Privacy notice

Who is responsible for your information

Tom Yehuda Bar Haim is the controller of personal data covered by this notice. Questions, requests or concerns about privacy can be submitted through the Contact page on this website.

This notice covers this website and business inquiries made to TBH Advisory. A separate notice or contractual provision may apply where we process information for a client as part of an engagement.

Personal data we collect

Contact and professional information may include your name, business email address, telephone number, employer, role, location and professional profile.

Communications and inquiry information may include the content of messages, meeting requests, documents you choose to provide and information about the organization, transaction or business situation relevant to your inquiry.

Technical information may include IP address, browser and device type, operating system, referring page, requested pages, date and time of access, and security or diagnostic logs generated when the website is delivered.

How we obtain personal data

We collect information directly from you when you contact us or correspond with us. We may also receive business contact information from your organization, a mutual contact, professional advisors, public professional sources or service providers supporting the website and our communications.

Purposes and legal bases

We may use personal data to operate, maintain and secure the website; respond to inquiries; assess whether and how we can assist; arrange meetings; prepare or administer an engagement; manage professional relationships; maintain business and compliance records; protect our rights; and comply with legal or regulatory obligations.

Where data-protection law requires a legal basis, we rely as appropriate on steps requested before entering into a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting our business and developing professional relationships, or consent where consent is specifically requested. You may withdraw consent at any time without affecting earlier lawful processing.

Cookies and similar technologies

The current website does not use analytics, advertising cookies or behavioral-tracking technologies. Essential technical storage may be used where strictly necessary to deliver security, accessibility or user-requested functionality.

If non-essential cookies or analytics are introduced, this notice will be updated and any consent mechanism required by applicable law will be implemented before those technologies are enabled.

Who we share personal data with

We may share personal data, only where reasonably necessary, with website hosting and IT providers, professional advisors, insurers, auditors, financial and administrative providers, authorities or courts where disclosure is required, and counterparties involved in a business transfer or reorganization subject to appropriate confidentiality protections.

Service providers are permitted to use personal data only for the services they provide to us or as required by law. We do not sell or rent personal data and do not share it for third-party behavioral advertising.

International transfers

Our work and suppliers may involve more than one country. Where personal data is transferred internationally, we take steps required by applicable law, which may include using an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to respond to an inquiry, maintain an appropriate record of professional interactions, comply with legal or regulatory obligations, resolve disputes and establish or defend legal claims. Retention periods depend on the nature of the information, the relationship and applicable requirements. Information is deleted or anonymized when it is no longer required.

Security

We use reasonable technical and organizational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access or use. Access is limited to people and providers who need the information for an authorized purpose. No internet transmission or storage system can be guaranteed completely secure.

Your rights

Depending on applicable law, you may have rights to request access to personal data, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to the data-protection authority where you live or work or where an alleged infringement occurred.

To exercise a right, use the Contact page and identify the request as privacy-related. We may need to verify your identity and may retain a record of the request. Rights may be subject to legal conditions and exemptions.

Automated decisions

We do not use information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects for individuals.

External links and children

Links to external websites are provided for convenience. Those websites operate under their own privacy notices, and we are not responsible for their content or privacy practices.

This website is intended for business audiences and is not directed to children. We do not knowingly seek personal data from children through the website.

Changes to this notice

We may update this notice to reflect changes to the website, our practices or applicable requirements. The date at the top identifies the latest version. Material changes will be highlighted where appropriate.