Draft – pending legal reviewThis text is a draft and has not yet been reviewed by legal counsel.
Privacy policy
Last updated:
This policy explains how TailorPath ("we", "us") handles personal information collected through this website, tailor-path.com. It does not cover the TailorPath platform itself, where we process information on behalf of the organisations that use it under separate agreements.
Who is responsible for your information
The controller of personal information collected through this website is TailorPath Ltd, an Israeli company (company number 517109104), of 70 Bnei Binyamin Street, Netanya 4202008, Israel. You can contact us about privacy at daniela@tailor-path.com or yochai@tailor-path.com.
What we collect
We collect only what you choose to send us:
- Demo requests: your name, work email, organisation and role.
- Investor deck requests: your name, firm, email and, if you add one, a short note of up to 500 characters.
- Emails you send us: the content of your message and your contact details.
Providing this information is voluntary and you are under no legal obligation to provide it, but without it we can't reply to your request.
Please don't include patient or health information in any form or message. The website is not designed to receive it, and we delete such information if it reaches us.
When you visit the website, our hosting provider processes technical data such as your IP address and browser type to deliver pages and protect the service. To limit abuse of the forms, we keep a salted, one-way hash of the sending IP address for a short time; we do not store the IP address itself.
The website uses no analytics, no advertising tools and no non-essential cookies.
Why we use it and on what legal basis
- To reply to your request, arrange a demo or send the investor deck. Under the GDPR, the basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
- To keep the website and forms secure. The basis is our legitimate interest in protecting the service.
We do not use your information for automated decision-making or profiling, and we do not send marketing without your consent.
How long we keep it
Form records are deleted automatically after 180 days. The email notification sent to our team is kept in our Microsoft 365 mailbox under our email retention policy. If we start working together, we keep the contact details we need for that relationship for as long as it lasts. Abuse-prevention hashes expire within hours.
Who processes it for us
We use a small number of service providers, each bound by a data processing agreement:
- Google (Firebase and Google Cloud): Firebase Hosting serves the website files from its global content delivery network; the form service and the form database run in the European Union (Cloud Functions in europe-west1 and an EU Firestore location).
- Microsoft (Microsoft 365): email, used to deliver your request to our team and to reply to you.
We do not sell, rent or share your personal information with anyone else, except where the law requires it.
International transfers
Our team is based in Israel, which the European Commission recognises as providing an adequate level of data protection. Where a service provider processes data outside the European Economic Area or Israel, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights (European Union and United Kingdom)
Under the GDPR and the UK GDPR, you can ask to access, correct or delete your personal information, to restrict or object to its use, and to receive it in a portable format. You can also complain to your local data protection authority.
Your rights (Israel)
Under the Israeli Protection of Privacy Law, 5741-1981, as amended including by Amendment 13, you can ask to review the information we hold about you and to have it corrected or deleted. You can also contact the Privacy Protection Authority.
Notice for United States residents
In the last 12 months we have collected identifiers (name, email address) and professional information (organisation, firm, role) from the forms on this website, for the purposes described above. We do not sell or share personal information, as those terms are defined in US state privacy laws such as the California Consumer Privacy Act, and we do not use or disclose sensitive personal information. Depending on where you live, you can ask to know, correct or delete the personal information we hold about you, and we will not discriminate against you for doing so.
Children
This website is meant for professionals and organisations. It is not directed at children, and we do not knowingly collect information from them.
Security
The website is static and served over encrypted connections with strict security headers. Form data is stored in a database that the public cannot access, and only our team receives it.
Changes to this policy
We will post any changes on this page and update the date at the top.
Contact us
To exercise your rights or ask about this policy, email daniela@tailor-path.com or yochai@tailor-path.com. We may need to confirm your identity before acting on a request.
See TailorPath with your own programme
A 30-minute demo on realistic sample data, or a scoped paid pilot for one ward, clinic or school. We reply within one business day.
Please don't include patient or health information in this form.