Privacy Policy

1. Introduction & Legal Basis

VIBEMODO respects the privacy of its users and is committed to protecting personal information. This policy is written in accordance with:

• Israeli Privacy Protection Law (1981) and its regulations
• General Data Protection Regulation (GDPR) — for EU customers
• California Consumer Privacy Act (CCPA) — for California residents
• UK PECR Regulations — for UK customers

The legal basis for processing your data is: (a) contract performance (order processing), (b) explicit consent (marketing, cookies), (c) legitimate interest (security, fraud prevention), (d) legal obligation (tax record-keeping).

2. Information We Collect

• Identity details: Full name, email address, phone number.
• Shipping details: Full address, city, country, postal code.
• Transaction data: Products purchased, amounts, dates. Credit card details are not stored by us — processed directly by the payment provider.
• Browsing data: IP address, browser type, pages viewed, time spent — for analytics and service improvement.
• Cookie data: Language preferences, shopping cart, session ID. See Section 7.
• Communications: Messages sent via contact forms.
• Consent records: Date and time of consent to terms, marketing, and cookies — for legal proof.

3. How We Use Your Information

• Processing orders and shipping products.
• Communicating with customers about orders.
• Improving our service and website.
• Sending marketing updates — only with your explicit consent.
• Fraud prevention and system security.
• Complying with legal requirements.

4. Sharing with Third Parties

To fulfill orders, we share your shipping details (name, address) with our product supplier — CJ Dropshipping, located in China. This transfer is necessary to complete your order. CJ Dropshipping is subject to its own privacy policy.

For EU customers (GDPR): Data transfer to China is based on explicit consent (Article 49(1)(b) GDPR) — performance of a contract at your request. No Standard Contractual Clauses (SCCs) are in place with CJ Dropshipping.

We also use hosting and analytics services from Manus (servers in Singapore), and a secure payment processor.

We do not sell, rent, or transfer personal information to third parties for marketing purposes.

5. Data Security

We implement reasonable security measures including SSL/TLS encryption, restricted database access, and secure storage. However, no online security is absolute. In the event of a material security breach, we will notify you and the relevant authority as required by law.

6. Data Retention

We retain personal data as long as needed to provide the service, and thereafter for 7 years as required by Israeli tax law. Marketing data (consents, subscribers) is retained until consent withdrawal + 3 years for legal proof. After these periods, data will be deleted or anonymized.

7. Cookies

The Site uses the following types of cookies:

• Essential cookies: Required for site functionality (login, cart, security). Cannot be disabled.
• Analytics cookies: Manus Analytics — measuring site usage. Can be declined.
• Marketing cookies: For targeted advertising. Can be declined.

In accordance with GDPR and Israeli Privacy Law, we request your consent for non-essential cookies on your first visit. You can change your preferences at any time through your browser settings.

8. Your Rights

Under Israeli Privacy Law and GDPR, you have the right to:

• Access: View your personal data.
• Rectification: Correct inaccurate data.
• Erasure ("Right to be Forgotten"): Request deletion (subject to legal retention requirements).
• Restriction: Request limitation of processing.
• Data portability: Receive your data in a structured format (GDPR).
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw marketing consent at any time.

To exercise these rights: [email protected]

EU customers: You have the right to lodge a complaint with your national data protection authority.

California residents (CCPA): You have the right to know what data we collect, request deletion, and opt out of data sales. We do not sell personal data.

9. Policy Changes

We may update this policy from time to time. Material changes will be published on the Site at least 30 days before taking effect, and registered customers will be notified. Continued use of the Site after publication of changes constitutes acceptance of the updated version.

10. Contact & DPO

Privacy questions: [email protected]

Data Protection Officer (DPO): At this stage, the site owner acts as DPO. Contact: [email protected]

Address: Israel — [Physical address to be added]