Privacy policy
What this policy covers
This policy explains what personal data this website collects, why, who processes it, how long we keep it, and what you can ask us to do with it. It is written to meet the Protection of Privacy Law, 5741-1981 (including Amendment 13, in force since 14 August 2025) and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.
Who is responsible
The controller of your data is Flexgem Ltd. ("Flexgem"), 5 Sarah St., Modi'in, Israel. For anything in this policy, write to [email protected].
What we collect, and why
1. When you use the contact form
You choose to give us your name, company, phone number and, if you wish, a message. We record the date and time and the fact that you ticked the consent box.
- Purpose: to reply to your enquiry. Nothing else. We do not add you to a mailing list and do not use these details for marketing unless you separately ask us to.
- Is it mandatory? No. You are under no legal obligation to give us any information. If you do not, we simply cannot get back to you.
- Legal basis (GDPR): your consent (Art. 6(1)(a)) and the steps you ask us to take before any contract (Art. 6(1)(b)). You can withdraw consent at any time by writing to us; this does not affect what was done before.
- Where it goes: the form is delivered as an email to Flexgem's mailbox, hosted by Microsoft. No one else receives it.
- How long: 24 months from the day we receive it, after which the message is deleted automatically. If your enquiry becomes a business relationship, the data continues under the agreement we sign with you.
2. When you simply visit
This site is served by Cloudflare, which, like any web host, receives the technical data your browser sends with each request (IP address, browser type, page, time) in order to deliver the pages and protect against abuse, under its privacy policy. We run no analytics, advertising or tracking of any kind.
3. Bot protection on the form
The contact form uses Cloudflare Turnstile to tell people from automated programs. It loads only when you open the form; Cloudflare then receives technical signals from your browser and, when you submit, your IP address, acting as our processor.
Cookies
This site sets no cookies of its own, and today it uses no analytics or marketing cookies. The cookie banner exists because the site is prepared to offer such cookies in future; until we add one, nothing optional is loaded whatever you choose, and we will update this policy and the cookie policy first. Your choice itself is kept in your browser's local storage under the key fg-consent-v1, on your device only; it is never sent to us. The bot check runs in a frame served from Cloudflare's own domain (challenges.cloudflare.com); any cookie Cloudflare sets there is Cloudflare's, technical, stays in that domain and serves only to run the check (Cloudflare lists its cookies in its cookie documentation). We do not enable Turnstile's optional pre-clearance cookie, so nothing from the check is set on flexgem.io. Nothing is used to track you across sites.
Who processes your data
| Processor | What it does | What it receives | Where |
|---|---|---|---|
| Cloudflare, Inc. | Serves the site, runs the bot check | Request data; the form contents in transit | Global network, under Cloudflare's data processing addendum |
| Microsoft Corporation | Hosts our mailbox | The form contents, as an email | Microsoft's data centres, under Microsoft's Data Protection Addendum |
We do not sell personal data and do not share it with anyone else, unless the law requires us to.
Security
The site is served only over HTTPS. The form contents are never written to a database; they exist only as the email described above, in a mailbox protected by multi-factor authentication. We collect the minimum needed to reply to you.
Your rights
Under the Protection of Privacy Law you may ask to see the data we hold about you and to have it corrected or deleted. If you are in the EEA or the UK you additionally have the rights to restrict or object to processing, to data portability, and to withdraw consent. To exercise any of these, email [email protected] from the address you want us to answer to; we will reply within 30 days. You may also complain to the Israeli Privacy Protection Authority or, in the EEA and UK, to your local data protection authority.
Children
This site is meant for businesses and is not directed at children under 18. We do not knowingly collect their data.
Changes
When this policy changes, we update the date at the top and, where the change matters to you, the notice under the contact form as well.