Privacy Policy
Last updated: 2026-07-21
Who we are
This website is operated by Roni Moriya โ Ronails, a certified nail instructor (NSI American), Petah Tikva. Roni Moriya โ Ronails is the data controller for the information collected on this site.
For questions about this privacy policy, contact us by email: legal@ronails.co.il
What information we collect
Information you provide directly
- Contact form โ name, email, phone (optional), and a free-text message.
- Site registration โ email address and password (the password is encrypted and not accessible to us).
- Course enrollment โ enrollment record, lesson progress tracking, and completion certificates.
Providing this information is voluntary and based on your consent โ you are under no legal obligation to provide it. However, without the required details we will not be able to provide the requested service (for example, replying to an inquiry, completing an order, or enrolling you in a course).
Information collected automatically
The site collects anonymous usage statistics only โ with no tracking cookies and no identifying information (see the "Anonymous usage statistics" section below). There are no marketing pixels or third-party tracking tools on the site.
How we use the information
- Providing services and scheduling appointments
- Managing course enrollments and progress tracking
- Communication regarding orders, courses, or inquiries
- Improving the site experience
Cookies and local storage
In accordance with the Israeli Privacy Protection (Data Security) Regulations 5777-2017 and the European ePrivacy Directive (Article 5(3)), cookies essential to the site's operation are exempt from the consent requirement โ only transparent notice is required.
Essential cookies (always active)
| Name | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Session token for user authentication (Supabase Auth) | Session |
| last_seen_update | Recent-activity monitoring for spam prevention | 15 minutes |
| maintenance_state | Maintenance-mode state cache | 1 minute |
| maintenance_bypass | Maintenance-mode bypass for administrators | 24 hours |
| announcement_dismissed | Remembering announcement-bar dismissal | Session up to 30 days (per site settings) |
Local storage (preferences โ localStorage)
| Name | Purpose | Duration |
|---|---|---|
| theme | Light/dark mode preference | Persistent |
| sidebar-state | Sidebar state (open/closed) | Persistent |
| ronails-cart-v1 | Shopping-cart contents (items and quantities โ no personal details) | Persistent |
The site has no marketing cookies, analytics cookies, or third-party cookies.
Anonymous usage statistics
The site collects anonymous usage data (pages viewed, device type, language) in order to improve the site. This collection uses no cookies, stores no IP addresses or identifying information, and is not shared with any third party. It is not possible to identify a visitor or follow them across days.
Sharing information with third parties
We do not sell, rent, or share personal information for marketing purposes. Information is shared only with essential service providers:
| Provider | Role | Server location |
|---|---|---|
| Supabase | Data storage and authentication | EU (Frankfurt) |
| Brevo | Transactional email delivery | EU |
| Google Places API | Displaying reviews | USA |
| TorMahir | Appointment-booking system โ the booking itself takes place on their external site, subject to their privacy policy | Israel |
Data retention and account deletion
Your information is kept as long as your account is active. You can request account deletion via the security settings in your personal profile. After submitting a request, a waiting period (default: 30 days) allows you to cancel the deletion. At the end of the period, the account and its associated data are permanently deleted, except for information we are legally required to retain.
Messages sent via the contact form (name, email, phone, and message) are automatically deleted after 24 months.
Your rights
Under the Israeli Privacy Protection Law, 5741-1981, including Amendment 13 in force since August 2025, you have the right to:
- Access the personal information stored about you
- Correct inaccurate information
- Request deletion of your personal information
- Lodge a complaint with the Israeli Privacy Protection Authority
For privacy requests, email legal@ronails.co.il. We aim to respond within 30 business days.
Data security
We apply security measures in line with the Israeli Privacy Protection (Data Security) Regulations, 5777-2017: encrypted transport (TLS), hashed passwords that are inaccessible to us, database-level access controls and permissions, two-factor authentication for administrators, and automatic deletion of data that is no longer needed (see the retention section). In the event of a serious security incident involving personal data, we will act according to our legal reporting duties โ including notifying the Privacy Protection Authority and affected users without undue delay.
Changes to this policy
This policy may be updated from time to time. The date of the latest update appears at the top of the page.