Privacy Policy
This Privacy Policy explains how personal information is collected, used, and protected when you visit this website (the "Site") or contact us through it. It is written to meet the requirements of the European Union and United Kingdom General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA and CPRA) and comparable United States state privacy laws, and Israel’s Protection of Privacy Law, 5741-1981 and its regulations.
Last updated: 3 September 2026. Version 1.0.
Who we are
The Site is operated by Dr. Reut Sorek-Abramovich, trading as #WhereLifeHides, a sole proprietor based in Israel (the "Controller", "we", "us", "our"). We expect to transfer operation of the Site to an Israeli company during the first year of activity. If that happens, this policy will be updated with the company’s name and registration number, and the company will take on the role of Controller as our successor.
For any question about this policy or about your personal information, contact us at reut.sorek@gmail.com.
Information we collect
Information you provide to us
When you use the contact form, we collect the information you enter. Your name, email address, and message are required. You may also choose to provide your organization, your role or title, a phone number, your country or region, the type of engagement you are interested in, your preferred timing, and an estimated scope or budget. When you submit the form you also confirm that you have read this policy.
Information collected automatically
When you submit the contact form, our servers briefly process your Internet Protocol (IP) address to verify the submission with Cloudflare’s Turnstile anti-bot service and to apply a short-term rate limit. The IP address is used only for these security checks and is not stored with your inquiry. Standard web server logs may record technical data such as an IP address, browser type, and the pages requested, for security and to keep the Site running.
Cookies and similar technologies
The Site uses only strictly necessary cookies and local storage needed for core functionality, such as remembering your language choice. The Cloudflare Turnstile check on the contact form may store a token in your browser solely to complete that check. We do not use analytics, advertising, or cross-site tracking cookies, and we do not run third-party tracking scripts. Because only essential technologies are used, no cookie consent banner is shown. If we add non-essential cookies in the future, we will ask for consent first where the law requires it, and update this policy.
How we use your information
We use the information you provide in order to:
- respond to your inquiry and communicate with you about it;
- assess and discuss a possible engagement, expedition, collaboration, speaking booking, or media request;
- keep records of our correspondence and of any agreement that results;
- protect the Site against spam, abuse, and fraudulent submissions;
- comply with legal obligations and establish, exercise, or defend legal claims.
We do not use your information for advertising, and we do not sell or rent it. We do not send marketing or newsletter emails. We contact you only in reply to your message and about the matter you raised.
Legal bases for EEA and UK individuals
Where the GDPR applies, we rely on the following legal bases:
- taking steps at your request before entering into a contract, and performing a contract, in order to handle your inquiry and any engagement that follows (Article 6(1)(b));
- our legitimate interests in responding to business inquiries, keeping accurate records, and protecting the Site from abuse, balanced against your rights and freedoms (Article 6(1)(f));
- compliance with a legal obligation where one applies (Article 6(1)(c)).
We do not ask for special categories of personal data through the Site. Please do not include sensitive personal information in your message.
How we share information
We share personal information only as described here:
- Service providers. We use Sanity (sanity.io) as our content platform; contact form submissions are stored in a Sanity dataset that has no public read path. We use Cloudflare’s Turnstile service to screen out automated submissions. We use Vercel (vercel.com) to host and serve the Site. These providers process data on our behalf under contract and are not permitted to use it for their own purposes.
- Professional advisers. We may share information with our lawyers, accountants, or insurers where reasonably necessary.
- Legal and safety. We may disclose information where required by law, court order, or a lawful request from a public authority, to establish, exercise, or defend legal claims, or to protect the rights and safety of any person.
- Business transfer. If we reorganize, or transfer the Site to an Israeli company or another successor, personal information may be transferred as part of that change, and will remain subject to this policy or a policy at least as protective.
International data transfers
We are based in Israel. Israel has been recognized by the European Commission as providing an adequate level of data protection, so transfers of personal data from the EEA to us are covered by that adequacy decision. Some of our service providers, including Sanity, Cloudflare, and Vercel, process data on servers located in the United States and in other countries. Where personal data of EEA or UK individuals is transferred to those countries, the transfer is protected by the European Commission’s Standard Contractual Clauses together with the UK Addendum, or by another lawful transfer mechanism, alongside the data processing terms we have in place with each provider. You may contact us for more information about these safeguards.
How long we keep your information
We keep contact form submissions and related correspondence for as long as we need them to deal with your inquiry and any relationship that follows, and for up to 24 months after our last contact with you. We keep information for longer where we need it to comply with a legal obligation, to perform a contract, or to establish or defend a legal claim. When information is no longer needed, we delete it or irreversibly anonymize it. Server security logs are kept for a short period and then deleted.
How we protect your information
We use technical and organizational measures appropriate to the risk. These include encryption of data in transit using HTTPS, access controls, the anti-bot and rate-limiting measures described above, and storage of inquiries in a system with restricted access and no public read path. Access is limited to people who need it to handle your request. We follow the security principles of the Israeli Protection of Privacy (Data Security) Regulations, 5777-2017. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to create a risk to your rights, we will notify the relevant supervisory authority and affected individuals as required by applicable law.
Your privacy rights
Rights available to everyone
You can ask us to confirm what personal information we hold about you, to provide a copy of it, to correct it if it is inaccurate, and to delete it. You can also ask us to stop or limit certain uses. To make a request, email reut.sorek@gmail.com. We may need to verify your identity before we act. We aim to respond within 30 days, and we will tell you if we need more time.
EEA and UK individuals (GDPR)
If the GDPR applies to you, you have the rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on our legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting processing that already took place. You have the right to lodge a complaint with your local data protection authority, and you may also contact the Israeli Privacy Protection Authority.
California residents (CCPA and CPRA)
We likely do not meet the thresholds that make the CCPA mandatory, but we honor its core rights for California residents. You have the right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it; the right to delete personal information; the right to correct inaccurate personal information; and the right not to receive discriminatory treatment for exercising your rights. In the past 12 months we collected the identifiers and commercial information described in the "Information we collect" section, directly from you, for the business purposes described above. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not offer financial incentives in exchange for personal information. To exercise a right, use the contact address above. You may use an authorized agent.
Other United States state privacy laws
Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, and others as they take effect, have rights similar to those above. These include the rights to access, correct, delete, and obtain a copy of personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. We do not carry out any of those activities. Contact us at the address above to exercise your rights and, where the law provides for one, to appeal a decision.
Israel
Under the Protection of Privacy Law, 5741-1981, you have the right to inspect personal information held about you in a database, and to request that information which is inaccurate, incomplete, unclear, or out of date be corrected or deleted. We do not carry out direct mailing or direct marketing. Send requests to reut.sorek@gmail.com. If you are not satisfied with our response, you may contact the Israeli Privacy Protection Authority.
Children’s privacy
The Site is intended for adults and for professional contact. We do not knowingly collect personal information from children under the age of 16, or under a higher age where local law sets one. If you believe a child has provided us with personal information, contact us and we will delete it.
Links to other sites
The Site links to third-party websites and platforms, such as video, publication, and social media pages. We do not control those sites and are not responsible for their privacy practices. This policy applies only to this Site. We do not embed third-party advertising or tracking content.
Automated decision-making
We do not use your personal information for automated decision-making or profiling that produces legal effects or similarly significant effects. The anti-bot check on the contact form makes an automated assessment for the sole purpose of deciding whether a submission appears to be automated. If a genuine submission is blocked, you can reach us by email.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. If the changes are significant, we will provide a more prominent notice where practical. Your continued use of the Site after an update means that you accept the revised policy.
Contact us
Controller: Dr. Reut Sorek-Abramovich, trading as #WhereLifeHides, Israel. Email: reut.sorek@gmail.com. We will update these details if operation of the Site is transferred to a registered company.