Privacy Policy.
What is actually collected when you browse or contact us, who receives it, how long it is kept, and your rights — under Israel's Protection of Privacy Law as amended by Amendment 13.
Effective: 5 September 2026 · Last updated: 5 September 2026 · Version 2
1. Who we are and why this document exists
This policy covers the website schwebel-law.com (the "Site") and enquiries that reach us through it. The controller is Schwebel Law, Adv. Yona Schwebel, Tel Aviv, Israel. Privacy questions: yona@schwebel-law.com.
It is written to satisfy section 11 of Israel's Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force 14 August 2025), and the Privacy Protection Authority's guideline on the duty to notify. It describes what is actually collected — not what "may" be. The firm is not required to appoint a privacy protection officer under section 17B1 of the Law and has not appointed one.
2. Notice under section 11 — when you contact us
There is no form on this Site. When you email, call, or book a call through the scheduling link, you give us information. Under section 11 of the Law, here is what you should know before you do:
- Purpose: to reply to you, run a conflict-of-interest check, and decide together whether the firm is the right fit. If an engagement follows — to handle the matter.
- You are under no legal obligation to provide the information. It is voluntary. Without contact details we cannot get back to you; you can always phone without leaving details.
- Who receives it: the infrastructure providers listed in section 5 (email, hosting, scheduling), and other lawyers only if you ask us to, or agree that we, involve them in your matter.
- Your rights: to inspect the information (section 13 of the Law) and to correct it (section 14), as set out in section 8 below.
3. What we collect, from where, why, and for how long
| Category | Source | Purpose | Basis | Retention |
|---|---|---|---|---|
| Technical browsing data: IP address, browser and operating system, page URL, referrer, request time | Collected automatically by the Cloudflare infrastructure that hosts and protects the Site | Serving the Site, defending against attacks and abuse, fault monitoring | Legitimate interest in operating and securing the Site | In Cloudflare's infrastructure logs under its own policy; the firm neither receives nor keeps identifying logs |
| An enquiry by email or phone: name, contact details, the content of your message and any documents you attach | You | Replying, conflict check, opening a file | Your consent; after engagement — providing the legal service and legal obligations | An enquiry that does not become an engagement — 12 months; a client file — 7 years from the end of the engagement or of the legal proceedings, unless otherwise agreed in writing (section 90A of the Israel Bar Association Law, 5721-1961); documents listed in the Law's Second Schedule, such as wills, for the periods set there |
| Booking a call: name, email, time zone, the topic you choose to enter | You, on the firm's booking page (Microsoft Bookings, part of Microsoft 365) | Fixing a time and sending confirmation and reminder | Your consent | 12 months from the call |
What is not collected: the Site sets no cookies, runs no analytics, advertising pixels or chat, and loads no fonts or scripts from third-party servers. There is no form, registration or user account.
4. Why we do not ask for cookie consent
Because there are no cookies. Any technology that would need cookies or a persistent identifier will be added only after this policy is updated, and will appear in section 3.
5. Who we share information with
- Cloudflare, Inc. (USA) — hosting, content delivery, security. Processes technical browsing data as a service provider.
- Microsoft Ireland Operations Ltd. / Microsoft Corporation — the firm's email, calendar and booking page (Microsoft 365, including Microsoft Bookings). Email enquiries and booked calls are stored there.
- Other lawyers and advisers — only on your matter, only when needed, and only after we have discussed it with you.
- Authorities — where required by law, court order or a lawful demand.
We do not sell information, do not use it for advertising, and do not pass it on for anyone's direct marketing.
6. Transfers outside Israel
The providers above also process data on servers outside Israel, mainly in the United States and the European Union. Transfers are made under Regulation 2(4) of the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, on the basis of the recipient's contractual undertaking to protect the data to the standard required in Israel the Cloudflare Customer DPA, incorporated into Cloudflare's subscription agreement, and the Microsoft Products and Services DPA, incorporated into the Microsoft 365 customer agreement.
7. Security
Traffic to the Site is encrypted (HTTPS); the Site runs no third-party code and protects itself with a strict Content Security Policy; access to the firm's email and documents is protected by access control and two-factor authentication. The firm follows the Protection of Privacy Regulations (Data Security), 5777-2017, at the security level that applies to it. No system is completely immune, and we do not promise absolute security. In a security incident that may affect you, we will notify as the law requires.
8. Your rights
- Access to the information held about you (section 13 of the Law).
- Correction or deletion of information that is inaccurate, incomplete or out of date (section 14).
- Portability — receiving the information you provided in a structured, machine-readable format (new under Amendment 13).
- Deletion and objection — asking us to delete an enquiry that did not become an engagement, and asking us not to contact you again.
- Complaint to the Privacy Protection Authority: ppa@justice.gov.il.
To exercise a right, email yona@schwebel-law.com. We answer within 30 days. Information covered by lawyer–client privilege or by statutory retention duties may be excluded from some rights; if so, we will explain why.
9. Artificial intelligence and automated decisions
The Site makes no automated decisions about you and builds no profiles. In its legal work the firm uses AI tools for drafting, review and research under confidentiality and security agreements with the providers, and does not feed identifying client information into services that train models on user data. No decision on a client's matter is made by an automated system.
10. Minors
The Site is intended for adults. We do not knowingly collect information from minors; if we discover that we have, we delete it.
11. Visitors from the European Union
Where the GDPR applies to a visitor, the legal bases are legitimate interest (operating and securing the Site) and consent or pre-contractual steps (enquiries and bookings), and the corresponding rights under the GDPR apply.
12. Changes
An updated version will be published on this page with a new effective date and version number. A material change — such as adding analytics or a form — will be flagged at the top of the page for 30 days. Previous versions are kept by the firm.
13. Contact
Schwebel Law
Adv. Yona Schwebel
Email: yona@schwebel-law.com
Phone: +972 54 288 9554
Tel Aviv, Israel