Privacy policy
KolRofe privacy policy: what we collect when you book an appointment or register a clinic, why, who it is shared with, how long it is kept and how to exercise your rights under Israeli privacy law.
This policy explains in plain words what we collect when you book an appointment or register a clinic, what we do with it, and how you can access, correct or delete it.
KolRofe is operated by the site operator, who is the owner of the database and the controller of the information under the Israeli Protection of Privacy Law 5741-1981. Privacy contact: ymd770@gmail.com.
The operator's full registration details (legal name and company or business number) are published on the legal contact page and kept updated there.
When booking: your name, mobile number, selected city, requested treatment, the chosen doctor or clinic, the chosen date and time, and a record of your consent to be contacted.
When a clinic or doctor registers: clinic name, doctor name, profession and treatments, licence number, address, phone, email, accepted payment methods, and licence documents uploaded for verification.
Technical data: IP address, browser and device type, system errors and pages viewed. This is collected for security and operation even without consent to measurement cookies.
Booking details are needed to pass your request to the clinic you chose and confirm the appointment — this is use for performing the service you asked for, based on the explicit consent given in the form.
Clinic details are needed to verify identity and licensing before publication, protecting the public from misleading listings. Technical data is needed for site security and abuse prevention.
You are not legally obliged to provide information, but without a name and phone number an appointment cannot be arranged, and without licence details a clinic cannot be published.
The clinic or doctor you chose receives your name, phone, treatment type and requested time — that is the purpose of the booking.
Infrastructure providers process data on our behalf only: the database and storage service holding the requests, the delivery and protection service for the site, Stripe for payment, Google Places for clinic address verification, and an operational alerting service. Some providers store data outside Israel, in countries with comparable data protection or under appropriate contractual safeguards.
We do not sell personal data and do not pass it to advertisers. Disclosure to an authority happens only where required by law or court order.
The booking fee is charged through Stripe. Card details, Apple Pay or Google Pay are entered in Stripe's secure form and are never stored on KolRofe servers or visible to us.
We keep only a transaction identifier, payment status and amount, for confirming the appointment, issuing refunds and accounting obligations.
Booking requests and appointments are kept up to 24 months for clarification with the clinic, refunds and complaint records, then deleted or anonymised.
Clinic licence documents are kept while the listing is active and deleted at the latest 12 months after it ends. Payment records are kept for seven years as required by tax law.
Under Israeli privacy law you may review the information held about you, ask for correction if it is wrong or outdated, and ask for deletion. You may also withdraw consent to being contacted or to anonymous measurement at any time.
Send requests to ymd770@gmail.com; we answer within 30 days. If the answer is unsatisfactory you may turn to the Privacy Protection Authority at the Ministry of Justice or to the courts.
Data is stored in a protected database with row-level permissions, licence documents are reachable only through signed time-limited links, connections are encrypted, and administrative access is limited to one identified account.
The site is not intended for children under 16; a booking for a minor should be made by a parent or guardian. We do not collect medical records, diagnoses or test results — only the requested treatment type.
If we make a material change we update the date on this page, and where a change broadens the use of existing data we ask for consent again.