Privacy Policy

1. Who we are

ITgalya is a brand providing information security, Managed SOC, Incident Response and risk assessment services. This policy applies to personal information collected in the course of using the site and contacting us through it.

ITgalya is a commercial brand operated in Israel.

Operator: Yehonatan Michaelov.

This is a translation provided for convenience. In the event of any discrepancy, the Hebrew version of this policy prevails.

2. What information we may collect

When you submit a website enquiry, we may receive your name, company name, role, business email address, telephone number if supplied, area of interest, the content of your enquiry and basic campaign information such as UTM source, medium and campaign when those parameters are present in the page URL.

When the form appears after a questionnaire or self-assessment, the enquiry may also include the answers or a summary context generated from those answers, including the result categories shown on the page. That assessment context is sent only when you choose to submit the enquiry form and accept its privacy notice; simply completing a questionnaire does not send the answers to ITgalya.

The infrastructure used to operate the site may also process technical information such as IP address, browser and device type, access times, pages viewed, security data and technical logs in order to serve the site, process the request and protect the service.

3. What the information is used for

Information may be used to:

• respond to enquiries and make contact;
• understand the business need and security context supplied by the enquirer;
• provide information about ITgalya's services;
• manage relationships with clients and prospective clients;
• operate, maintain and improve the site;
• secure the site, prevent misuse and identify suspicious activity;
• meet legal requirements;
• protect the rights of ITgalya and of third parties.

4. Providing information

Providing information by form or email is voluntary. A name, company and valid email address are required to submit the website form so that we can handle the enquiry and respond.

Do not submit passwords, credentials, API keys, logs, incident evidence, unnecessary customer or employee personal data, classified information or other sensitive material through the form or ordinary email. If such material is required during a professional engagement, we will agree an appropriate secure channel with you.

5. How a website enquiry is delivered

The website form is sent to an ITgalya endpoint on the same domain. The endpoint performs basic checks on the request origin, field structure and field sizes, then sends the enquiry as an email to support@itgalya.com. The website does not expose mailbox passwords or email API credentials to the browser.

The delivery mechanism is designed to run through Cloudflare Workers and Cloudflare Email Service. After delivery, the lead email may remain in the mailbox and in the relevant mail provider systems in accordance with their settings and retention periods.

6. Sharing information with third parties

ITgalya does not sell personal information. Information may be processed by or passed to service providers acting on our behalf only to the extent required to operate and secure the site, deliver an enquiry and handle it.

As of this policy update, those providers may include Cloudflare for hosting, CDN, Workers, security and lead-email delivery, and the email provider through which the enquiry is received and stored.

Information may also be disclosed where required by law, by court order, at the demand of a competent authority, to protect legal rights, or to prevent and investigate unlawful activity or a security incident.

7. Service providers and transfers outside Israel

Some technology providers we use operate outside Israel, so information may be processed or stored outside Israel. In those cases we act in accordance with applicable law and take reasonable measures to protect the information.

8. Cookies and similar technologies

Today: the site writes no cookies, does not store questionnaire answers in localStorage or other browser storage, and runs no third-party analytics tools, marketing pixels or tracking technologies. UTM parameters, where present, are read from the current URL and attached to an enquiry only if you choose to submit it.

In future: if non-essential cookies, analytics or tracking tools are added, this policy will be updated and an appropriate consent mechanism will be provided where required.

9. Marketing and mailings

ITgalya will not use the details you provide to send marketing messages by email, SMS or similar means except in accordance with the law and with any consent required. You may ask to stop receiving marketing communications at any time.

10. Information security

ITgalya applies reasonable technical and organisational measures intended to protect information against unauthorised access, use, alteration, disclosure or deletion. The website form is limited to a same-origin endpoint and includes server-side validation and a basic anti-bot control. Absolute security of information transmitted or stored through internet-connected systems cannot, however, be guaranteed.

11. Retention

Information is kept only for as long as needed to handle the enquiry, manage the business relationship, protect legal rights, maintain information security and meet legal requirements. Enquiries submitted through the site may remain in the business mailbox and relevant operational systems while needed for those purposes. Once information is no longer needed we act to delete it or reduce its use as appropriate and as the law requires.

12. Your rights regarding your information

Subject to applicable law, a person whose personal information is held by ITgalya may contact us to request access to that information, to have it corrected where it is inaccurate, incomplete, unclear or out of date, or to make another request concerning their personal information. Every request is considered in accordance with applicable law.

13. Minors

The site and the services presented on it are aimed primarily at businesses and organisations, and are not intended for the deliberate collection of personal information from minors.

14. Links to other sites

The site may include links to sites and services not operated by ITgalya. This privacy policy does not apply to those third parties, and we recommend reviewing their own privacy policies.

15. Changes to this policy

ITgalya may update this privacy policy from time to time. The date it was last updated is shown at the top of the page.

16. Privacy contact

For privacy and personal information matters, please contact:

support@itgalya.com