Privacy policy

1. General

This policy explains what information is collected when you browse the SpectroForensicLab website ("SFL", "we") or contact us, what it is used for, and what your rights are. It applies to this website and to enquiries made through it.

The controller is Gili Karako · SpectroForensicLab. For privacy matters: gili.karako@gmail.com.

We act in accordance with Israel's Protection of Privacy Law, 5741-1981, and the regulations made under it, and, for visitors from the European Union where it applies, the EU General Data Protection Regulation (GDPR).

2. What we collect

The contact form. Your full name, phone number and the details of your request, and if you choose, your email, company, the kind of enquirer you are, a hearing or filing date and an urgency flag. They are sent straight to our email inbox through a Google service (Google Apps Script and Gmail), and are not stored on the site.
Information you give us in other ways. When you contact us by email, phone or WhatsApp: your name, contact details, the content of your enquiry, and any information or material you choose to share.
Technical information. As with any website, the hosting servers log basic technical information (IP address, browser type, the page requested and the time) to run and secure the site.
No analytics. The site does not currently use analytics tools or tracking cookies.
Preferences stored in your browser. Your language, accessibility settings and cookie choice are kept in your browser's local storage and are never sent to us.

We don't ask for sensitive information on this site; please don't include more in the form than is needed to arrange a call. You are under no legal obligation to give us information, but without contact details we can't get back to you.

3. How we use it

To answer enquiries, arrange calls and provide our services.
To run and secure the site and prevent misuse.
To meet our legal obligations.

We don't sell personal information, and we don't use it for marketing without your consent.

4. Case materials

Videos, files and documents sent to us as part of an engagement are handled in confidence and under the engagement agreement: they are stored securely, access is limited to whoever handles the case, and they are used only for the examination commissioned. We never use case materials to train models or for any other purpose.

5. Legal basis for processing (EU visitors)

Steps before entering a contract, and performing it: handling enquiries and providing services.
Legitimate interests: securing the site and preventing misuse.
Legal obligation: keeping records as the law requires.

Information may be passed only to:

The site's hosting provider, to run it.
Google, which delivers the contact form to our email inbox.
WhatsApp (Meta), if you choose to message us there. The WhatsApp button on the site is only a link, and passes on nothing until you click it.
The email and communication providers we use to manage enquiries.
Competent authorities or a court, where the law requires it.

7. Transfers outside Israel

Some service providers process information on servers outside Israel, including in the United States. Such transfers are made in accordance with the law and, for information about EU visitors, on the basis of the EU-U.S. Data Privacy Framework or standard contractual clauses.

8. How long we keep it

Enquiries: for as long as needed to handle the enquiry and the case, then for the period required by law or to defend against claims.
Server logs: according to the hosting provider's policy.

9. Security

The site is served over an encrypted connection (HTTPS), and access to information is limited to those who need it for their work. We take reasonable, recognised measures to protect information, although no method is completely secure.

10. Your rights

Under Israel's Protection of Privacy Law you may review the information held about you and ask for information that is inaccurate, incomplete, unclear or out of date to be corrected or deleted. Visitors from the EU may also ask for processing to be restricted, request data portability, object to processing, and withdraw consent at any time. Withdrawing consent does not affect processing carried out before it.

Requests: gili.karako@gmail.com. We'll reply within 30 days.

If you're unhappy with how we handled a request, you can contact Israel's Privacy Protection Authority at the Ministry of Justice. EU visitors may also contact the data protection authority in their country.

11. Children

This site is not aimed at children. A minor who wishes to contact us should do so through a parent or guardian.

12. Changes and contact

We may update this policy from time to time. The current version will be published on this page with the date it was updated. Cookies and local storage are covered in the cookie policy.

Privacy questions: gili.karako@gmail.com.