Privacy Policy

1. Who holds your information

The information described here is held by SABI.

For anything about your personal information — a question, a request to see it, a correction — write to info@sabipouch.com.

2. What we collect

Only what an order, an account or the security of the shop actually needs.

• Contact and account: your name, email address, telephone number, and — if you create an account — a cryptographic hash of your password. We never hold the password itself.
• Delivery: street, building number, apartment, city, postal code, and any delivery note you choose to add.
• Orders: what you bought, the quantities and strengths, the prices, any special or promo code applied, the delivery charge, the total, the order and payment status, and the payment provider's transaction reference.
• Technical and security: your IP address and browser information where we log them to protect the shop, rate-limit abuse and keep you signed in, plus the session identifier in your cookie.
• Site analytics: pages viewed, items added to the cart and checkout steps reached, recorded against an anonymous session identifier. These are our own records, kept on our own systems; they carry no name, email, telephone number or payment data.
• Trade enquiries: if you contact us about stocking SABI, the name, business, email and telephone number you send us.

3. Payment card details

We do not collect or store your card number or security code. Card details are entered on the secure hosted page of our payment provider, our payment provider, and are processed by them under their own systems and privacy terms.

What reaches us is the result: whether the payment succeeded, the amount, a transaction reference, and at most a masked indication of the card such as its last four digits.

4. Why we use it

• To take, price and fulfil your order, and to deliver it.
• To contact you about that order — confirmation, delivery, a problem.
• To run your account and fill in your details at a later checkout.
• To answer your questions and handle cancellations and returns.
• To take payment through our payment provider.
• To apply promotions and check that a promo code may be used.
• To protect the shop against fraud, abuse and unauthorised access.
• To keep the accounting and order records we are required to keep.
• To understand how the website is used, from our own first-party records, so we can improve it.

5. Do you have to give it to us?

You are not legally obliged to give us any of it. But some of it is necessary for what you have asked us to do, and without it we cannot do that thing.

A delivery address and a telephone number are necessary to deliver an order. An email address is necessary to send you a confirmation. A password is necessary only if you want an account — guest checkout does not need one. A delivery note is entirely optional, and so is your name on an account.

Each form on this site says which of its fields are required and which are optional.

6. Who else sees it

We do not sell your information and we do not share it for anyone else's marketing. Some information necessarily reaches the providers who help us run the shop, and only what their role requires:

• Our payment provider, to take and reconcile payment.
• Our hosting and database provider, on whose systems the shop runs.
• The courier delivering your order, who receives the delivery details.
• Our email provider, to send order and account messages.
• Professional advisers — accounting or legal — where they need it.
• A public authority, where we are legally required to provide it.

7. Our providers

Providers receive information only for their specific role, on the basis that they keep it secure, use it for nothing else, and are bound by appropriate contractual and security arrangements.

Some of them may process information on systems located outside Israel. Where that is the case we take the steps required of us before information is transferred.

8. Seeing and correcting your information

You may ask to see the personal information we hold about you, and to have it corrected if it is wrong, incomplete or out of date. Write to info@sabipouch.com and we will respond as the law requires.

Much of it you can change yourself: your name, telephone number, delivery address and delivery notes are all editable on the account page, and you can delete your account there too.

Deleting your account clears your saved name, telephone number, address and password and releases your email address. The record of orders already placed remains, because a business is required to keep its sales records.

9. How long we keep it

Not indefinitely, and not everything for the same length of time.

• Account details: while your account is open, and cleared when you delete it.
• Orders and payment records: for the period we are required to keep accounting and tax records.
• Security and administrative logs: for a limited period proportionate to their purpose.
• Baskets that were never checked out, and expired stock reservations: cleared automatically.
• Support correspondence: for as long as needed to deal with the matter and any follow-up.

10. Security

We apply technical and organisational safeguards appropriate to the information we hold: traffic is encrypted in transit, passwords are stored only as cryptographic hashes, administrative access is restricted to named accounts with the narrowest permissions their work needs, sensitive actions are logged, and access to the systems holding this information is limited and monitored.

No system is beyond risk, and we do not claim otherwise. If an incident occurs that affects your information, we will act on it and meet the notification obligations that apply to us.

11. Marketing

Buying from us, creating an account or saving an address does not sign you up to any marketing. We do not currently send promotional email or SMS.

Messages about an order — a confirmation, a delivery update, a password reset, a security notice — are not marketing. They are part of the service you asked for, and they are sent whether or not you have consented to anything else.

12. Under-18s

This shop is for adults aged 18 and over, and we do not knowingly collect information from anyone under 18. If you believe a person under 18 has given us information, write to info@sabipouch.com and we will delete it.