Legal

Privacy Policy

1. Overview

This Privacy Policy explains how Restart Abroad, registered in Israel and operated by Sagy Gideon Mizrahi from Rishon Lezion, Israel (“we”, “us”, “our”) collects, uses, shares, and protects your personal data. It applies to all services provided through our website and 1:1 sessions. We operate in accordance with the Israeli Privacy Protection Law, 5741-1981, and, where applicable, the EU General Data Protection Regulation (GDPR).

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email and update the “Last Updated” date at the top of this document. Your continued use of our services after such changes constitutes acceptance of the updated policy. If you do not agree, please discontinue use of our services.

Last Updated: 23/4/2026

2. Data We Collect

We collect the following categories of personal information:

Identity and contact data: name, email address and country of residence, collected when you register or book a session. You may choose to add your phone number and additional information as well when you fill in our contact form.

Relocation and background information: details about your move, family situation, employment, immigration status, or other personal circumstances can be shared via our current status form and during sessions. This may constitute sensitive personal data and is processed only with your explicit consent.

Communication records: emails, messages, and session notes arising from your use of our services.

Payment data: billing information is processed directly by our third-party payment provider (e.g., PayPal or equivalent). All payment transactions are encrypted in accordance with Payment Card Industry Data Security Standard (PCI-DSS) requirements. We do not store your full credit card details on our systems.

Usage and technical data: as with most websites, we automatically collect log file data including IP addresses, browser type, pages visited, and time spent on site. This data is used to analyze trends, improve our website, and understand aggregate usage patterns. We may use third-party analytics tools (e.g., Google Analytics, Hotjar or equivalent) for this purpose.

3. How We Use Your Data

We use your personal data solely to the extent necessary to deliver our services and as described in this policy. Specifically, we use your data to: (a) deliver and manage the guidance and relocation support sessions you have purchased; (b) communicate with you about your sessions, scheduling, and service updates; (c) improve our services and website based on aggregate, non-identifiable usage patterns; and (d) send optional marketing communications such as newsletters, tips, and updates — but only where you have given us explicit consent to do so.

If you wish to stop receiving marketing communications, you may unsubscribe at any time by clicking the “Unsubscribe” link in any email we send, or by contacting us directly at the address in Section 12. Unsubscribing from marketing emails will not affect delivery of service-related communications necessary to fulfil your purchased sessions.

4. Legal Basis

We process personal data on the following legal bases: (a) contractual necessity — to deliver the services you have purchased; (b) consent — for optional communications such as newsletters and updates; and (c) legitimate interest — for service improvement and analytics, where such interests are not overridden by your rights. Where we process sensitive personal data (such as information relating to family situation, health, or immigration status), we rely on your explicit consent. EU/EEA residents’ data is processed in accordance with the GDPR.

5. Data Sharing

We do not sell your personal data. We may share information only in the following circumstances:

Service providers: we share data with trusted third-party providers necessary to operate our services, including payment processors (e.g., PayPal or equivalent), video conferencing platforms (e.g., Zoom, Whatsapp or equivalent), scheduling tools (e.g., Calendly or equivalent), and website analytics tools. These providers are contractually required to process your data only as directed by us, to implement appropriate security measures, and not to use your data for any other purpose.

Legal requirements: we may disclose your personal data when required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our legal rights, prevent fraud, or ensure the safety of any person.

Business transfers: in the event of a merger, acquisition, reorganization, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you by email prior to any such transfer and give you the opportunity to request deletion of your data.

Third-party links: our website may contain links to external websites not operated or controlled by us. This Privacy Policy does not apply to those sites. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies directly.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy. As a general guideline: session notes and communication records are retained for up to 3 years after the end of our service relationship; financial records are retained for a minimum of 7 years, in line with Israeli tax authority requirements and applicable bookkeeping regulations.; data collected solely with your consent (e.g., for newsletters) is deleted upon withdrawal of consent. You may request deletion of your data at any time, subject to legal retention obligations.

7. Your Rights

Under Israeli law and, where applicable, the GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (“right to be forgotten”); restrict or object to certain processing; and withdraw consent at any time without affecting the lawfulness of prior processing. EU/EEA residents also have the right to data portability and to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us at the address in Section 13.

8. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, loss, or destruction. These include use of encrypted communications (SSL/TLS), access controls limiting data to authorized personnel only, and secure third-party platforms that comply with relevant industry security standards including PCI-DSS for payment data.

No system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and in accordance with applicable law.

9. Cookies

Our website uses cookies to enhance user experience and analyze usage patterns. We use two categories of cookies: (a) essential cookies, which are necessary for the website to function and cannot be disabled; and (b) non-essential cookies (e.g., analytics), which are only activated with your consent. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect your ability to use our services.

10. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal that indicates you do not wish to be tracked across websites. Our website does not currently respond to DNT signals, as no universal standard for DNT has been established. We will update this policy if our practices change in this regard.

11. Children’s Privacy

Our services are intended for adults and are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately at the address in Section 13 and we will delete it promptly.

12. International Data Transfers

Our business is based in Israel, which has been recognized by the European Commission as providing an adequate level of data protection. If you are accessing our services from the EU/EEA or other regions, please be aware that some of our third-party service providers (such as video conferencing or payment platforms) may process data outside Israel or the EU. Where such transfers occur, we ensure they are governed by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms.

13. Contact and Complaints

For any privacy-related inquiries, requests to exercise your rights under Section 7, concerns about our data practices, or to register a complaint, please contact us at: Restart Abroad Email: sagy@joinrestartabroad.com

We will respond to all requests within 30 days. If you are an EU/EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.