Privacy Policy
Last updated: February 3, 2026
Waitlist Ltd. ("Waitlist," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our appointment scheduling platform and related services (the "Platform").
This policy complies with the Israeli Privacy Protection Law, 5741-1981, the Israeli Privacy Protection Regulations (Data Security), 5777-2017, and applicable international data protection standards.
Data Controller
Waitlist Ltd. is the data controller responsible for your personal information collected through the Platform. Our contact details are:
Waitlist Ltd. Email: [email protected]
Types of Users and Data
Business Users
Service providers who use Waitlist to manage their appointments. We collect information directly from Business Users to provide our services.
End Users
Customers who book appointments through Business Users. For End Users, the Business User is the data controller and we act as a data processor on their behalf.
Information We Collect
Information You Provide Directly
Account Information:
- Full name and business name
- Email address and phone number
- Password (stored in encrypted form)
- Business address and operating hours
- Profile photo and business description
Business and Service Information:
- Services offered and pricing
- Staff members and their schedules
- Cancellation and refund policies
Appointment Data:
- Booking details and scheduling preferences
- Appointment history and notes
- Treatment or service records
Payment Information:
- Billing name and address
- Payment method details (processed securely by our payment providers)
- Transaction history and invoices
Communications:
- Messages, feedback, and support requests
- Survey responses (voluntary)
Information Collected Automatically
Device and Technical Information:
- IP address and general location (based on IP)
- Browser type and version
- Operating system
- Device identifiers and type
- Screen resolution and settings
Usage Data:
- Pages visited and features used
- Appointment booking patterns
- Click paths and interaction timestamps
- Session duration and frequency
Information from Cookies and Similar Technologies:
- Session and authentication data
- Preferences and settings
- Analytics and performance data
Information from Third Parties
Calendar Services:
- When you connect Google Calendar or other calendar services, we receive availability data and calendar events as authorized.
Social Login:
- If you sign in via Google, Facebook, or other providers, we receive basic profile information (name, email, profile picture) as authorized.
Payment Providers:
- Transaction status and confirmation details
How We Use Your Information
We use your personal information for the following purposes:
Providing and Operating the Platform
- Creating and managing your account
- Processing appointments and bookings
- Sending appointment reminders and confirmations via SMS, email, or WhatsApp
- Processing payments and generating invoices
- Providing customer support
Improving Our Services
- Analyzing usage patterns to enhance features
- Conducting research and development
- Fixing bugs and improving performance
- Personalizing your experience
Communications
- Sending service updates and important notices
- Responding to your inquiries
- Sending marketing communications (with your consent)
- Conducting surveys and collecting feedback
Security and Compliance
- Detecting and preventing fraud and abuse
- Monitoring for security threats
- Complying with legal obligations
- Enforcing our Terms and Conditions
Analytics and Business Intelligence
- Generating aggregated, anonymized statistics
- Understanding user behavior patterns
- Making business decisions about services
- Measuring campaign effectiveness
Legal Basis for Processing
Under Israeli Privacy Protection Law, we process your personal information based on:
- Consent: For marketing communications and optional data collection
- Contractual Necessity: To provide the Platform services you requested
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interests: For security, fraud prevention, and service improvement, balanced against your rights
How We Share Your Information
With Your Consent
We share information with third parties when you have given explicit consent.
Service Providers
We share information with trusted service providers who assist us in operating the Platform:
- Cloud Hosting: Data stored in secure data centers (Google Cloud)
- Payment Processors: For subscription billing and payment processing
- Communication Providers: For SMS, email, and WhatsApp notifications
- Analytics Providers: For service improvement and usage analysis
- Customer Support Tools: To help us respond to your inquiries
These providers are contractually bound to protect your information, use it only for specified purposes, and comply with applicable data protection laws.
Between Users
- Appointment details are shared between Business Users and End Users as necessary for scheduling
- Business Users can view End User contact information for booked appointments
- End Users can view Business User profiles, availability, and service information
Legal Requirements
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to:
- Comply with legal obligations or valid legal process
- Protect our rights, property, or safety
- Prevent fraud, security threats, or illegal activity
- Respond to emergency situations
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information becomes subject to a different privacy policy.
Aggregated and Anonymized Data
We may share aggregated, anonymized data that cannot reasonably identify you for research, analysis, or other business purposes.
International Data Transfers
Your information may be transferred to and processed in countries outside Israel, including countries that may not provide the same level of data protection. When we transfer data internationally, we implement appropriate safeguards including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with adequate security requirements
- Verification that recipients maintain appropriate security measures
- Compliance with Israeli cross-border data transfer requirements
Data Retention
We retain your personal information for as long as necessary to:
- Provide the Platform and maintain your account
- Comply with legal obligations (including tax and accounting requirements)
- Resolve disputes and enforce our agreements
- Meet legitimate business needs
Specific Retention Periods:
| Data Type | Retention Period |
|---|---|
| Account Data | While active + 7 years after closure |
| Appointment History | 7 years for legal/tax compliance |
| Payment Records | 7 years per Israeli tax law |
| Usage Logs | 2 years |
| Marketing Preferences | Until consent withdrawn |
| Support Communications | 3 years after resolution |
Upon request, we will delete or anonymize your data unless retention is required by law. After account deletion, some data may persist in backups for up to 90 days.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Technical Measures:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure, encrypted password storage
- Regular security assessments and penetration testing
- Automated vulnerability scanning
- Access logging and monitoring
Organizational Measures:
- Access controls and authentication requirements
- Employee training on data protection
- Background checks for personnel with data access
- Incident response procedures
- Regular security policy reviews
While we strive to protect your information using commercially reasonable measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
Your Rights
Under Israeli Privacy Protection Law, you have the following rights regarding your personal information:
Right of Access
You may request access to the personal information we hold about you and receive a copy in a commonly used format.
Right to Rectification
You may request correction of inaccurate or incomplete personal information. You can update most information directly in your account settings.
Right to Deletion
You may request deletion of your personal information, subject to legal retention requirements. We will delete or anonymize data that we are not required to retain.
Right to Restrict Processing
You may request that we limit the processing of your personal information in certain circumstances, such as when you contest its accuracy.
Right to Data Portability
You may request to receive your personal information in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing of your personal information for direct marketing or based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us at [email protected] with your request. We will verify your identity and respond within 30 days as required by law. We may request additional information to verify your identity before processing your request.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Platform.
What Are Cookies?
Cookies are small text files stored on your device that contain information about your browsing activity. They help us recognize you, remember your preferences, and improve your experience.
Types of Cookies We Use
Essential Cookies:
- Required for Platform functionality
- Enable login and account access
- Maintain security
- Cannot be disabled
Analytics Cookies:
- Help us understand how users interact with the Platform
- Measure feature usage and performance
- Identify areas for improvement
Preference Cookies:
- Remember your settings and preferences
- Store language and display options
Marketing Cookies (Optional):
- Used to deliver relevant advertisements
- Measure marketing campaign effectiveness
- Require your consent
Managing Cookies
You can control cookies through:
- Browser settings (blocking or deleting cookies)
- Our cookie preference center
- Individual opt-out links in marketing communications
Disabling certain cookies may affect Platform functionality. Essential cookies cannot be disabled while using the Platform.
Third-Party Tracking
Some cookies are placed by third-party services we use (analytics, advertising). These are subject to their respective privacy policies, which we do not control.
Children's Privacy
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
Third-Party Links
The Platform may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the "Last updated" date
- Sending an email notification for significant changes
- Providing in-app notifications where appropriate
Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy. If you do not agree to any changes, you should stop using the Platform and contact us about account deletion.
Complaints
If you have concerns about how we handle your personal information, please contact us first at [email protected]. We will investigate and respond to your complaint.
If you are not satisfied with our response, you may file a complaint with:
The Israeli Privacy Protection Authority Website: https://www.gov.il/he/departments/the_privacy_protection_authority
Contact Us
For questions, requests, or concerns regarding this Privacy Policy or your personal information, please contact us:
Waitlist Ltd. Email: [email protected]
We aim to respond to all inquiries within 48 hours during business days.
By using Waitlist, you acknowledge that you have read and understood this Privacy Policy.