Effective Date: 1-Jan-2025

 

1. Introduction
At OzDav Holdings Ltd, we are committed to maintaining the highest standards of data privacy and security. While we are based in Israel and primarily regulated under Israeli law, we voluntarily align with the principles of the General Data Protection Regulation (GDPR) to uphold best practices in data protection.
Our business operates on a B2B and B2G model, meaning we contract only with regulatory clients and do not process or store personal data of individuals within the EU.
2. Scope of this Policy
This Privacy Policy applies to our software, cybersecurity, and adtech services provided to business and governmental clients. It outlines our approach to data protection, security, and compliance with relevant privacy regulations.
3. Data We Process
As part of our contractual engagements, we may collect and process only business-related information necessary for providing our services. This includes:
    •    Company and business contact details (such as company name, professional email, and role-related data).
    •    Technical and operational data related to the services we provide (e.g., logs for cybersecurity analysis).
    •    Regulatory compliance information, as required under specific contracts with our clients.
We do not collect, store, or process:
    •    Personal data of private individuals in the EU.
    •    Sensitive personal information such as health data, biometric data, or personally identifiable consumer information.

4. Legal Basis for Processing
Since we work strictly with businesses and governmental entities, our legal basis for processing data is:
    •    Contractual necessity – We process business-related data only as required to fulfill agreements with our clients.
    •    Legitimate interests – We use minimal business-related data to improve service delivery, enhance security, and comply with contractual obligations.
5. Data Security & Protection Measures
We prioritize data security by implementing robust safeguards, including:
    •    End-to-end encryption for data transmission.
    •    Access controls and authentication to prevent unauthorized access.
    •    Regular security audits and compliance reviews to ensure best practices.
    •    Data minimization – We collect only the necessary information required for our services.
6. Data Retention & Storage
    •    Business-related data is retained only for the duration of the contract or as legally required.
    •    Logs and security-related records are retained based on compliance obligations and industry standards.
    •    Once data is no longer needed, it is securely deleted or anonymized.
7. International Data Transfers
As an Israel-based company, we may store and process data in Israel or other secure jurisdictions. We ensure that any cross-border data transfer follows strict security protocols and adheres to contractual commitments with our clients.
8. Data Subject Rights (GDPR Considerations)
Even though we do not hold personal data of EU individuals, we recognize the importance of data protection principles. If any business contact requests access, correction, or deletion of their professional data, we will process such requests in compliance with best practices.

9. Third-Party Disclosure
We do not sell, rent, or share business-related data with third parties for commercial purposes. Data may be shared only:
    •    With authorized regulatory bodies, if required by law.
    •    With trusted service providers, strictly for operational support under confidentiality agreements.
10. Contact & Compliance Requests
For inquiries regarding this policy or compliance matters, please contact: finance@ozdav.com