Privacy Policy – Cross Rive

Last Updated: August 26, 2025

Cross River (“Company”, “we”, “our”, “site”) is committed to protecting your privacy and processes personal data in accordance with applicable Israeli law, including the Israeli Privacy Protection Law, 1981 (as amended, including Amendment 13), the Privacy Protection (Data Security) Regulations, 2017, and Israel’s Anti-Spam provisions (Section 30A of the Communications Law).

This policy explains what data we collect, for what purposes, where it is stored, with whom it is shared, how long it is retained, your rights, and how to exercise them.

1) Who we are & Contact

Cross River
Address: 5 Kiryat Mada St., Har Hotzvim, Jerusalem
Privacy contact email: [add email] or the contact form on the site
Phone (optional): [add phone]

For this Policy, Cross River is the “database owner/holder” under Israeli law.

2) Data we collect

  • Contact details you provide: name, email, phone, inquiry/form content, attachments.

  • Technical usage data: IP address (possibly masked), browser/device type, OS, pages viewed, load times, scrolling/click events (as configured in analytics tools).

  • Cookies & similar IDs: session management, essential functions, statistics and troubleshooting.

  • Recruitment/HR (if a careers page exists): CV/resume and application data you submit, related communications, evaluations, interview scheduling, etc.

Providing data is voluntary; some fields may be marked “required” to handle your request/application.

3) Purposes & legal bases

  • Responding to inquiries and performing engagements you request.

  • Operating, maintaining, securing, and improving the site and services.

  • Analytics and measurement (e.g., Google Analytics) to enhance user experience.

  • Direct marketing/updates – only with your explicit consent (Opt-in), and you can withdraw at any time.

  • Recruitment and HR (if applicable).

  • Compliance with legal obligations and enforcement.

Legal bases: consent; performance of your request/contract; legitimate interests (operation, service improvement, security, risk management); legal obligation.

4) Cookies & analytics

  • Essential – for basic operation (always on).

  • Analytics/performance – loaded only with consent via a cookie banner (if implemented).

  • Marketing/ads – only with explicit consent (if enabled).

Preferences can be managed via your browser and any on-site cookie tool. We enable privacy-friendly options in GA where possible (e.g., IP masking). Data retention is set in the tool’s settings.

5) Sharing with third parties

  • Processors/service providers: hosting, security, maintenance, email/CRM, analytics, recruitment platforms (ATS), under appropriate processing agreements.

  • Authorities/legal counsel – where required by law or to establish/exercise legal claims.

  • International transfers: data may be transferred outside Israel (e.g., to vendor servers) subject to applicable law and appropriate safeguards.

6) Direct marketing & Amendment 13

We send marketing communications only with clear consent (Opt-in). Each message includes an instant unsubscribe option. We maintain records of consents/opt-outs and any direct-marketing database, as required.

7) Data retention

We retain data only as long as needed for the purposes above, then delete/anonymize it. Examples: inquiries/service – up to 7 years (limitation/risk); analytics – per tool settings; suppression lists – retained to honor opt-outs.

8) Security & incidents

We implement reasonable, industry-standard measures per the Israeli Data Security Regulations, including TLS encryption, access controls, backups, and event logging. In a severe incident, we will act per law, including notifications to the Privacy Protection Authority and data subjects, where required.

9) Your rights

Subject to law: right of access, rectification, deletion/blocking of data no longer required, objection to direct marketing, and withdrawal of consent for processing based on consent.
To exercise rights: [add email] or use the site’s contact form.

10) Recruitment & HR (if applicable)

Candidate data is used to assess suitability, schedule interviews, manage hiring, and comply with legal requirements. You may request deletion/update; we may retain candidate profiles for reasonable periods for a talent pool, subject to consent.

11) Children

The site is not directed to individuals under 18. If you believe we collected data of a minor without required consent, contact us and we will delete it.

12) Databases & registration

Data is stored in databases maintained by us and/or our providers. Where required, databases will be registered/updated with the Israeli Registrar of Databases.

13) Changes to this Policy

We may update this Policy from time to time. The updated version will be posted here with a “Last Updated” date. Your continued use constitutes acceptance of the updated Policy.