Privacy Policy
Last updated:
This policy explains how Kopack Ltd. (קופאק בע״מ, “Kopack”, “we”) handles personal information when you visit this website, contact us or use our demonstration tools. It describes our website practices; arrangements for a separate business transaction may also be explained when that transaction takes place.
1. Who is responsible and how to contact us
Kopack determines how information submitted through this website is used to handle inquiries. Our address is Hateena St., Lev Ha'aretz Industrial Area, Rosh HaAyin, Israel. For privacy questions or requests, contact office@kopack.co.il or +972-3-6099946.
2. Information you provide and your choices
The contact form sends your email address and message, and your first name, last name and telephone number if you provide them. It also includes the page from which you contacted us and the selected language. Providing information is voluntary; there is no legal obligation to submit this form. Email and message are required to send an inquiry through it. Without an email address we cannot reply by email. Names and telephone number are optional. You can instead contact us directly by telephone or email.
Please include only information relevant to your business inquiry. Do not send identity documents, payment-card details, health information or personal details about someone else unless they are necessary and you are entitled to provide them. The website contact form does not request these details.
3. Why we use information
We use inquiry information to read and respond to your request, discuss products or technical requirements and continue the conversation you requested. Submission of the form does not subscribe you to a marketing mailing list. Technical information is used to deliver the website, diagnose failures and prevent abuse. Optional analytics helps us understand which pages and languages are useful and whether visits result in an inquiry.
4. Technical information and security
Like other websites, our hosting infrastructure receives your IP address, request URL, browser information and request time to serve the page and protect the service. The contact endpoint uses your IP address to limit repeated submissions. Its rate-limiting windows are one hour and one day. Operational logs can include error details, delivery identifiers and blocked-request information. The form sends inquiries to our email inbox through Resend; the website contact endpoint does not create a separate customer database.
The site uses HTTPS, server-side validation and controls against automated submissions. These measures reduce risk but cannot guarantee that every transmission or storage system is completely secure.
5. Optional Google Analytics
Google Tag Manager and Google Analytics 4 load only after you choose “Allow analytics”, or when you return with that saved choice. They help measure page visits, language, device/browser information, referral sources, clicks on contact links and whether a contact form succeeds or fails. The website does not send the names, email addresses, telephone numbers or message text entered in the contact form to Analytics. Google receives technical connection information when its services load. Advertising consent remains denied; this website does not enable remarketing through this consent choice.
Choosing “Essential only” keeps Google analytics tags unloaded. You can browse products and send inquiries without enabling analytics. Change or withdraw your analytics choice through “Privacy settings” in the footer. Withdrawal removes existing first-party Google Analytics cookies and stops further analytics on the site; it does not automatically erase data already received by Google. Contact us if you want us to examine a request about previously collected information.
6. Cookies and browser storage
kopack_consent — a first-party cookie that remembers “analytics” or “essential” for 180 days. It records your choice without a name or email address. NEXT_LOCALE — a functional language-preference cookie that may be set by the language switcher. kp-quote-banner-dismissed — session storage that remembers closing the contact reminder for the current browser session.
_ga and _ga_<identifier> — optional Google Analytics cookies used to distinguish browser visits and sessions. Google’s default expiry is two years and can be refreshed on subsequent visits; browser restrictions may shorten it. These cookies are permitted only with the saved analytics choice and are removed when you choose essential-only. Cookie expiry and the retention of data already sent to a service are different things.
You can also remove cookies and site storage using your browser settings. Removing the consent cookie causes the website to ask again. Browser blocking may affect language preferences or demonstration sessions.
7. Recipients and service providers
Inquiry messages are received by Kopack personnel handling the request and processed by Resend and the email provider delivering and storing the correspondence. Vercel hosts the website and processes requests and operational logs. Google processes optional analytics and provides the automatically embedded contact-page map. Sanity supplies our published website content; contact-form messages are not sent to Sanity. Supabase stores demonstration data and activity described below. These providers process the data needed to perform their respective functions. Information may also need to be disclosed where required by law or to establish, exercise or defend legal claims.
Our website does not sell inquiry information or provide it to advertising audiences. When you follow a supplier, social-network or other external link, that site applies its own privacy practices.
8. Google Maps and external services
Google Maps loads automatically on the contact page. This connects your browser to Google and sends connection and browser information, including your IP address; Google may use its own cookies under its policies. The map is separate from optional Google Analytics: choosing “Essential only” disables analytics, not this map connection. The embedded map is configured not to send the referring page URL. Our street address, telephone number and email are also displayed as text, and the directions link opens Google Maps when you select it.
9. Technology demonstrations
Our airport-operations demonstration uses simulated passenger and flight scenarios. It stores a random practice-session identifier for seven days (kopack_airport_session) so that your practice actions and notes can be associated with that session. An invitation link can set an invitation identifier for 30 days (kopack_airport_invite). For invited visits, the demonstration records the invitation/session identifiers, first and most recent visit times, page-view count, language, browser user-agent and country supplied by the hosting service. Practice actions and notes are stored in Supabase. Do not enter real passenger records or sensitive personal information in a demonstration note. These functional demonstration records are separate from the optional Google Analytics choice.
10. Storage locations and retention
The service providers used by this website may process information outside Israel, including in the United States and other countries where they operate. When you submit an inquiry, you request its delivery through our hosting and email services, which can involve processing abroad. Optional analytics and loading the map also involve sending information to Google. You can contact us about these arrangements before submitting information.
Inquiry messages form part of our email correspondence. Their retention depends on the continuing inquiry or business relationship and any applicable recordkeeping or legal-claim requirements; this website does not automatically delete messages from our inbox after a fixed number of days. Hosting logs, email-service records, analytics records and demonstration records have separate provider or account retention settings. The seven-day and 30-day demonstration cookie periods do not automatically delete database records. For information about a particular record, or a deletion request, contact us using the details above.
11. Access, correction and other requests
Under the Israeli Privacy Protection Law, you may request access to personal information about you held in a database and request correction of information that is inaccurate, incomplete, unclear or outdated, subject to the conditions of the law. You can also contact office@kopack.co.il to ask for deletion, withdraw consent or ask us to stop a use of information. We examine these requests under the law that applies; deletion is not an unconditional right in every circumstance. We may need proportionate information to verify your identity before disclosing or changing records.
Where another applicable privacy law grants additional rights, such as objection, restriction or portability, you can raise those rights with us. You may also contact the Israeli Privacy Protection Authority or another competent supervisory authority about a concern.
12. Children and policy updates
The website is intended for business inquiries and is not directed at children. Please contact us if you believe a child has submitted personal information that should be removed. We will update this page when our website practices change and show the revision date above. Any new optional purpose that requires consent will be presented for a separate choice.
Further information from our providers: