Privacy Policy
Effective date: August 2025 | Last updated: April 2026
1. Data Controller
NAS & Co. Law Firm ("the Firm", "we", "us"), registered in Israel, is the data controller for personal information collected through this website. Contact: privacy@nas-law.com
2. Data We Collect
We collect information you voluntarily provide via contact forms (name, email, phone, message) and automatically collected data (IP address, browser type, pages visited, session duration). We do not collect sensitive personal data without explicit consent.
3. Legal Basis for Processing
Processing is based on: (a) your consent (Sec. 11 Privacy Protection Law 5741-1981); (b) legitimate interest in providing legal services and responding to inquiries (Sec. 14); (c) legal obligation compliance (Sec. 13). For cookies, we rely on explicit opt-in consent per Amendment 13 to the Privacy Protection Law (effective August 2025).
4. How We Use Your Information
We use collected data to: respond to your inquiries, provide legal services, improve our website, comply with legal obligations, and send relevant firm news (with your consent). We never sell personal data to third parties.
5. Retention Periods
Contact form submissions: 24 months. Cookie consent records: 5 years (legal requirement). Website analytics: 26 months. Client files: 7 years after matter closure (Bar Association requirement). Inquiries where no engagement results: 12 months.
6. Cookies (Amendment 13)
We use cookies solely with your explicit opt-in consent, except essential cookies required for site functionality. Essential cookies (session, security) are always active. Analytics and marketing cookies require your explicit approval and can be withdrawn at any time by contacting us or clearing your browser cookies. See our cookie consent banner for choices.
7. Your Rights
Under the Privacy Protection Law 5741-1981 you have the right to: access your personal data (Sec. 13), correct inaccurate data (Sec. 14), request erasure ("right to be forgotten"), data portability, and object to processing. To exercise any right, submit a request via our Data Rights Request form below.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Data is transmitted via TLS encryption. We review security measures periodically.
9. International Transfers
Your data may be processed by service providers located outside Israel (e.g., cloud hosting). We ensure adequate protection through contractual safeguards in accordance with Israeli data protection requirements.
10. Contact & DPO
For privacy questions or to exercise your rights, contact our Data Protection Officer: privacy@nas-law.com | NAS & Co. Law Firm, Israel. Response time: within 30 days.