Privacy Policy

Last updated: 13/7/2026

This Privacy Policy applies to all use of the website and the KVALI platform, including browsing, opening a user account, signing in via Google, searching and booking rehearsal rooms, studios, drum rooms, podcast rooms and performance venues, creating an artist or professional profile, adding a room, performance venue or complex, making bookings, payments, receiving notifications, writing reviews, using the dashboard, and managing business services including business subscriptions and promotion services. This policy is intended to clarify how the Site Operator collects, uses, retains, shares and protects your personal information.

By using the website www.kvali.co.il and the KVALI platform, operated by Lior Feigelsohn / KVALI, V.A.T. 324481100, 6 Hativat HaRel St., Modi'in, email: kvalimusic2@gmail.com, phone: 054-306-9406 (hereinafter: "the Site Operator"), you confirm that you have read and understood this Privacy Policy. This Privacy Policy forms an integral part of the site's Terms of Service.

Providing personal information to the Site Operator is voluntary. However, withholding certain information may prevent access to certain services offered on the site, including making bookings, contacting providers or receiving ancillary services.

Definitions

Personal information: Any data about an identified or identifiable person, directly or indirectly (name, address, email, IP address, payment details).

Special-category information: Medical, financial, biometric or genetic data, precise location data, political opinions, sexual orientation, criminal record.

Processing: Any operation performed on personal data, including collection, storage, use, transfer, distribution, deletion or destruction.

Database controller: The person who determines, alone or jointly, the purposes and means of processing personal data. For these purposes, the Site Operator is the database controller and is responsible for its processing and use in accordance with applicable law. Controller details: Lior Feigelsohn / KVALI, V.A.T. 324481100, 6 Hativat HaRel St., Modi'in, email: kvalimusic2@gmail.com, phone: 054-306-9406.

1. Privacy Policy. The Site Operator undertakes not to misuse information without the user's consent, unless required by law, to prevent misuse or to protect its rights. The Site Operator will grant access to information only to those employees who need it to provide the service. At the time of collection, we will inform the user of the purposes of use, whether providing the information is mandatory or voluntary, the controller's details, and the retention period.

2. Database. The Site Operator manages its databases in accordance with applicable law. Where a legal obligation to register a database or to notify the Privacy Protection Authority applies, the Site Operator will act accordingly.

3. Prohibition on processing unlawfully collected data. The Site Operator strictly prohibits any processing of personal information collected unlawfully, and is committed to verifying the lawfulness of data collection from every source.

4. Purposes of collection and processing. Information will be retained only for as long as necessary for the purposes for which it was collected. Upon expiry of that period, or when the information is no longer needed, reasonable steps will be taken to delete or anonymise it so that the data subject cannot be identified by reasonable means.

5. Information that the Site Operator may collect and process through use of the site includes, as applicable:

5.1 User account details: full name, email address, encrypted or hashed password, user ID, account status, login history and actions performed in the account.

5.2 Information provided via Google sign-in: name, email address, Google account ID, and — subject to the user's separate permission only — limited authorisation to sync bookings with Google Calendar.

5.3 Booking information: booking details, date and time, duration, the room, studio, venue or service booked, booking status, cancellations, refunds, service messages and details required to process the booking.

5.4 Information relating to room owners, studios, complexes and performance venues: business or venue name, contact person name, contact details, address, geographic location, venue description, photographs, equipment, operating hours, prices, cancellation terms, service details, availability data, business subscription data and promotion data.

5.5 In every data-collection form on the site — including registration, login, making a booking, adding a room, creating a professional profile, adding a performance venue, writing a review or contacting the Site Operator — an appropriate notice will be displayed in accordance with applicable law, including among other things the purpose of collection, whether providing the information is mandatory or voluntary, the consequences of not providing it, to whom it may be disclosed, and a link to this Privacy Policy.

5.6 Information relating to artists and professionals: name, field of activity, professional description, contact details, links, photographs, area of activity, professional experience and any additional information provided for the purpose of creating a profile on the site.

5.7 Payment information: transaction details, transaction amount, transaction date, payment status, credits, refunds and accounting details. Full credit card details are not stored by the Site Operator; they are processed through an external payment processor.

5.8 Reviews, ratings and user-generated content: ratings, reviews, comments, photographs, descriptions and any content the user chooses to publish on the site.

5.9 Technical and usage data: IP address, browser type, operating system, device type, usage times, pages viewed, actions performed on the site, diagnostic data and security data.

5.10 Push notifications: where the user has granted permission to receive notifications, a device or browser identifier will be stored for the purpose of sending service notifications and platform updates.

5.11 Public information on the site: some information provided by users may be displayed publicly on the site in accordance with the nature of the service. For example, room, studio, complex, performance venue and professional profile details, photographs, professional description, equipment, location, area of activity, availability, prices, cancellation terms, ratings and reviews may be visible to other users and to the general public browsing the site. Personal information about a third party must not be published on the site without appropriate authorisation.

5.12 Use by minors: the site and its business services are intended for users aged 18 and above, unless stated otherwise. Creating a business profile, adding a room, performance venue, complex or professional profile, and entering into commercial arrangements through the site, are for users aged 18 and above only. If the Site Operator receives information provided by a minor without appropriate consent, please contact the Site Operator to request its deletion.

6. Information will be collected and used for the following purposes:

6.1 Opening a user account, authenticating users, managing login and access permissions.

6.2 Operating the platform, including searching for rooms, studios, performance venues, artists and professionals.

6.3 Making, managing and documenting bookings, including booking confirmation, cancellation, processing refunds, sending service messages and supporting users.

6.4 Managing business profiles, professional profiles, rooms, complexes and performance venues.

6.5 Processing payments, managing transactions, accounting, fraud prevention and dispute resolution.

6.6 Syncing bookings with Google Calendar, subject to the user's separate permission.

6.7 Sending push notifications and service messages relating to bookings, the user's account or platform activity.

6.8 Publishing reviews, ratings and user content, where the user has chosen to publish them on the site.

6.9 Managing business subscriptions and promotion services, including Boost, increased exposure and paid services for business owners.

6.10 Information security, preventing misuse, troubleshooting, monitoring service integrity and enforcing the Terms of Service.

6.11 Compliance with legal requirements, managing legal proceedings, maintaining accounting records and protecting the rights of the Site Operator, users or third parties.

6.12 Use of Google Calendar: where the user chooses to authorise a calendar connection, the Site Operator will use that authorisation solely to create, update or sync events related to bookings made through the site. The Site Operator does not use that authorisation to read the user's general calendar content, does not delete events unrelated to bookings on the site, and does not disclose calendar content to third parties. The user may revoke the authorisation at any time via Google account settings.

7. Consent to receive marketing communications. When providing details — including upon registration, providing an email address or making a booking — the user may consent to the Site Operator and/or related parties sending them messages of any kind by any communications medium, at its discretion, relating to its activity and/or the site's activity, including offers to purchase an asset or service, promotional communications of any kind, system messages, service messages and other customer messages. Such communications will be sent in accordance with applicable law and only after the user has given explicit consent (opt-in).

8. Unsubscribing from mailing lists. The user may contact the Site Operator at any time to request removal from the Site Operator's mailing lists as follows:

8.1 Email unsubscribe. The user may at any time request removal from the Site Operator's email mailing list by clicking the unsubscribe link at the bottom of any promotional email sent by the Site Operator, or by sending an unsubscribe request to kvalimusic2@gmail.com. Following receipt of an unsubscribe request, the Site Operator will not send promotional messages to the email address from which the request was sent. Note that if the user has more than one email address, a separate unsubscribe request must be sent for each.

8.2 SMS unsubscribe. Please send an unsubscribe request by SMS in accordance with the instructions contained in the SMS sent by the Site Operator. Note that an SMS unsubscribe request does not remove the recipient's email address from the mailing list; to stop promotional emails, the user must also follow the instructions in section 8.1.

9. Right of access to information

9.1 The user may request access to the details held about them by the Site Operator in its database.

9.2 The user may submit a request to correct and/or delete the information from the database.

9.3 The Site Operator may correct or delete the information, as applicable and subject to applicable law. It is clarified that deletion of information may be subject to the retention of certain information required by law, for accounting purposes, to complete transactions, prevent fraud, resolve disputes or protect legal rights. In the event of deletion, only data that must or legitimately needs to be retained will be kept.

9.4 Data accuracy: The Site Operator operates mechanisms to ensure that personal information held in the database is accurate, complete, clear and current. Where information is found to be inaccurate, the Site Operator will take reasonable steps to correct or delete it.

9.5 Data minimisation: The Site Operator will take steps to delete personal information that is no longer needed for the purposes for which it was collected or retained, unless there is a legal obligation to retain it or steps have been taken to ensure that the data subject cannot be identified by reasonable means.

9.6 Requests to access, correct or delete information may be sent to: kvalimusic2@gmail.com. To process a request, the Site Operator may ask for details necessary to verify the requester's identity. The Site Operator will respond to such requests within 30 days and will inform the user of the outcome.

9.7 The user may submit a complaint to the Privacy Protection Authority at: https://www.gov.il/he/departments/the_privacy_protection_authority

10. Sharing information with third parties. The Site Operator may transfer personal information, to the extent strictly necessary, to external parties assisting with the operation of the site and service, and only for the purposes set out in this policy.

10.1 Hosting, infrastructure, database and cloud service providers, as well as additional technology vendors required for the operation, maintenance, security and improvement of the service.

10.2 Payment and processing providers for handling transactions, credits and refunds, as well as accounting and operational data required in connection with a transaction.

10.3 Google, for the purpose of Google sign-in or syncing bookings with Google Calendar, subject to the user's permission and to the extent required for the service.

10.4 Email, messaging, notification and support service providers, as well as room owners, studios, complexes or performance venues, to the extent required to make a booking, coordinate the service or handle a cancellation.

10.5 Professional advisers, accountants, lawyers and competent authorities, to the extent required by law or to protect the rights of the Site Operator, users or third parties.

10.6 Some of the technology vendors used to operate the site — including hosting, cloud, payment, authentication, email and infrastructure providers — may process or store information outside Israel. Such transfers will be carried out in accordance with applicable Israeli law, including the provisions governing transfers of information outside the country, to the extent applicable in the circumstances.

11. Transfer of non-identifying information. The Site Operator may use anonymous or aggregated information that does not personally identify you for statistical, research, operational, marketing or service-improvement purposes, and may transfer it to third parties without restriction, provided it cannot be used to identify you by reasonable means.

12. Cookies. The site uses cookies and similar technologies that are necessary for the site to function correctly, for account login, session management, information security, preventing misuse and improving the user experience. As of the date of this policy, the site does not use advertising cookies. If non-essential cookies — including advertising, measurement or remarketing tools — are used in future, their use will be subject to applicable law, an appropriate update to this policy, and where required a consent mechanism on the site.

13. Retention of personal information. Account information will be retained for as long as the account is active. Information relating to bookings, payments, cancellations, refunds, invoices, disputes and accounting records may be retained after account deletion, where required by law, for accounting purposes, fraud prevention, dispute resolution or to protect legal rights. Information that is no longer needed for the purposes for which it was collected will be deleted or anonymised, depending on the circumstances and technical capabilities of the system.

14. Information security. The Site Operator implements reasonable and customary technical and organisational security measures, commensurate with the nature of the service, the type of information and the extent of its use. Measures taken include, among other things, establishing information security procedures, access controls, staff training, permission management, and implementing customary safeguards to prevent unauthorised access, misuse, exposure, alteration or destruction of personal information.

15. Notwithstanding the foregoing, the security measures taken do not constitute an absolute guarantee that information will not be exposed as a result of unauthorised access, a fault, a security incident or an event outside the Site Operator's control. The level of security applicable to a database is determined by the volume, type, sensitivity and nature of the data processed, as defined in applicable regulations.

16. Changes to this Privacy Policy. The Site Operator reserves the right to update this Privacy Policy from time to time at its sole discretion. In the event of material changes, the Site Operator will notify users by posting a prominent notice on the site or by other means of communication. Continued use of the site after the changes are published will constitute consent to the updated Privacy Policy.

17. Contact. For any question, request or complaint regarding this Privacy Policy or the handling of your personal information, please contact the Site Operator:

  • Name: Lior Feigelsohn
  • Email: kvalimusic2@gmail.com
  • Postal address: 6 Hativat HaRel St., Modi'in
  • Phone: 054-306-9406

Last updated: 13/7/2026