Privacy policy

Updated: 26 October 2026

This document explains what we collect, why, who it goes to and how long we keep it. We have tried to write it in readable English rather than in lawyer's English.

VISERR is pre-launch. This policy describes the position today. If we change it, we will update the date above.

Who is responsible for the data

Viser Reviews (VISERR), a company being incorporated in Israel, is the data owner and is responsible for it. Full registration details, including registration number and address, will be published here once registration completes.

For any privacy question, or to request access, correction or deletion: privacy@viserr.com.

Giving us your details is voluntary

You are not obliged to give us anything. Completing the reservation form is entirely voluntary.

What happens if you do not: without a name and a way to reach you, we cannot come back to you, prepare a design proposal or send a quote. There is no other consequence.

What we collect in the reservation form

Business name, contact name, email, phone: So we can come back to you and prepare a proposal. The email and contact name are the fields without which we have no way to reply.
Business website: Optional. To understand your brand style before the design proposal.
Requested destination and its link: So we know where the stand should point and can set it up when you start.
Quantity, design direction, brand colours, logo file, notes: Optional. So the quote and the design proposal are accurate.
utm_source, utm_medium, utm_campaign: Marketing source markers from the page address, if you arrived via a tagged link. They tell us which channel you came from; they do not identify you personally.
The consent wording, its version and the time it was ticked: We store the exact wording that was shown to you and the timestamp at which you ticked it. This is required so we can show precisely what you agreed to, under section 30A of the Communications Law.

What we collect when someone taps a stand

This is the part we are strictest about. When a stand is used, our redirect records that the link was opened, and nothing more.

The time it was opened.
Which stand, and which business it belongs to.
Which route: NFC or QR.
Operating system at a coarse level only (iOS, Android, other).
Country, at country level only.
Marketing source markers from the link, if any were present.
A flag if the request was identified as a bot.

What we deliberately do not store: IP addresses, not even hashed ones. Full User-Agent strings. Cookies. Device or advertising identifiers. Precise location. We do not have a database of who tapped; we have a count of link opens.
Why we gave up on IP: A salted hash of an IP address is not anonymous. The IPv4 address space can be brute-forced quickly, which makes it pseudonymous personal data. Israel has no legitimate-interests basis as the EU does, and keeping it would turn the redirect into systematic monitoring and force consent onto the path. Not collecting it is both simpler and more correct.

Who the data is shared with

We do not sell or rent data to anyone, under any circumstances.

Cloudflare, Inc.: Hosts the website, the redirect service and the database. Data is processed on Cloudflare servers, including outside Israel.
Email provider: To send and receive our correspondence with you.
Manufacturing and print suppliers: They receive only the design files needed to manufacture, never the contact list.
Authorities: If required by a court order or by law. We will tell you if that happens, unless the law forbids us from doing so.

Transfers outside Israel

Our providers, principally Cloudflare, process data outside Israel as well. We contract with them on terms that include data-protection commitments, and we keep the data that crosses to a minimum.

How long we keep things

An enquiry that did not become a sale: Up to 24 months from the enquiry, then deleted. If you ask for deletion sooner, we delete it immediately.
A business customer: Contact, contract and billing records are kept for 7 years after the relationship ends, as required by Israeli tax and accounting rules.
Link-open records: Kept for as long as the stand is active, so you can see a trend over time. They do not identify individuals.
Consent records: Kept while the consent is in force and, after withdrawal, for the limitation period, as evidence that consent was lawfully given.

Cookies and tracking tools

This site has no advertising or analytics cookies, no social-network pixels and no Google Analytics. That is also why there is no consent banner here, because there is nothing to consent to.

Worth distinguishing: information you knowingly typed into a form is one thing. Information gathered in the background is another, and on this site there is almost none of the second kind.

Your rights

To get in touch: privacy@viserr.com. We respond within 30 days.

To see the information we hold about you.
To correct anything inaccurate or out of date.
To request deletion, subject to retention duties in law.
To withdraw marketing consent at any time, without affecting how your request is handled.
To complain to the Israeli Privacy Protection Authority if you believe we have acted unlawfully.

Data security

Access is limited to the people who need it for their work. Traffic is encrypted over HTTPS. Logo files are held in private storage with no public address. A serious security event will be reported to the Privacy Protection Authority immediately, as the Data Security Regulations require.