Privacy Policy

Privacy Policy

Chapter A – General

1. Oren Mizrach Insurance Company Ltd., C.I.D. 514359199 (the “Company"), respects the privacy of its customers and users of its digital services (the “User”).

The purpose of this Privacy Policy is to describe the information the Company collects about you and the uses made of such information when you access and use all of the Company’s digital assets and services, including its website, mobile apps, and other online services such as WhatsApp (hereinafter, collectively: the “Digital Services” or the “Services”). This Privacy Policy constitutes an integral part of the Terms of Use, which we encourage you to read carefully as well. Any terms and definitions used in this Privacy Policy shall have the same meaning ascribed to them in the Terms of Use, unless deemed otherwise by context.

2. The Company may update this Privacy Policy from time to time, to reflect technological, business, legal, or regulatory changes. In such cases, the updated policy will be published within the Digital Services. Continued use of the Digital Services after such updates constitutes acceptance of the revised policy. Accordingly, users are encouraged to review this Privacy Policy from time to time.
3. The information set forth below is intended to help you understand the Company’s data security and privacy protection practices, recognizing that safeguarding personal data and maintaining information confidentiality are fundamental to the relationship between you and the Company.

Chapter B – Collection of Information and Its Use

4. The Company receives and/or collects information from Users and uses it as follows: information provided by you and entered through the Digital Services, and/or information received about the User as part of or following the use of the Digital Services, for the purposes of improving, enhancing, and/or modifying the Services, their quality, and the content offered therein; updating and contacting the User in order to respond to inquiries, improve and complete services requested or of interest to the User; and conducting satisfaction surveys regarding promotions and/or services offered by the Company, its representatives, and/or third parties with whom the Company maintains business collaborations (subject to the User’s consent). For additional details regarding the use of information, see Section 13 of this Privacy Policy.
5. The Company may use AI-based processes, including but not limited to Generative AI, Digital and Voice AI Agents, advanced analytics tools, and machine learning (ML), for the following purposes: customer management, service, and communications; operation and handling of all customer matters within the group related to insurance services, wealth management, and financial services; marketing, statistical, actuarial, and business needs; and other ancillary services, subject to applicable law. The use of artificial intelligence may include optimizing and improving processes and products within the Company or the group, generating insights based on variables of existing and potential customers (some of which may not directly identify the data subject), and making decisions related to onboarding terms and services provided by the Company or the group throughout the customer life-cycle. This includes decisions relating to pricing, underwriting, fraud detection, claims handling, and business needs, including assessment of the likelihood of insured events or insurance claims.
6. Without derogating from the foregoing, subject to the User providing contact details and consenting to receive direct marketing and promotional messages, including “advertisements” as defined under the Communications Law (Telecommunications and Broadcasting), 5742-1982, the Company may periodically send the User information regarding its services, as well as marketing and promotional content, via email and/or other contact methods provided by the User. The User may withdraw consent at any time and stop receiving such messages (in whole or in part) by clicking the “unsubscribe” link appearing at the bottom of the message or by replying via the same communication channel with the word “REMOVE.” The Company may also contact you using the contact details you provided, including when you express interest in the Company’s services (even if registration was not completed), or when you request additional information.

General Information About Visitors to the Digital Services

7. The Company uses automated tools to analyze usage of the Services and improve user experience. These tools collect information about the User and their interaction with the Services. This information includes, among other things, the number of visitors to the Services; details of the User’s internet service provider; the User’s Internet Protocol (IP) address; the location of the device used to access the Services; the source from which the User accessed the Services; the times, duration, and manner of use of the Services; the type of browser used; and additional information indicating how the Services are used, including consent to the use of such information for the Company’s purposes, improving the browsing experience, conducting internal reviews, and similar activities. The general information is collected on an aggregate and non-personally identifiable basis, i.e., it is impossible to attribute any identifying information and any personal details to said information and vice versa. The general information relating to visitors to the Services is shared among the Company’s various business units for the purpose of improving the content of the Services, their quality, and the standard of the services provided through them.
8. The Services may also use "Cookies," including Google Analytics' Cookie files, for their ongoing and proper operation. This includes collecting statistical data regarding use of the Services; verification of details; customization of the Services to the User’s personal preferences; profiling products suitable for the User; offering and displaying tailored advertisements and customized information based on the User’s products within the Company’s various services and, where applicable, during browsing of other services; facilitating use of the Services; and for information security purposes. Cookies are text files created when using the Services, provided that the User’s device settings allow such use. Some cookies expire when the User closes the Services, while others may be stored on the device’s memory. If the User does not wish to allow the use of cookies, they may do so by changing their browser settings. However, disabling cookies may result in the User being unable to use certain Services or features available through the Services.

Disclosure of Information to Third Parties

9. The Company takes reasonable and customary measures to protect personal data and prevent its disclosure to third parties, except in the following circumstances:

At the User’s request or with the User’s consent;

As part of collaborations with business partners;

Disclosure of aggregated, statistical data to third parties, including advertisers, pursuant to this Privacy Policy; It is hereby clarified that this aggregated statistical information shall not personally identify the user.

In any case where the User violates the Terms of Use, including the provisions of this Privacy Policy, and/or in cases where the User and/or anyone acting on the User’s behalf has performed or attempted to perform actions contrary to the Terms of Use, including this Privacy Policy, and/or any applicable law;

Pursuant to a court order and/or lawful request for information disclosure by a competent authority;

In the event of any dispute and/or claim and/or demand and/or lawsuit and/or legal proceedings conducted between the User and/or anyone acting on the User’s behalf and the Company and/or anyone acting on its behalf and/or any third party;

In any case where the Company deems that disclosure of the information is necessary to prevent serious harm to the property and/or physical safety of the Company and/or other users and/or third parties, or to prevent any other serious harm, at the Company’s sole discretion;

In the event that the Company transfers and/or assigns its activities and/or its rights and obligations toward the User to any third party, provided that such third party undertakes to comply with the provisions set forth in this Privacy Policy and with applicable law. It is hereby clarified that nothing in the foregoing shall derogate from the Company’s right to transfer to third parties non-personal information that does not directly identify the User by name or by personal identifying details.

Personal Information

10. The Company collects personal information from visitors to the Digital Services, such as name, address, phone number, email address, and similar details, including when:

Visitors to the services voluntarily choose and consent to provide such information to the Company;

The information is provided based on consent under this Privacy Policy;

The Company conducts online surveys subject to the User’s explicit opt-in consent.

11. The Company uses the personal information collected by it to provide requested services and/or respond to visitors' requests.

12. All personal data provided by you voluntarily and consensually is considered an asset of the Company and will be protected in accordance with the Protection of Privacy Law, 5741-1981, and other applicable laws. Personal information that the Company collected shall not be transferred or used beyond the scope of the Services except as permitted by law and Section 9 of this Privacy Policy. The Company takes all reasonable measures to prevent unauthorized access.

13. Without derogating from the generality of the foregoing, you hereby acknowledge that all information you provided or that is collected about you through the Digital Services, as detailed above, will be stored in the Company’s databases and in the databases of the Group Companies* (as defined below) and/or shared among the Group Companies, and processed, including by means of artificial intelligence** (as defined below), by the Company and any of the Group Companies for purposes of customer management, service delivery, and customer communications; operation and handling of all customer matters within the Group in the areas of insurance services, wealth management, and financial services; marketing, statistical, actuarial, and business purposes; direct marketing and direct marketing services; and/or other ancillary services, all subject to applicable law. I hereby acknowledge that I am under no legal obligation to provide the information; however, without providing such information, the Company will not be able to provide all or part of the services described. I further acknowledge that I may contact the Company or any of the Group Companies at any time to request access to the information held about me and to request that it be corrected if it is inaccurate or incomplete (you may read more about your rights in Section 19 of this Privacy Policy).Clarification Regarding Removal of Information from the Agency’s Database

A request to remove details from the database shall materially affect our ability to provide you with ongoing services, including:

• Handling Insurance Claims – Without access to your details, we will not be able to verify your eligibility or support you through the claim process.
• Ongoing Updates – You will not be able to receive important information from us about policy renewal, changes in coverage, or regulatory updates.
• Customer Service – We will not be able to identify you as an existing customer, which may prevent a response to your inquiries.
• Policy Validity – In certain cases, removal of details may lead to termination of Insurance Coverage because it will prevent the agency from contacting you before the end of the policy period, pursuant to the policy terms and regulation.

If you choose to proceed with the removal process, we will carry it out in accordance with applicable law; however, we will require your confirmation that you are aware of the possible consequences. Removal from the database

"The Group" – For purposes of this Privacy Policy, the Group includes Oren Mizrach Insurance Agency Ltd.,

including affiliated companies listed in the following link: Oren Mizrach Agencies

** "Artificial Intelligence" – Processing of information through AI systems as updated from time to time in this Privacy Policy (You may read about the Company's use of Artificial Intelligence in Section 5 of this Privacy Policy).

Information About Registered Users’ Use of the Services

14. Subject to your consent to this Privacy Policy, the Company collects information relating to the manner in which registered users use the Services (such as the number of visits to each page or screen within the Services, the duration of visits to a particular page, and similar data), in order to identify the areas of interest of users who have registered to receive services through the Services. The Company will use this information to inform registered users about products and services that may be of interest to them and to members of their families.

15. If you have registered for the Company’s Services and provided “personal information,” you are entitled to access the information you submitted at any time via the “Update Details” option, for the purpose of reviewing the accuracy, completeness, and reliability of such information. This access is by means of the username and password you received during the registration process.

Information Security and Confidentiality

16. The Company does everything in its power and beyond to protect the confidentiality of information and data provided by users of the services, while taking precautionary measures and using advanced security methods. The user is aware that the Company dedicates resources and takes stringent measures to prevent intrusion into the services and to thwart possible harm to users' privacy, however it cannot prevent this absolutely.

17. Information security measures implemented in the Company’s services are intended to ensure customer identification and the encryption of identification data transmitted during the engagement process. As a general rule, prior to any purchase of a product or receipt of services involving personal information, you will be required to provide personal identification details as a condition for receiving the service.

18. All communications between the customer and the Company’s services are conducted in an encrypted and secure manner, in accordance with stringent requirements. The Company reserves the right to update its various information security measures in line with prevailing internet security practices.

Your Rights and Protection of Your Privacy

19. Pursuant to the Protection of Privacy Law, 5741-1981, you are entitled to review the information held about you in the Company’s databases and to request that such information be corrected if it is inaccurate, incomplete, or not up to date. To exercise your rights, you may contact the Company regarding these matters through the “Public Inquiries” section on the Company’s website.

Precautionary Measures Against Internet Fraud

20. As a large organization, the Company may be a target for fraud attempts by various parties. Accordingly, the Company implements information security measures as described above. However, we recommend browsing the internet in a safe and responsible manner.

General

21. The Company reserves the right to amend and update this Privacy and Data Protection Policy from time to time. Such updates will be published through the Services and shall become binding as of the date of their publication.
22. This Policy is intended to supplement the Terms of Use of the Services and does not derogate from them in any way.
23. Please note that Oren Mizrach’s systems include an automated mechanism for recording and documenting all of your actions or attempts to perform actions, in accordance with applicable law, for the purposes of information security and privacy protection.

Updated on: 07/08/25