Privacy Policy — Comp Master (COMP-SHOP, COMP-PARTS, COMP-MASTER)
Last updated: 19 September 2026
This policy explains what personal information we collect, why we use it, who we share it with and what your rights are. It applies to our three websites, to our chat, to WhatsApp, to messages on Instagram and Facebook Messenger, to phone calls and to our store and lab in Ashdod, and it replaces the websites' previous privacy policies. The policy is addressed to women and men alike.
In brief
- We use information to handle your orders, repairs and inquiries, to issue invoices and to operate the websites.
- We do not sell personal information.
- Advertising is sent only to people who have given explicit consent to it, and you can withdraw that consent at any time.
- On all three websites, Google Analytics runs from the moment you enter the website. Microsoft Clarity (including session recording) and Google's advertising features (ad measurement, remarketing and ad personalization) run only after you agree to them in the cookie notice: with “Accept all” or in the “Customize” window. “No analytics” turns off the analytics tools and Google advertising. You can change your choice at any time via the Cookie settings link at the bottom of the page (section 9).
- When you pay on the website, your credit card details are entered on the payment provider's page and are not stored by us, except for partial details such as the last 4 digits.
- Some of our service providers (for example Google, Microsoft and Meta, as well as cloud work tools and artificial intelligence tools) process information on servers outside Israel (section 8).
- You can ask to access your information, correct it, be removed from mailing lists and have your account deleted: [email protected] or 073-2241747.
Contents
- 1. Who we are and how to contact us
- 2. What this policy covers
- 3. What information we collect
- 4. Why we use the information
- 5. Do you have to provide the information?
- 6. Chat, WhatsApp and phone calls
- 7. Who we share information with
- 8. Transfer of information outside Israel
- 9. Cookies and analytics tools
- 10. Mailings and advertising
- 11. Information security
- 12. How long we keep information
- 13. Your rights and how to exercise them
- 14. Automated decisions
- 15. Minors
- 16. Changes to this policy
- 17. Language
1. Who we are and how to contact us
The websites and services covered by this policy are operated by Comp Master (קומפ מאסטר), a registered partnership (שותפות רשומה) and VAT-registered dealer (עוסק מורשה), No. 558269866 (“Comp Master”, “we” or “us”). Comp Master is the controller (בעל השליטה) of the databases in which the information described here is stored.
- Address: 6 Gei Oni Street, Ashdod
- Phone: 073-2241747
- Email for privacy inquiries: [email protected]
We have not appointed a Privacy Protection Officer (ממונה על הגנת הפרטיות), because the law does not require one for a business of our type. Privacy inquiries are handled through the address and phone number above.
2. What this policy covers
This policy applies to information collected:
- on the compshop.co.il website (COMP-SHOP) — an online store for computers, components and accessories;
- on the comp-parts.co.il website (COMP-PARTS) — spare parts, including for professionals and dealers;
- on the comp-master.co.il website (COMP-MASTER) — a computer repair and service lab;
- in the chat on the websites (chat.comp-master.co.il), which runs on our own server;
- on our WhatsApp Business number (+972-73-224-1747) and on our other business WhatsApp numbers;
- in messages sent to us on Instagram and Facebook Messenger (Meta), which reach our chat system;
- in callback requests from the websites, in phone calls and in email inquiries relating to these services;
- in our store and lab at 6 Gei Oni Street, Ashdod: when you hand in a device for repair, make a purchase or collect an order.
This policy forms part of the websites' terms of use (תקנון). When you use a third-party service directly — for example WhatsApp, YouTube or signing in with a Google or Facebook account — that party's privacy policy also applies to you.
3. What information we collect
The table lists the information by channel. What you must provide and what is optional is explained in section 5.
| Channel | What information | What for |
|---|---|---|
| Orders, checkout and returns (compshop, comp-parts) | First and last name, phone, email, address (city, street, house number, apartment, floor), ID number (ת״ז) / company number (ח״פ) / VAT dealer number (ע״מ), company name, an additional phone number for SMS and for the courier, invoice type (digital or printed), comments, shipping method (including pickup point) and payment method, products and amounts. The IP address, browser type and language are also recorded automatically. Details entered in an order that was not completed are also stored. For a return request: order and product details and the reason for the return. | Processing the order, shipping and delivery, invoicing, service, warranty and returns |
| User account and sign-in (compshop, comp-parts) | Name, email, phone, password (stored hashed, not in plain text), addresses, your mailing preference, wish list and order history; a log of sign-ins and account activity, including IP address. When you sign in with Google or Facebook, we receive your name, email address and account ID from them — not your password. When you sign in with a code, a one-time code is sent to your email. If there is no account with that email address yet, one is created automatically on your first sign-in. If your account has no phone number, we will ask you to add one. On comp-parts, when you sign in, your phone number and email are also checked against our customer management system in order to display your cart. | Managing the account, quick ordering, viewing orders and securing sign-in |
| Contact forms and quote requests (all websites): contact us, product question, quote request, PC build, product not listed on the website | Name, phone, email, company name, subject and content of the inquiry, details of the requested product or computer and budget; in some forms also the device model and serial number, and files you attached. The message we receive includes the sender's IP address. | Responding to the inquiry and preparing a quote |
| Formal price quote (compshop: from a product page, from the cart and from the configurator) | Name, ID number (ת״ז) / company number (ח״פ), phone, email and city, and how you want to receive the document (email, WhatsApp or download). | Generating a price quote document in iCount and sending it to you |
| Callback request (all websites) | Phone number and requested time for the call. The Zadarma widget also stores technical data about the visit, such as the page you came from and the number of pages viewed. | Calling you back |
| Sending a spec from the configurator (compshop, “Build a PC”) | The phone number or email address you asked us to send to, and the spec with a link to it. The message is sent from our WhatsApp Business number or by email, and a copy is kept in the chat system. In addition, we store configurations of signed-in users and a log of actions in the configurator (in some cases with IP address). If you send the spec to another person, make sure they agree to receive it. | Sending the spec to the recipient you chose, saving configurations and improving the configurator |
| PC matching questionnaire (compshop) | Name and phone number, entered by our representative when you ask for help choosing, and your answers about intended use, requirements and budget. The link to the questionnaire is sent to you on WhatsApp. | Matching a computer to your needs and preparing a quote |
| Smart Shopping Advisor (compshop) | The advisor does not ask for your name, phone or email. The answers you choose (category, use, size, connectivity, memory, budget) and your actions in the window are recorded in a separate statistics log, without IP address and without any other identifier. Like any request to the website, these actions are also recorded in the server logs (see “Technical information”). The WhatsApp button opens a pre-filled message with your answers. The message is sent only if you choose to send it, in which case your phone number, profile name and message content reach us via WhatsApp (Meta). | Recommending products from the catalog; general usage statistics |
| Device pickup for repair (comp-master) | Device type, model and description of the fault; name, mobile phone, email, pickup and return address and comments; ID number (ת״ז) / company number (ח״פ) / VAT dealer number (ע״מ) and business name (for the invoice); drop-off and return method. Automatically: IP address and browser details. Later in the process: serial number, diagnostic findings and the price quote. The details you fill in are also saved in your browser so the form can be filled in automatically next time. Do not write passwords in the form. | Coordinating pickup, repair and return of the device, and invoicing |
| Repair status check (comp-master) | Mobile phone number, a 6-digit verification code sent to you on WhatsApp, and IP address. The code is stored hashed, not in plain text, and is valid for a short time. After verification, a temporary sign-in token is stored in your browser. | Verifying that the number is yours and displaying the repair status from the customer management system |
| Order status check (compshop, comp-parts) | The order number and the phone number you gave in the order. | Showing the order status to the person who placed the order |
| Jobs and CVs (comp-master) | In the application form: name, phone, position, city of residence and experience. The form is not stored on the website: it opens a pre-filled WhatsApp message to us, which is sent only if you choose to send it. Also: CVs sent by email, and information provided in a conversation or interview. Application details and CVs are kept for up to 12 months and then deleted, if you were not hired. You can ask us to delete them sooner (section 13). | Reviewing applications and recruitment |
| Dealers and professionals (comp-master, comp-parts) | In the “Dealer sign-up” form (comp-master): name, business name, dealer number / ID number / company number (מספר עוסק / ת״ז / ח״פ), business address, phone numbers (including WhatsApp), email, business type, message and documents you attached (such as a dealer registration certificate (תעודת עוסק), a bank account confirmation (אישור ניהול חשבון) or a certificate of incorporation). On comp-parts: a WhatsApp inquiry about terms for professionals; once approved, the account is assigned to the dealer group. | Checking eligibility for trade terms and dealer prices, and managing the business relationship |
| Payment (all websites) | Amount and payment method. When you pay by credit card on the website, the card details are entered on the payment page of iCount, or of PayPal (on compshop and comp-parts), and not on our website. We receive a transaction confirmation with customer details and partial card details, such as the last 4 digits and the card type. For payment by phone, you give the card details to our representative, who enters them directly on iCount's secure payment page; they are not stored on the website. For bank transfer, Bit or PayBox: the payment confirmation you sent or uploaded. On a personal payment-link page: a one-time verification code by email or SMS. For a personal price quote sent as a link (comp-master): name, phone, city, street and pickup point, and for a formal document also email and ID number (ת״ז) / VAT dealer number (ע״מ) / company number (ח״פ). | Collecting payment, receipts and invoices, fraud prevention |
| Website chat (all websites) | Phone, name (optional), messages and files, email if you provide it, browser and device details, language and the page you wrote from, and your WhatsApp profile photo matched by phone number, if it is visible. Details in section 6. | Responding to the inquiry and follow-up |
| WhatsApp, Instagram, Facebook Messenger and phone calls | Phone number, WhatsApp profile name, messages and files. Your WhatsApp profile photo, if it is visible, is saved in the customer record in the chat system for quick recognition; if there is none, the contact photo from our business contact list in Google. On Instagram and Facebook Messenger: your profile name and username, account ID and profile photo, as Meta passes them on, as well as messages and files. For calls: phone number, time of the call and what you told us during it. Details in section 6. | Responding, updates, sending documents and quick recognition of the sender |
| In the store and lab (6 Gei Oni Street, Ashdod) | Name, phone, email, ID number (ת״ז) / company number (ח״פ) / VAT dealer number (ע״מ) for the invoice, device and fault details, the products you bought or collected, and payment. The representative records the details in our customer management system. | Receiving the device, repairing and returning it, updates on the work, sales and hand-over of orders, invoicing and warranty |
| Technical information (all websites) | IP address, browser and device type, language, pages viewed, the page you came from and time of the visit — in the server logs and in the Cloudflare service. Search terms on the website (on compshop and comp-parts, together with IP address). Cookies and similar identifiers (section 9). On all websites, also usage data in Google Analytics; if you agreed to analytics, also in Microsoft Clarity; and if you agreed to advertising, data for measuring and serving Google ads (section 9). On compshop only, when you are signed in to your account, Google Analytics also receives our internal customer number (the number only, without your name, phone or email). In addition, if you agreed to advertising (“Advertising” or “Accept all”), on the compshop order confirmation page the email address you gave in the order may be sent to Google in encrypted (hashed) form to measure ad effectiveness; without consent to advertising it is not sent (section 9). | Operating and securing the websites, troubleshooting, statistics and improvement |
Information we receive from other sources
- From Google or Facebook, when you sign in with them: name, email and account ID.
- From our customer management system and our business contact list in Google (Google Contacts): when you contact us via chat or WhatsApp, we check your phone number to identify an existing customer and show the representative that customer's orders and repairs.
- Profile photo: from WhatsApp, if it is visible, or, if there is none, from our contact list in Google. It is saved in the customer record in the chat system (section 6).
- From another person who gave us your details — for example someone who sent you a spec from the configurator, or someone who handed in a device for repair and named you as a contact.
- From courier companies (shipment status), and from importers, manufacturers and suppliers (warranty and repair).
Information on devices handed in for repair
During diagnosis and repair, our technicians may be exposed to files and information stored on the device. We access such information only to the extent needed for the diagnosis, the repair or the service you ordered (for example backup and restore). We recommend backing up your data before handing in the device and removing sensitive information from it. If the device or one of its components is sent to the importer or manufacturer for warranty service, the information on it may reach them.
4. Why we use the information
- Doing what you asked for — orders, shipping, repairs, responding to inquiries, price quotes and callbacks.
- Complying with legal obligations — invoices and receipts, bookkeeping and taxes, obligations under the Consumer Protection Law (חוק הגנת הצרכן), and responding to demands from competent authorities.
- Service, warranty and repairs — tracking orders and repairs, handling faults, returns and warranty claims.
- Service messages — order confirmation, delivery coordination by SMS, repair updates, verification codes and sending documents (invoices, receipts, price quotes) by email, SMS or WhatsApp. These are not advertising messages.
- Security and abuse prevention — protection against spam, bots and fraud, limits on attempts, and server logs. This is an essential part of operating the service.
- Statistics and website improvement — Google Analytics on all three websites (you can turn it off in the cookie notice); Microsoft Clarity — only if you agreed to analytics (section 9); aggregate statistics from Cloudflare; the Shopping Advisor's statistics log.
- Advertising and ad measurement — only if you agreed to advertising in the cookie notice (“Accept all”, or “Advertising” in the “Customize” window): measuring the effectiveness of Google Ads, remarketing audiences and personalization of Google ads (section 9). Without such consent, we do not use the information for remarketing, ad personalization or visitor-level conversion measurement.
- Mailings and advertising — only with the explicit consent you gave (section 10).
- Protecting our rights — handling complaints, disputes and claims.
We do not sell personal information. We will not use the information for a purpose unrelated to the purposes above without first informing you and, where the law requires it, obtaining your consent.
5. Do you have to provide the information?
You are under no legal obligation to provide us with personal information, and providing it depends on your wishes and your consent. However, without some of the details we will not be able to provide the service:
- Fields marked as required in a form (for example name, phone and address in an order with delivery) are needed to complete the order or request. Without them we cannot carry it out. Fields not marked as required are optional.
- An ID number (ת״ז) / company number (ח״פ) / VAT dealer number (ע״מ) is requested in order to issue an invoice. If the field is not marked as required, providing it is optional.
- A mobile phone number in an order with delivery is needed to coordinate with the courier and for SMS notifications about the shipment.
- In the store and lab: without your name and phone number, we cannot receive a device for repair, update you on the work or return the device to you.
- A phone number when starting a chat is needed so that we can identify you as a customer and get back to you if you leave the page. If you do not want to give a phone number, you can contact us by email at [email protected].
- The verification code for checking repair status is sent via WhatsApp. If you do not want to use WhatsApp, you can check the status by phone at 073-2241747.
- Technical information, essential cookies and cookies of service components (chat, callback and accessibility) are collected automatically while you use the website. Google Analytics can be turned off, and Microsoft Clarity and Google's advertising features run only if you agree to them (section 9).
- Consent to receive mailings is optional. Declining will not affect the service you receive.
6. Chat, WhatsApp and phone calls
Website chat
- The chat runs on our own server using the open-source software Chatwoot, and messages are stored on that server. The chat is answered by human representatives, not a bot (except for fixed automated messages, such as an out-of-hours message).
- Before the conversation starts, we ask for your phone number (required) and name (optional). If you provide an email address, replies may also be sent to it.
- The system stores the content of the conversation, files you sent, the page you wrote from and your browser and device details (type, version, operating system and language). The chat system does not store your IP address in the conversation record; the server logs record it, as on any website.
- Your phone number is checked against our customer management system (Gincore) and our business contact list in Google (Google Contacts), in order to identify an existing customer and show the representative that customer's orders and repairs. At your request, the representative can open a ticket for you in the customer management system.
- Based on your phone number, your WhatsApp profile photo is saved in the customer record in the chat system, if your WhatsApp privacy settings allow us to see it. If there is no such photo, the contact photo from our business contact list in Google is saved instead, if it has one. The photo helps the representative recognize you quickly.
- When the chat window loads on a page, an anonymous technical record (without name, phone or IP address) is created in the system, together with a cookie that allows the same conversation to continue (section 9), even if you have not written anything.
- Notifications to representatives about a new message, including the sender's name and a snippet of the message, may pass through external notification services, including Chatwoot Inc's notification service for the representatives' mobile app (sections 7 and 8).
- Before we give out details about an order or a repair, we may ask you for details to verify your identity.
- Do not send passwords, a full credit card number or other sensitive information in the chat.
- When you write to us on WhatsApp (for example to +972-73-224-1747 or via the WhatsApp buttons on the websites), we receive your phone number, profile name, messages and files. Messages sent from the website buttons sometimes include the address of the page you contacted us from.
- Messages pass through Meta's servers, subject to WhatsApp's terms and Meta's privacy policy, and are stored with us in the chat system. Here too, your phone number is checked against the customer management system and the contact list, and your profile photo is saved in the customer record, as in the chat.
- On WhatsApp we also send service messages: verification codes, order and repair updates, and price quotes, invoices and receipts. These are not advertising messages.
- If you do not want to use WhatsApp, you can contact us via the website chat, by email or by phone, and ask to receive documents by email. You can also block the business number in the app at any time.
Instagram and Facebook Messenger
- When you write to our business account on Instagram or to our business page on Facebook via Messenger, we receive your profile name and username, account ID and profile photo, as Meta passes them on, as well as your messages and files.
- Messages pass through Meta's servers, subject to Meta's terms and privacy policy, and are stored with us in the chat system so we can respond and follow up.
- If you do not want to use these services, you can contact us via the website chat, WhatsApp, email or phone.
Phone calls and callback requests
- Callback requests from the websites are handled through a widget from Zadarma, our telephony provider. The widget receives the phone number and the time you chose, and stores cookies for a short time (section 9).
- Calls to the business numbers are routed through Zadarma, which processes the call details (such as the phone number and the time of the call) in order to route the call.
7. Who we share information with
We share information with the following parties, for the purposes set out in section 4:
| Who | What they do for us | Which websites and channels |
|---|---|---|
| The business email (Gmail / Google Workspace), through which order confirmations, forms and replies are sent and received; the business contact list (Google Contacts); Google Analytics; Google Ads — ad measurement, remarketing audiences and ad personalization, only after you agree to advertising; spam protection (reCAPTCHA); maps, address autocomplete and address geolocation (Google Maps); YouTube videos; fonts (Google Fonts); sign-in with Google | All websites (including Google Analytics, Google Ads and maps). YouTube — compshop and comp-master. Sign-in with Google — compshop and comp-parts | |
| Microsoft | Microsoft Clarity — usage analytics, heatmaps and recording of interactions with the pages, only after you agree to analytics. Microsoft may also use Clarity data for its own purposes, including Microsoft Advertising (section 9) | All websites |
| Meta | WhatsApp Business — messages, verification codes and documents; Instagram and Facebook Messenger — messages sent to our business accounts; sign-in with Facebook | WhatsApp — all channels; Instagram and Messenger — messages to the business; sign-in — compshop, comp-parts |
| Cloudflare | A security and acceleration layer through which traffic to the websites passes, and aggregate visit statistics without cookies | All websites |
| Gincore | Cloud-based customer management system (CRM): customers, orders and repairs — name, phone, email, address and ID number / company number (ת״ז / ח״פ) | All websites, the chat and WhatsApp |
| Chatwoot Inc | Delivering notifications about new messages to the representatives' mobile app (sender's name and a snippet of the message) | The chat and WhatsApp |
| iCount | Issuing invoices, receipts and price quotes, and a secure credit card payment page | All websites |
| PayPal | Payment via PayPal, for those who choose this option | compshop, comp-parts |
| Zadarma | Telephony and callback requests | All websites and the business phone lines |
| Vee | The accessibility widget on the websites. When it loads, it receives technical data, such as IP address and browser type | All websites |
| Trustindex | Displaying Google reviews on the website. When it loads, it receives technical data, such as IP address and browser type | compshop, comp-master |
| UPS, pickup points, courier companies and shipping platforms (including EasyShip) | Name, phone, address and shipment details, for delivery, collection and choosing a pickup point | Shipments from the online stores and pickup of devices for repair |
| SMS providers | SMS messages for coordination and verification codes | As needed |
| Importers, manufacturers and suppliers | Warranty checks by serial number, warranty repairs, and delivery or pickup directly from the importer if you have chosen this option | As needed |
| Our server hosting provider | Hosting the websites, the databases and the chat | All websites |
| Cloud work tools and artificial intelligence | Storing business documents in the cloud, and AI assistants for our internal work: managing our systems, processing documents and preparing replies. These tools may process customer information on our behalf, including on servers outside Israel. They do not make decisions about you (section 14) | As needed, across all websites and channels |
| Advisers and authorities | Our accountant and legal advisers, and competent authorities where the law requires | As needed |
Service providers receive the information in order to provide services to us. Some of them, such as Google, Microsoft and Meta, may under their terms also use part of the information for their own purposes, for example to improve their services. When you use their service directly (for example WhatsApp or a Google account), their terms also apply to you. If our business is transferred to another entity, the information will be transferred to it as part of the business, subject to this policy.
8. Transfer of information outside Israel
Some of the providers listed in section 7 store or process information on servers outside Israel, including in the United States and Europe: Google, Microsoft, Meta (including WhatsApp, Instagram and Facebook Messenger), Cloudflare, PayPal and Chatwoot Inc. The Gincore customer management system, our telephony provider Zadarma, the Trustindex review service, and the cloud work tools and artificial intelligence tools we use may also process information outside Israel. Other providers may also process information outside Israel. The transfer is made in order to receive the service and in accordance with the providers' terms of service.
9. Cookies and analytics tools
A cookie is a small text file that a website stores in your browser. We also use similar technologies, such as local storage in the browser (localStorage). Cookies fall into five types:
- Essential — shopping cart, sign-in, language, security and saving your cookie choice. They are always active.
- Functional — the chat, callback requests, the accessibility widget, products you have viewed and form autofill. They operate as part of the services on the website.
- Analytics — Google Analytics and Microsoft Clarity, on all three websites. Google Analytics runs from the moment you enter the website until you turn it off; Microsoft Clarity runs only after you agree to analytics.
- Advertising — Google Ads and Google cookies for ad measurement, remarketing and ad personalization. They are set only after you agree to advertising (“Accept all”, or “Advertising” in the “Customize” window).
- Embedded third-party content — YouTube videos and Google maps (Google Maps). Google, which operates both, may set its own cookies when a video or map is loaded or used. Your choice in the cookie notice does not apply to them.
Analytics tools and Google advertising
- Google Analytics — statistics on visits, pages, traffic sources (including from ads) and purchases (order number, amount and products). On compshop only, for a signed-in user, our internal customer number is also sent (the number only, without name, phone or email).
- Google advertising (Google Ads and Google Signals) — only if you agreed to advertising: Google Analytics and Google Ads may use visit and purchase data to measure the effectiveness of our ads (conversions), build remarketing audiences and personalize Google ads. Google Signals links this data to users who are signed in to a Google account and have turned on ad personalization in it. In plain words: if you agreed to advertising, Google may link your visit to our websites to the advertising profile it keeps about you, and show you our ads on other websites and apps too. Without such consent, these features are off: no advertising cookies are set, ad click identifiers are redacted, and the data is not used for remarketing or ad personalization. When Google Analytics is on, it still shows us aggregate statistics on traffic sources, including ads. On the compshop order confirmation page, if you chose “Advertising” (or “Accept all”), the email address you gave in the order may be sent to Google in encrypted (hashed) form to measure ad effectiveness; without consent to advertising it is not sent.
- Microsoft Clarity — only after you agree to analytics: heatmaps and recordings of interactions with the page (clicks, scrolling and mouse movements), in order to find problems and improve the website. The data is collected using cookies of the website and of Microsoft. Microsoft may also use Clarity data for its own purposes, among other things to improve its services and for Microsoft Advertising, its advertising service, as described in the Microsoft Privacy Statement. That is why Clarity runs only with your consent. On some pages, such as checkout, payment and your personal area, Clarity does not load at all.
- In addition, on all three websites, Cloudflare produces aggregate visit statistics for us, without cookies.
- We do not use social network advertising pixels, such as the Meta Pixel, on the websites.
How to choose and how to change your choice
- On all three websites, a cookie notice is shown when you enter, with three options: “Accept all” turns on the analytics tools (Google Analytics and Microsoft Clarity) and Google's advertising features (ad measurement, remarketing and ad personalization); “No analytics” turns off the analytics tools and Google advertising; “Customize” opens a window where you choose each type separately.
- The “Customize” window has three types: Essential — the essential and functional cookies in the table below, which are always on and cannot be turned off (including the chat, callback and the accessibility widget); Analytics — Google Analytics and Microsoft Clarity; Advertising — Google Ads and Google Signals. On your first choice no box is pre-ticked; when you reopen the window, it shows your current choice. Your choice is saved with the “Save choice” button.
- Until you choose: Google Analytics runs, Microsoft Clarity does not, and Google's advertising features are off.
- When “Analytics” is off, Microsoft Clarity stops, and Google Analytics does not store analytics cookies; analytics cookies on the website's domain are deleted. If you chose “Advertising” without “Analytics”, Google Analytics sends signals without analytics cookies for ad measurement, and Google may link them to its advertising cookies. With “No analytics”, Google Analytics sends no data, although Google may still receive basic technical signals without cookies or any identifier of yours.
- When “Advertising” is off, Google's advertising features are off, even if you agreed to them earlier, and Google advertising cookies on the website's domain are deleted.
- Essential and functional cookies keep working whatever you choose, because they are part of the services on the website (chat, callback, accessibility and convenience), and so does embedded third-party content.
- You can change your choice at any time via the Cookie settings link at the bottom of every page: the cookie notice opens again, and you can choose again or open “Customize”.
- You can also block or delete cookies in your browser settings. Blocking essential cookies may impair how the website works, for example the shopping cart.
More information from the providers and ways to limit them
- How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites
- Ad settings in your Google account, including turning off ad personalization: myadcenter.google.com
- Google's browser add-on that blocks Google Analytics on all websites: tools.google.com/dlpage/gaoptout
- The Microsoft Privacy Statement, which also applies to Microsoft Clarity: privacy.microsoft.com/privacystatement
- WhatsApp's privacy policy: whatsapp.com/legal/privacy-policy
Cookies in use
| Name and source | Website | Purpose | Duration | Type |
|---|---|---|---|---|
| OCSESSID — the website | compshop, comp-parts | Shopping cart, sign-in and checkout | Until the browser is closed | Essential |
| language, currency — the website | compshop, comp-parts | Website language and currency | 30 days | Essential |
| porto_active_lang — the website | comp-master | Interface language | About 4 hours | Essential |
| cm_consent, cm_consent_v — the website | All websites | Saving your choice in the cookie notice. cm_consent stores one of four values: all, analytics (analytics only), ads (advertising only) or necessary (no analytics and no advertising). cm_consent_v stores the version of the notice in which you made the choice; a choice saved in an earlier version does not count, and the notice is shown again (except “No analytics”, which is kept) | 12 months (365 days) | Essential |
| __cf_bm, cf_clearance — Cloudflare | All websites, when needed | Bot detection and protecting the website | Usually up to 30 minutes | Essential |
| _GRECAPTCHA — Google reCAPTCHA | Pages with forms and registration | Protection against spam and bots | Up to 6 months, according to Google | Essential |
| cmrs_session (local storage) — the website | comp-master | Keeping you signed in for the repair status check (sign-in is valid for 30 minutes) | Until you sign out or the website data is deleted in the browser | Essential |
| wordpress_test_cookie — WordPress | comp-master, staff sign-in page only | Checking that the browser supports cookies | Until the browser is closed | Essential |
| jrv — the website | compshop | Recently viewed products | 30 days | Functional |
| pickup_point_data — the website | compshop, comp-parts | The UPS pickup point you chose in your order | One day | Functional |
| city_data, cfg_dpw_city (local storage) — the website | compshop | The delivery city you chose (at checkout and in the PC builder) | Until deleted | Functional |
| cfg_compat_beta; cfg_compat (local storage) — the website | compshop, comp-parts | The compatibility check setting in the PC builder (configurator) | Until the browser is closed; until deleted | Functional |
| Display and notice preferences (display, sorting_bar, category_bar and others) — the website | compshop, comp-parts | Catalog display, configurator settings and notices you have closed | Until deleted | Functional |
| cmpk_client (local storage) — the website | comp-master | Saving the details from the device pickup form (name, phone, email, address, ID number / company number (ת״ז / ח״פ), business name) to fill it in automatically next time | Until you delete the website data in your browser | Functional |
| cm_office (local storage) — the website | comp-master | Hiding the repair status button on the lab's computers | 24 hours | Functional |
| _wpfuuid — WPForms form plugin | comp-master, pages with a form | A random identifier linking forms submitted from the same browser | Up to 11 years | Functional |
| cw_conversation — the chat (our server) | All websites | Linking the browser to the chat conversation | 365 days | Functional |
| _chatwoot_session — the chat (our server) | chat.comp-master.co.il | Running the chat window | Until the browser is closed | Functional |
| ZCallbackWidget, ZCallbackWidgetTmpId — Zadarma | All websites | The callback window: temporary visit ID, the page you came from and the number of pages viewed | One day | Functional |
| vp_cache_exp_*, vp_plugin_* (local storage) — Vee | All websites | Running the accessibility widget and saving its settings | 60 minutes; until deleted | Functional |
| _ga, _ga_<ID> — Google Analytics | All websites | Distinguishing between visitors and between visits (deleted when “Analytics” is off) | Up to 400 days | Analytics |
| _clck, _clsk; _cltk (temporary tab storage) — Microsoft Clarity | All websites | Recognizing a returning visitor and linking page views into a single visit; tab identifier (only after you agree to analytics) | 365 days; one day; until the tab is closed | Analytics |
| Microsoft cookies on the clarity.ms and bing.com domains (such as MUID, CLID, ANONCHK, SM, MR) | All websites | Operating Clarity (only after you agree to analytics). Microsoft may also use them for its own purposes, including advertising (Microsoft Advertising) | From a few minutes up to about one year, according to Microsoft | Analytics |
| cs_ga4 (temporary tab storage) — the website | compshop, comp-parts | Sending purchase data to Google Analytics only once | Until the tab is closed | Analytics |
| _gcl_au — Google Ads | All websites | Measuring Google Ads conversions (only after you agree to advertising) | 90 days | Advertising |
| Google advertising cookies on the google.com and doubleclick.net domains | All websites | Measuring, remarketing and personalizing Google ads (only after you agree to advertising) | According to Google's policy | Advertising |
| YouTube cookies (such as YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA) — Google | Pages with a video on compshop and comp-master | Playing the video. YouTube may also use them for its own purposes | Up to about 6 months, according to Google | Embedded third-party content |
Other providers whose components load on the website — Trustindex (reviews), Google Fonts (fonts) and Google Maps (maps and address autocomplete, on all websites) — also receive technical data when they load, such as IP address and browser type. An embedded Google map, like a YouTube video, may also set Google cookies (see “Embedded third-party content” above). This list reflects the situation as of the date of the last update. Third-party cookies are set by those parties and may change.
10. Mailings and advertising
- We send mailings and advertising (by email, SMS or WhatsApp) only to people who have given explicit consent, as required by section 30A (30א) of the Communications (Telecommunications and Broadcasting) Law (חוק התקשורת (בזק ושידורים)): an active choice on your part, at registration or in the mailing settings, using an option that is not pre-ticked.
- We will not use for advertising any phone numbers or addresses that reached us through the chat, WhatsApp, Instagram, Facebook Messenger, the Shopping Advisor, the matching questionnaire, callback requests or contact forms, unless you have given such consent.
- Service messages (order confirmation, shipping and repair updates, verification codes, documents and price quotes you requested) are not advertising and are sent even without consent to mailings.
- You can withdraw your consent at any time: in the mailing settings in your personal area on the website, using the method indicated in each advertising message, or by contacting us by email at [email protected] or by phone at 073-2241747. We will remove you from the mailing lists as soon as possible.
- Google ads shown to you on other websites and services based on your visit to our websites (remarketing) are possible only if you agreed to advertising in the cookie notice (section 9).
- We do not give your details to others for mailing purposes.
11. Information security
We work to implement the Privacy Protection (Data Security) Regulations, 5777-2017 (תקנות הגנת הפרטיות (אבטחת מידע)). The measures in place include:
- Traffic to the three websites and to the chat is encrypted (HTTPS).
- All three websites operate behind Cloudflare's security service.
- When you pay on the website, credit card details are entered with the payment provider and are not stored in our systems, except for partial details.
- Passwords for website accounts, and verification codes for signing in to an account and for checking repair status, are stored hashed and not in plain text; verification codes are valid for a short time.
- Status checks and some forms limit the number of attempts, and some forms use bot protection (Google reCAPTCHA).
- The chat runs on our own server, not with an external chat provider (notifications to representatives may pass through an external notification service — section 6).
No system is completely secure. If a serious security incident occurs, we will act as required by law, including reporting to the Privacy Protection Authority (הרשות להגנת הפרטיות) where the law requires.
Found a security vulnerability on one of the websites, or suspect a data leak? Email us at [email protected] with the subject “אבטחת מידע” (information security). We check every report. Please do not try to access other people's information or disrupt the websites.
You can help too: do not send passwords or a full credit card number via chat, WhatsApp, email or forms; choose a unique password for your website account; and back up the data on your device before handing it in for repair.
12. How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires us to keep it. The main retention periods:
- Details entered in an order that was not completed — up to 90 days.
- Conversations in the chat, WhatsApp, Instagram and Facebook Messenger — up to 24 months from the last message in the conversation.
- Server logs — up to 12 months.
- CVs and application details — up to 12 months. You can ask us to delete them sooner.
- Invoices, paid orders and repairs — 7 years, as required by tax and bookkeeping law.
- A user account — until you ask to close it (section 13). Orders, payments and repairs in the account are kept after it is closed, for the period above.
- Information needed to handle a complaint, dispute or claim is kept until the matter is resolved, even if the period above has ended.
- Cookie durations are listed in the table in section 9. Information stored in your browser (for example the pickup form details) remains there until you delete the website data in your browser.
These are the retention periods we have set. At the end of the period, the information is deleted or made anonymous. Information stored before this policy was published that has already exceeded its period will be deleted or made anonymous by 31 December 2026.
13. Your rights and how to exercise them
Under the Privacy Protection Law, 5741-1981 (חוק הגנת הפרטיות, התשמ״א-1981), you are entitled:
- To access your information — to ask to review the information about you held in our databases (section 13 of the Law), yourself, through a person you have authorized in writing, or through a guardian.
- To correct or delete inaccurate information — if the information is not correct, complete, clear or up to date, to ask for it to be corrected or deleted (section 14 of the Law). If we refuse, we will notify you of the refusal and the reasons for it, and you may appeal the refusal as provided by law.
- To remove yourself from mailing lists — to ask that information about you be deleted from a database used for direct mailing, and that it not be given to others for that purpose (section 17F (17ו) of the Law).
- To withdraw consent to advertising — at any time (section 10).
- To change your cookie choice — via the Cookie settings link.
In addition to your rights under the law, you can ask us to delete your account on the website. We will close the account and stop using its details for any purpose not required by law. Information we are required to keep by law — such as invoices, orders and repairs — will be kept for the required period.
How to submit a request
- Contact us by email at [email protected] or by phone at 073-2241747. Please state your name, the phone number or email address you used, which website or service the request concerns and what you are asking for. You can contact us in Hebrew, Arabic, English or Russian, and receive the information in Hebrew, Arabic or English, as you choose, or in Russian if you ask for it.
- Before we disclose or change any information, we will verify your identity — for example with a code sent to the phone number or email address we have on file. If we cannot verify your identity, we will ask for additional details. This prevents your information from being disclosed to someone else.
- We will reply as soon as possible, and no later than 30 days after receiving the request. If we refuse an access request, we will notify you within 21 days.
- You can also update your account details and your mailing preference yourself, in your personal area on compshop and comp-parts.
- If you are not satisfied with how your request was handled, you can contact the Privacy Protection Authority (הרשות להגנת הפרטיות).
14. Automated decisions
We do not make automated decisions about you that have a legal or significant effect on you. We use artificial intelligence tools in our internal work (section 7), but artificial intelligence tools do not make decisions about you. The chat and WhatsApp are answered by human representatives, not a bot (except for fixed automated messages, such as an out-of-hours message). The Smart Shopping Advisor on compshop calculates recommendations automatically using fixed rules, based on the characteristics of the products in the catalog and their general popularity — without artificial intelligence and without building a personal profile. If we change this, we will update this policy beforehand.
15. Minors
Under the terms of use of compshop and comp-parts, a minor (under 18) may make a purchase and provide us with details only if the action is customary for their age or with the consent of a parent or guardian. A parent or guardian who believes that information about a minor has been provided to us improperly can contact us as described in section 13.
16. Changes to this policy
We may update this policy when our services, our providers or the law change. The date at the top and at the bottom of the page shows the last update. We will announce any material change in how information is used with a prominent notice on the websites, and if the change requires your consent, we will ask for it.
17. Language
This policy is published in Hebrew, Russian and English. In the event of any conflict or discrepancy between the versions, the Hebrew version prevails.
Last updated: 19 September 2026