures to protect Personal Information and User-submitted research against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure.

All data transmitted between the User's end-user device and the Platform is encrypted in transit utilizing the secure Hypertext Transfer Protocol Secure (HTTPS) and industry-standard transport layer encryption protocols, preventing interception or tampering during network transit.

While the Operator employs advanced security measures, the User acknowledges that no technical environment is completely immune to cyber threats. In the event of a severe data security breach affecting personal data, the Operator shall act immediately to mitigate the incident and will provide notice to the impacted Users and the Israeli Privacy Protection Authority (PPA) in strict compliance with the statutory timelines mandated under Israeli law.

Data Retention and Deletion

Personal Information and submitted research are retained only as long as your membership is active and necessary to provide the Services, or as required by applicable statutory record-keeping laws.

Upon termination of membership and a request for deletion, the Operator shall permanently and irreversibly erase the associated data from its production systems within thirty (30) days. Residual data in isolated backup archives will persist only until naturally overwritten in accordance with standard disaster-recovery cycles. Data held by third-party providers — the scheduling provider, the checkout provider and the community platform — is additionally subject to their own retention practices.

Your Rights and Privacy Protection

Under the Privacy Protection Law, 5741-1981, you are entitled to review the information held about you. If you find such information to be incorrect, incomplete, or outdated, you may submit a detailed request to correct or delete it. The Operator will respond to such requests within 30 days. If a request is denied, you have the right to appeal to the court as per the regulations.

Governing Law and Jurisdiction

This Policy is governed exclusively by the Laws of the State of Israel. Exclusive jurisdiction is granted to the competent courts in Tel Aviv-Jaffa.

Contact Us

If you have any questions, requests, clarifications, or inquiries regarding this Privacy Policy, or any other matter relating to it, you may contact the operator directly via email: aviroshkovan4@gmail.com.