Privacy Policy
Last updated: 15 October 2026
This policy explains what personal information Holy Land with Avi collects when you visit this website or book a tour or transfer with us, why, who we share it with, how long we keep it, and your rights. It describes what we actually do, and nothing more.
At a glance
- We collect only what we need to take your booking: your name, your email address and, if you choose, your phone number.
- Card payments are handled by Stripe. We never see or store your full card number.
- No analytics, advertising or tracking cookies, and we never sell your information.
- You can ask to see, correct or delete your information at any time.
Who is responsible for your information
Holy Land with Avi, the private touring business of Avi Mashiach, a tour guide licensed by the Israel Ministry of Tourism, is responsible for your personal information (the "controller"). Our business name, registration number and address are on our Contact Details page.
For any question or request about your information, contact Avi by WhatsApp or phone on +972 58-664-9494, or by email at the address on our Contact Details page.
What we collect
When you book on this website:
- your first name (required) and last name (optional);
- your email address (required);
- your phone number (optional);
- the tour or transfer you choose, its date and start time, the number of travellers and, for a transfer, the number of suitcases.
You don't have to give us any of this by law. But we need your name and email address to take and manage your booking, so without them we can't accept it. If you leave out your phone number, we contact you by email.
When you pay: payment takes place on a secure page run by Stripe, our payment provider. Stripe receives your card details directly. We give Stripe your email address, the amount and a booking reference, and Stripe tells us whether the payment succeeded and how much was paid.
What you choose to tell us: after you book, you may send us your pickup address, your flight number, the ages of children travelling with you, or a health condition, mobility need or allergy we should plan around. Please share only what we need to plan your day. Health information is especially sensitive: we use it only to plan your tour safely, and only because you chose to give it to us.
When you contact us: if you message us on WhatsApp, call us or email us, we receive your message and your contact details.
When you browse: see "Cookies and browsing" below.
How we use your information, and why
- To take, manage and deliver your booking, including processing your payment and any refund, and contacting you about your tour or transfer (for example to confirm the pickup time and place, or to tell you about a change). We need to, to provide what you booked.
- To send you a reminder before your tour, and a thank-you note afterwards that may invite you to leave a review. This is in our legitimate interest in looking after our guests, and you can ask us to stop at any time.
- To follow up a booking you started but didn't pay for. We may contact you about it once. This is in our legitimate interest in completing bookings, and the details of unpaid bookings are deleted after about 37 days.
- To answer your messages, questions and complaints. To provide our service, and in our legitimate interest in looking after our guests.
- To keep the records the law requires, for example for tax and accounting.
- To keep the website and our booking system secure and prevent misuse. This is in our legitimate interest in running a safe service.
- To plan around a health condition, mobility need or allergy you tell us about, with your consent, which you can withdraw at any time.
Marketing: we don't send you marketing emails or newsletters unless you have agreed to receive them. Booking a tour doesn't sign you up. If you agree, every marketing email has an unsubscribe link, and you can withdraw your agreement at any time.
We don't make any decisions about you by automated means alone, and we don't use your information to build a profile of you. Like other payment providers, Stripe automatically screens card payments for fraud as part of processing them.
Who we share it with
We never sell your information or share it for anyone else's marketing. We share it only as needed:
- Our booking system provider, which runs this website and stores booking information on our behalf. The booking database is hosted by Supabase in Frankfurt, Germany (European Union), and the website is hosted by Vercel.
- Stripe, which processes your payment and any refund.
- An email delivery service, to send booking emails to you, and booking alerts to us.
- Another licensed guide or a driver, only if one runs your tour or transfer in Avi's place. We then share only what they need, such as your name, phone number and pickup details.
- Our accountant or bookkeeper, for the business records the law requires.
- Authorities, only when the law requires it.
Photos and links: some photos on this website are loaded from Unsplash, a free photo library. When your browser loads them, Unsplash receives your IP address and browser details, as any service does when you load content from it. Links to WhatsApp, Google Maps and Google reviews take you to those services, which handle your information under their own privacy policies.
Storage and transfers abroad
Your booking information is stored in the European Union. The European Union recognises Israel as protecting personal information to an adequate standard, and Israeli law allows transfers to the European Union. Some of our providers, such as Stripe and Vercel, may also process information in other countries, including the United States. Where they do, the transfer is protected by safeguards recognised by law, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Bookings that weren't paid for: deleted automatically after about 37 days.
- Paid bookings: kept as part of our business records for as long as Israeli tax and accounting law requires.
- Messages: kept for as long as we need them to deal with your booking or your question.
- Technical records: our own website statistics record no IP address or visitor identifier, and are deleted after 30 days. Our hosting providers keep standard security logs, which can include IP addresses, for limited periods.
Cookies and browsing
This website sets only two small cookies, and only if you change a setting: one remembers your language, the other your display currency, each for one year. There are no analytics, advertising or tracking cookies. Our website statistics count page views and bookings without recording your IP address or creating an identifier for you.
How we protect it
Information travels to and from this website over encrypted connections (HTTPS) and is stored encrypted by our providers. Access to booking information is limited to Avi and anyone who helps him run the business, and to the provider of our booking system where needed to run and support it.
Your rights
You have the right to:
- see the personal information we hold about you, yourself or through someone you authorise in writing, in Hebrew, Arabic or English;
- ask us to correct or complete it, or to delete it if it is wrong, incomplete, unclear or out of date;
- ask us to delete your information, or to stop using it for a particular purpose, such as marketing;
- withdraw any consent you gave, at any time;
- if you live in the European Union or the United Kingdom, also: receive your information in a portable form, and object to or restrict how we use it.
To use any of these rights, contact us as described in "Who is responsible for your information" above. We may ask you to confirm your identity first. We reply within 21 days. If we can't do what you ask, for example because the law requires us to keep a record, we tell you why.
If you're unhappy with how we handle your information, please tell us first and we'll try to put it right. You can also complain to Israel's Privacy Protection Authority or, if you live in the European Union or the United Kingdom, to the data protection authority where you live.
Children
Bookings are made by adults. We don't knowingly collect information from children, except their ages when a parent or guardian gives them to us to plan the tour.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.

