Privacy policy
Last updated: 29 September 2026
This site belongs to INNO LTD. This page says what is collected here, why, who it is shared with, how long it is kept and what your rights are. It is written from what the site actually does, not from a template. Continuing to browse the site means you agree to what is described here.
What is collected
What you give us yourself. In the contact form: name, phone, email, company, website and the annual media budget you picked. In the job application form: name, phone, email, LinkedIn, a free-text message and your CV file. If you write to us by email or WhatsApp, what you wrote there too.
What is collected automatically. As on every site, the server logs your IP address, browser type, the pages you requested and the page you came from. With every form you send, the IP address it was sent from, the browser string, the page it was sent from, your screen size, browser language and time zone are kept as well. The IP and browser are what we use to spot automated submissions and to rate-limit; the rest credits the right campaign.
Which campaign brought you. If you arrived through a link with campaign parameters (utm, gclid, fbclid and the like), they are kept in your browser with the landing page and the referrer, first touch and last touch, for 30 days, and attached to a form if you send one. That is how an enquiry today is credited to the ad that brought you a week ago.
Cookies and similar technologies. Exactly what is stored in your browser, and why, is set out in the next section.
Cookies and what your browser keeps
The notice you see on your first visit is not a question, and it has no consent buttons. Continuing to browse the site means you agree to the cookies and measurement described here, and from the moment the notice is shown the measurement and advertising tags are allowed to run. The notice closes when you press its × or after one screen of scrolling, and it does not come back. If you do not agree, block cookies in your browser or stop browsing: see "How to opt out" below.
What is stored in your browser:
| Name | Purpose | What it holds | Kept for |
|---|---|---|---|
inno_notice |
Necessary | That you have seen the notice, so it is not shown again on every page. | Until you clear your browser |
inno_consent |
Necessary | That agreement was given by continuing to browse, so the measurement tags know they are allowed on your next visit too. | Until you clear your browser |
inno_attr |
Measurement | Which campaign you arrived from (utm, gclid, fbclid and the like), the landing page and the referrer: first touch and last touch. Sent only if you submit a form. | 30 days |
inno_thanks_name |
Necessary | The first name you typed, so the thank-you page can use it. | Until the tab closes |
_ga, _ga_* |
Analytics | A random Google Analytics 4 id that tells visitors apart and counts visits and pages. Not a name and not an email. | Up to 2 years |
_gcl_au, _gcl_aw |
Advertising | Google Ads: which ad brought you, to measure conversions and show you relevant ads. | Up to 90 days |
_fbp, _fbc |
Advertising | The Meta pixel: a browser id and the click id from Facebook or Instagram, for the same purposes. | Up to 90 days |
Google and Meta cookies are written only if a Google Tag Manager container is configured on the site, and only after the notice has been shown. Their names and lifetimes are set by Google and Meta and may change.
The site's page cache (WP Rocket) may add technical cookies of its own so that each page is served correctly to the same browser. They hold nothing that identifies you.
The accessibility widget (UserWay) keeps the settings you choose in it, such as contrast or text size, in your browser so they are there on your next visit. It loads from UserWay's servers and runs under their privacy policy.
What we use it for
To run the site and keep it safe: serve pages, stop spam and automated submissions, diagnose faults.
To get back to you about an enquiry you left, and to handle job applications.
To measure what works: which campaign produced an enquiry, which pages are read and where visitors stop. That is our trade, and we hold ourselves to the same measure.
To tailor content and ads. Someone who visited the site may see our ads on the Google network or on Meta, and the pixel data is used to build audiences and measure those ads.
To contact you with offers only if you left us your details, and always with a simple way out.
For legal reasons: to meet the obligations the law puts on us, and to defend our rights if a dispute arises.
Who it is shared with
We do not sell data and we do not trade in it. It goes only to those who help us run the site and do our work, and only for that:
Our CRM: every enquiry and application is sent to it automatically, with the fields you filled in and the campaign data. A contact enquiry goes with the IP and browser. A job application goes without them: they stay here.
Our host and mail provider: the site is hosted in Israel, and the messages pass through them on the way to us.
Google: Tag Manager loads our measurement and advertising tags, Google Analytics 4 and Google Ads. They receive the visit data: pages, source, device and a random id.
Meta: the Facebook and Instagram pixel loads through the same container, to measure ads and build audiences.
Cloudflare R2: the showreel videos on this site are served from there, so your IP address reaches them when a video loads.
Adobe Fonts and Google Fonts: the typefaces load from their servers, so your IP address reaches them when the page loads. That happens on every site using these fonts.
UserWay: the accessibility widget loads from their servers.
Professional advisers: lawyers and accountants, when needed, for example in handling a legal claim.
Authorities: if the law requires it of us, or to protect our rights, our visitors or the public.
Transfers outside Israel
The site, the enquiries and the applications are stored in Israel. The Google, Meta, Adobe, Cloudflare and UserWay tools are US services, so the browsing data they receive is also processed outside Israel, mainly in the United States. Our CRM may also be hosted in a cloud outside Israel.
Such a transfer is made under the Israeli Privacy Protection Regulations on transferring data abroad, and each of these providers is bound by its terms to protect the data and use it only for the service.
Security
The site is served over HTTPS, so what you send is encrypted on the way.
CVs are kept in a folder closed to the web and opened only through the admin or a signed link that expires after 30 days. The call to the CRM is signed, so the system knows it came from us.
The forms are rate-limited by IP address, and automated submissions are blocked. Access to enquiries and applications is limited to the team members who need them for their work.
No security is perfect, which is why we also collect only what is needed.
How long it is kept
Enquiries and applications are kept for as long as they are relevant to the business relationship or to hiring, and you can ask us to delete them sooner. CVs are kept for recruiting only.
The campaign note in your browser deletes itself after 30 days. The notice and agreement flags stay until you clear this site's data in your browser. The lifetimes of the Google and Meta cookies are in the table above, and our event data in Google Analytics is kept for 14 months at most.
Server logs are kept by the hosting provider for a short period, for security and operations.
Your rights
Under Israel's Privacy Protection Law you may see the information held about you, ask to correct or delete it, and object to direct marketing. You do not have to give us any information, but without contact details we cannot get back to you.
To exercise a right, write to us: info@inno.co.il · +972 (0) 51 5858977. We will answer within the time the law sets, and we may first ask you to confirm you are who you say. You can also turn to the Privacy Protection Authority.
How to opt out
In your browser: you can block or delete cookies in the browser settings. Clearing this site's data (storage and cookies) deletes the campaign note, resets the agreement and brings the notice back.
Google: in Google's My Ad Center you can turn off ad personalisation, and the Google Analytics opt-out add-on stops the measurement in your browser.
Meta: in Facebook's ad preferences you can set how Meta uses your activity off Facebook.
On a phone or tablet: the device settings let you limit ad tracking across all apps and sites.
Marketing messages: every marketing message we send has a way out, and you can simply write to us.
Changes
If we change something described here we will update this page, and the date above with it.
Contact
INNO LTD. For any question about this policy or about your information: info@inno.co.il · +972 (0) 51 5858977.