Privacy Policy

Last updated: February 22, 2026

1. Data Controller

The data controller for your personal data is Attractions4Us LLC, operating the website Tel Aviv Walks at telavivwalks.com (“we,” “us,” or “our”).

This Privacy Policy is issued pursuant to the Israeli Protection of Privacy Law, 5741-1981 (PPPA) and the Protection of Privacy Regulations (Data Security), 5777-2017. For visitors from the European Union, we also comply with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Directive 2002/58/EC (ePrivacy Directive). This policy applies to all users of this website, regardless of location.

2. Categories of Personal Data Collected

a) Data You Provide Directly

When you make a booking, submit an enquiry, or contact us, we may collect: your full name, email address, telephone number, billing and postal address, payment details (processed by PCI-DSS compliant providers—we do not store full card numbers), travel dates, participant details, and any special requests or dietary/accessibility requirements you provide.

b) Data Collected Automatically

When you visit our website, we automatically collect: your IP address, browser type and version, device type, operating system, referring/exit URLs, pages visited, timestamps, and session duration. This data is collected through cookies, server log files, and similar technologies (see Section 7 below).

c) Booking Transaction Data

When you complete a booking we collect: tour/experience selection, date and time, number of participants, pricing category, booking confirmation ID, and transaction amount.

3. Legal Bases for Processing

We process your personal data on the following legal bases:

  • Contract Performance: Processing necessary to fulfill your booking, provide customer support, send booking confirmations and travel documents, and manage cancellations or modifications.
  • Consent: Where you have given explicit consent—specifically for: marketing communications, promotional newsletters, and non-essential analytics cookies. You may withdraw consent at any time.
  • Legitimate Interest: Processing necessary for website security, fraud prevention, internal analytics for service improvement, and defence of legal claims.
  • Legal Obligation: Processing required to comply with applicable tax, accounting, anti-fraud, and regulatory obligations under Israeli and applicable international law.

4. How We Use Your Data

  • Process and fulfill tour bookings and reservations
  • Send booking confirmations, updates, tickets, and customer service communications
  • Process payments securely through PCI-DSS compliant payment partners
  • Direct marketing (with consent): Send promotional offers, newsletters, and personalised recommendations by email. You may opt out at any time via the unsubscribe link.
  • Improve our website, services, and user experience through aggregated analytics
  • Comply with legal, tax, and regulatory obligations
  • Respond to your enquiries, complaints, and support requests

5. Third-Party Data Processors

We share your data with the following categories of processors, each bound by data processing agreements:

  • Bokun (Tripadvisor): Booking and reservation management platform.
  • Payment Processors: PCI-DSS Level 1 certified payment service providers.
  • Tour Operators: Local operators who deliver the booked experience.
  • Analytics (Google Analytics 4): Website traffic analytics with IP anonymisation enabled.
  • Hosting (Amazon Web Services): Website infrastructure hosted in the United States.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Israel, including the United States, where our hosting infrastructure and certain service providers are located. Such transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework.

7. Cookies and Tracking Technologies

  • Strictly Necessary Cookies: Essential for website functionality and secure checkout.
  • Analytics Cookies: Google Analytics cookies to measure website traffic. Installed only with your prior consent.
  • Preference Cookies: Store your language and display preferences.

You may change your cookie preferences at any time through your browser settings.

8. Data Retention

  • Booking records: 7 years from the date of the transaction, as required by Israeli tax law.
  • Marketing consent records: Duration of consent plus 2 years after withdrawal.
  • Website analytics data: 26 months (Google Analytics default).
  • Customer support correspondence: 3 years from the last communication.

9. Your Rights

Under the Israeli Protection of Privacy Law and, for EU residents, the GDPR, you have the following rights:

  • Right of Access: Obtain confirmation of whether your data is being processed and receive a copy of it.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
  • Right to Object: Object to processing based on legitimate interest, including direct marketing.
  • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent: Withdraw consent at any time.

How to exercise your rights:

Email reservations@telavivwalks.com with the subject “Data Rights Request.” We will respond within 30 days.

For California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal information. We do not sell or share personal information.

10. Right to Lodge a Complaint

If you believe your privacy rights have been infringed, you may lodge a complaint with:

  • Israel Privacy Protection Authority (PPA)
  • Ministry of Justice, 29 Salah a-Din Street, Jerusalem, Israel
  • Website: gov.il/privacy

EU residents may also lodge a complaint with the supervisory authority in their country of habitual residence.

11. Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children under 16.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be posted on this page with a revised “Last updated” date.

13. Contact Us