Privacy Policy

MORETO, operating from Israel, is the controller of the personal data processed through the Site. You can contact us about any privacy matter at info@moretohair.co.il.

Information you give us: name, email address, phone number, shipping and billing address, country, order details, messages and photos you send us (for example, for shade matching), reviews, and your marketing preferences.

Payment information: card payments are processed directly by our payment provider, PayPlus. We do not receive or store your full card number or CVV. We receive only limited transaction details (such as approval status, amount, and the last digits of the card) needed for accounting, fraud prevention and customer service.

Information collected automatically: IP address, approximate location derived from IP, device and browser type, operating system, language, referring website, pages viewed, time spent, clicks, and shopping-bag activity, collected through cookies, local storage and similar technologies.

Information from third parties: delivery status from carriers, fraud-screening results from our payment provider, and aggregated statistics from analytics and advertising partners.

We use personal information to:

• process, confirm, ship and track your order, and issue invoices and receipts;
• provide customer service, shade-matching advice and handle exchanges and returns;
• detect, investigate and prevent fraud, chargeback abuse, unauthorised transactions and other illegal activity, and to defend our legal rights;
• comply with legal, tax, accounting, customs and regulatory obligations;
• operate, secure, analyse and improve the Site and our products;
• send you marketing communications, only where you have agreed or where permitted by law – you can opt out at any time.

Where the GDPR, UK GDPR or similar laws apply, we process your data on the basis of: performance of a contract (processing your order); compliance with legal obligations (tax, accounting, customs); our legitimate interests (fraud prevention, security, improving the Site, defending legal claims), balanced against your rights; and your consent (marketing emails and non-essential cookies), which you may withdraw at any time.

We do not sell your personal information. We share it only as necessary with:

• our payment provider (PayPlus) and banks, to process payments and prevent fraud;
• shipping carriers, couriers and customs brokers, to deliver your order and clear customs;
• hosting, database, email and technology providers that operate the Site on our behalf;
• analytics and advertising providers, in aggregated or pseudonymised form where possible;
• professional advisers (accountants, lawyers) and authorities, where required by law, court order, or to protect our rights, property or safety, including in chargeback and fraud disputes;
• a successor entity in the event of a merger, acquisition or sale of all or part of our business.

All service providers are bound to use your data only for the services they provide to us and to protect it appropriately.

We operate from Israel, which the European Commission recognises as providing an adequate level of data protection. Some of our service providers may store or process data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses. By using the Site you understand that your data may be transferred to and processed in countries other than your own.

We use essential cookies and local storage to keep your shopping bag, remember your language and consent choices, and secure the Site. With your consent, we also use analytics and marketing cookies to understand how the Site is used and to measure advertising. You can accept or decline non-essential cookies in our cookie banner and manage or delete cookies in your browser settings. Blocking essential cookies may prevent the Site from working properly.

We keep order and invoice records for as long as required by tax and accounting law (generally at least 7 years), and data needed for fraud prevention and legal claims for as long as such claims may be brought. Marketing data is kept until you unsubscribe. Other data is deleted or anonymised when it is no longer needed for the purposes described in this Policy.

We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) connections, access controls and reputable service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your email account and devices secure.

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; restrict or object to certain processing; data portability; withdraw consent at any time; and lodge a complaint with your local data-protection authority.

California residents (CCPA/CPRA): you have the right to know, access, correct and delete personal information, and the right not to be discriminated against for exercising these rights. We do not sell or "share" personal information for cross-context behavioural advertising in exchange for money.

To exercise any right, email info@moretohair.co.il. We may need to verify your identity before responding, and we will respond within the time required by applicable law. Some data may be retained where we are legally required or entitled to do so (for example, invoices and records needed to defend legal claims or chargebacks).

We send marketing emails only where you have opted in or where otherwise permitted by law. Every marketing email includes an unsubscribe link. Transactional messages about your order (confirmations, shipping updates) are not marketing and will be sent regardless of your marketing preferences.

The Site is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

The Site may contain links to third-party websites and services, such as social networks, WhatsApp and our payment provider's payment page. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

We may update this Policy from time to time. The updated version will be published on this page with a new "last updated" date and takes effect upon publication. In the event of any inconsistency between the Hebrew and English versions, the Hebrew version shall prevail to the extent permitted by law.

Privacy questions or requests: info@moretohair.co.il · +972-50-290-4920