72 Nation72 NATION
Legal

Privacy Policy

Version 1.0Effective 24 August 2026Governed by Israeli law

This policy explains what personal data 72 Nation collects, why, what we do with it, how long we keep it, and the rights you have over it. We collect as little as we can and we do not sell it.

1 · Controller

The controller of your personal data is 72 Nation, a company established and registered in Israel. For any question about this policy, or to exercise any right under it, write to privacy@72nation.com — the single address for every privacy matter, including access, correction and deletion requests. Requests are handled by a person, not a queue.

2 · Scope

This policy covers personal data we process through 72nation.com and through correspondence with us. Where we act as a processor on behalf of a client — for example when a system we have deployed handles data belonging to a public authority — that processing is governed by our written agreement with that client, and the client, not 72 Nation, is the controller. This policy does not apply to it.

3 · What we collect

Data you give us

The forms on this site ask for these fields and no others — there is no telephone field anywhere on the site, and we do not ask for one:

  • Your name, and on the Contact form your organization and your role there.
  • Your email address — the only channel we use to reply.
  • The country you are based in, if you choose to give it. This field is optional.
  • The topic you select, and the content of your message, including whatever you choose to tell us about the problem you are bringing.
  • Any further correspondence between us, and anything contained in an email you send us directly, including its headers.

Data collected automatically

  • Technical data recorded in server logs: IP address, request time, page requested, HTTP status, referring page and user-agent string.
  • When you submit a form, the address your request came from is held in memory for ten minutes so that we can limit how many messages one sender can post. It is counted, not stored, and it is never written into the message that reaches us.
  • No analytics run on this site at present, and no cookie is set by any page of it. See our Cookie Policy for exactly what is and is not stored on your device.

What we do not collect

We do not seek special-category data — health, biometric, political, religious or trade-union information — and ask that you do not send it. We do not knowingly collect data from anyone under 16, and the site is not directed at children. We do not build advertising or behavioral profiles, we do not track you across other sites, and we do not use automated decision-making that produces a legal effect on you.

4 · Why we process it, and on what basis

Responding to your inquiryTo read, assess and reply to what you sent us, and to hold the resulting conversation. Basis: your consent in initiating contact, and our legitimate interest in responding to approaches about our work. Under Israeli law, data you provide voluntarily for this purpose is processed on the basis of that informed provision.
Assessing whether to work togetherTo evaluate a problem you have brought us and decide whether we are the right people for it. Basis: legitimate interest, and steps preparatory to a contract.
RecruitmentTo consider you for a role where you have written to us about working here. Basis: your consent, and steps preparatory to a contract of employment.
Operating and securing the siteTo keep the site available, diagnose faults, and detect and prevent abuse or attack. Basis: legitimate interest in the security and integrity of our systems.
Legal and regulatory obligationsTo comply with law, respond to a lawful request from a competent authority, and establish or defend legal claims. Basis: legal obligation and legitimate interest.

5 · Who we share it with

We do not sell personal data, rent it, or disclose it for anyone else’s marketing. What you send through a form on this site is delivered straight to a mailbox on our own infrastructure — it does not pass through a third-party form service, a customer-relationship platform, or a marketing tool. We share personal data only in these circumstances:

  • Service providers who process data on our instructions and under contract — at present, the provider that hosts the server this site and its mail run on. They may use it only to provide the service to us.
  • Professional advisers — lawyers, accountants, auditors — where they need it to advise us, under a duty of confidence.
  • Competent authorities, where we are required by law to disclose, or where disclosure is necessary to establish or defend a legal claim.
  • A successor, if our business or part of it is transferred, subject to this policy continuing to apply.

6 · International transfers

We are based in Israel and prefer to keep data there. Some providers may process data outside Israel. Where that happens we rely on the recipient country having been recognized as providing adequate protection, or on contractual protections equivalent to those required under Israeli privacy law and, where the GDPR applies, on Standard Contractual Clauses approved by the European Commission. You may ask us which providers are involved and where they process data.

7 · How long we keep it

Inquiries that do not proceedUp to 24 months from the last exchange, so we recognize the context if you come back to us.
Inquiries that become an engagementFor the life of the engagement and for 7 years after it ends, to meet accounting and limitation requirements.
Recruitment correspondenceUp to 12 months from our decision, unless you ask us to keep it longer for future roles.
Server logsUp to 12 months, then deleted or aggregated beyond identification.
Form rate-limit recordsTen minutes, in memory only. They are discarded when the window closes or when the site restarts, whichever comes first.
Anything under legal holdFor as long as the claim or obligation requires, then deleted.

8 · Your rights

Under the Israeli Protection of Privacy Law, 5741-1981, as amended, and its regulations — and, where it applies to you, the GDPR — you have the following rights. We do not charge for exercising them and we will not treat you differently for doing so.

  • Access — to be told whether we hold data about you and to receive a copy of it.
  • Correction — to have data that is inaccurate, incomplete or out of date corrected.
  • Deletion — to have your data deleted where we no longer have a lawful reason to hold it.
  • Objection and restriction — to object to processing based on legitimate interest, and to ask us to restrict processing while an objection is considered.
  • Withdrawal of consent — where we rely on consent, to withdraw it at any time, without affecting processing already carried out.
  • Portability — where the GDPR applies, to receive your data in a structured, commonly used, machine-readable form.
  • Removal from direct mailing — to require that your details be removed from any database used to send you material.

Write to privacy@72nation.com. We respond within 30 days. We may ask for enough information to confirm who you are before we act, purely so that we do not disclose your data to someone else.

If you are not satisfied with our response you may complain to the Israeli Privacy Protection Authority (PPA), or, where the GDPR applies to you, to the supervisory authority in your country of residence. We would rather you came to us first.

9 · Security

We apply technical and organizational measures appropriate to the risk: encryption in transit, access limited to those who need it for the purpose, and review of the providers we rely on. No transmission over the internet is completely secure, and we do not claim otherwise.

If a breach occurs that presents a risk to your rights, we will notify the relevant authority and the people affected as required by law, and we will tell you what happened rather than describe it vaguely.

10 · Cookies

Set out separately in our Cookie Policy.

11 · Changes to this policy

We may update this policy. The current version is always the one published here, with its version number and effective date at the top and any material change summarized under “Recent changes” at the foot. Where a change materially affects how we use data you have already given us, we will tell you directly where we hold a means of doing so. This version is effective 24 August 2026.

12 · Contact

Privacy contact — privacy@72nation.com. We reply within 30 days.