Privacy Policy

This policy is drafted in accordance with the laws of the State of Israel, including the Protection of Privacy Law, 5741-1981, as significantly amended by Amendment No. 13 (which entered into force on August 14, 2025), and the regulations issued thereunder, including the Protection of Privacy Regulations (Data Security), 5777-2017. Where applicable, we also align our practices with the principles of the EU General Data Protection Regulation (GDPR).

The supervisory authority in Israel is the Privacy Protection Authority (PPA)of the Ministry of Justice.

Holy Land VR is the controller of personal information collected through this website. For any privacy-related inquiry, you may contact our privacy officer at privacy@holylandvr.com.

We may collect the following categories of information:

• Identification & contact data: name, email address, phone number, organization name, and country, submitted via our contact or booking forms.
• Communication content: the messages and requests you send us.
• Payment data: when you purchase a service, payment is processed by a PCI-DSS compliant third-party processor. We do not store full card numbers on our servers.
• Technical data: IP address, browser type, device identifiers, language preferences, accessibility settings, pages visited, and timestamps.
• Cookies & similar technologies: see Section 8.

Providing personal information to us is voluntary; however, certain services cannot be delivered without it (e.g., responding to a booking request).

We process personal data for the following purposes:

• To respond to inquiries and provide the services you request (contractual necessity).
• To process payments and issue receipts/invoices (contractual & legal obligation).
• To improve our website, content, and accessibility features (legitimate interest).
• To comply with legal obligations under Israeli law, including tax and consumer law.
• With your consent, to send service updates or marketing communications — you may withdraw consent at any time.

We share personal data only with:

• Service providers acting as processors on our behalf (hosting, email delivery, analytics, payment processing), bound by written agreements and data-security obligations.
• Competent authorities, when required by Israeli law, court order, or to defend our legal rights.
• Successors in the event of a merger, acquisition, or asset transfer, subject to the same protections.

We do not sell your personal information.

Some of our service providers may be located outside of Israel. Such transfers are carried out in compliance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, and rely on lawful transfer mechanisms (such as adequacy decisions or contractual safeguards equivalent to those required under Israeli law).

We implement organizational and technical security measures appropriate to the sensitivity of the data and the risk level of our database, as required by the Protection of Privacy Regulations (Data Security), 5777-2017. Measures include encryption in transit (TLS), access controls, logging, least-privilege principles, and periodic risk reviews.

In the event of a security incident materially affecting your personal data, we will notify the Privacy Protection Authority and, where required, affected individuals, in accordance with applicable Israeli law.

We use strictly necessary cookies to operate the site and remember your preferences (such as language and accessibility settings). With your consent, we may also use analytics cookies to understand how the site is used. You can control cookies through your browser settings. Disabling cookies may impact site functionality.

We retain personal data only for as long as necessary for the purposes set out above, or as required by Israeli law (e.g., accounting records under the Income Tax Ordinance must be retained for at least 7 years). When data is no longer needed, it is deleted or anonymized.

Under the Israeli Protection of Privacy Law (as amended in 2025), you have the right to:

• Access the personal information we hold about you (Section 13).
• Correct or delete inaccurate, incomplete, unclear, or outdated information (Section 14).
• Object to direct-marketing communications and withdraw consent at any time.
• Be informed about the database, its purposes, and the recipients of the data.
• Lodge a complaint with the Israeli Privacy Protection Authority.

To exercise any of these rights, contact us at privacy@holylandvr.com. We will respond within the timeframes required by law.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. If you believe a minor has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in law or in our practices. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated through the website.

Questions, requests, or complaints regarding this Privacy Policy or your personal data can be sent to:

• Privacy Officer: privacy@holylandvr.com
• General contact: contact@holylandvr.com

Please write your email in English so we can fully understand your request.