Privacy Policy — Rising Gorilla Planner

Who We Are

Data Controller: Rising Gorilla Planner, operated by Ofer Levi, Israel.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or interact with our services. It applies to all visitors, subscribers, and customers, regardless of location.

This policy complies with Israel's Protection of Privacy Law 5741-1981 and its Amendment 13 (effective August 14, 2025), as well as the EU General Data Protection Regulation (GDPR) where applicable to users in the European Economic Area.

What We Collect & Why

We only collect data that is necessary, adequate, and relevant to the purposes described below. The table below specifies each type of data, why we collect it, and our legal basis for doing so.

Data Type	Purpose	Legal Basis
Email address	Sending launch updates and early-access notifications to waitlist subscribers	Your freely given, explicit consent (opt-in form)
Name & contact details	Processing orders and delivering the physical planner	Contractual necessity — required to fulfil your order
Shipping address	Dispatching the physical planner to you	Contractual necessity
IP address, browser & device type, pages visited, session duration	Understanding how the website is used so we can improve it	Legitimate interest (anonymous analytics); or consent where required by applicable law
Correspondence content	Responding to support or general enquiries	Legitimate interest in providing customer service

      Voluntary provision: Providing your email address to join the waitlist is entirely voluntary. If you choose not to provide it, you simply will not receive launch notifications. Providing your name, address, and payment details at purchase is required to fulfil the contract — without it, we cannot process your order.
    

We do not collect credit card numbers directly (handled by our payment processor), government IDs, health or biometric information, or any data classified as "especially sensitive" under Amendment 13 or GDPR.

How We Use Your Data

We use your data only for the specific purposes stated at the time of collection:

Sending a single launch notification email to waitlist subscribers when we open for sales (no spam, no ongoing newsletters without separate consent)
Processing and fulfilling physical planner orders
Providing customer support and responding to enquiries
Improving website performance and user experience through anonymised analytics
Complying with applicable legal obligations

We will never sell, rent, trade, or otherwise share your personal data with third parties for their own marketing purposes.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

Sharing Data & International Transfers

We share your data only with the limited categories of service providers listed below, each acting as a data processor on our behalf and bound by data processing agreements that prohibit them from using your data for their own purposes.

Service Provider	Purpose	Location
Email marketing platform (e.g. Mailchimp / ConvertKit)	Managing the waitlist and sending launch emails	United States — covered by Standard Contractual Clauses or equivalent safeguards
Payment processor (e.g. Stripe / PayPal)	Securely handling purchase transactions	United States / EU — PCI-DSS compliant
Shipping & logistics provider	Delivering the physical planner	Israel / varies by destination country
Website analytics (e.g. Google Analytics)	Anonymised traffic analysis to improve the site	United States — covered by Google's data processing terms and Standard Contractual Clauses

Because some of these providers are located outside Israel and the European Economic Area, your data may be transferred internationally. We ensure that any such transfer is protected by appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission — in accordance with Amendment 13 and GDPR requirements.

Beyond the above, we will only share your data if legally required to do so (e.g., by court order or applicable law) or to protect our legal rights.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Specific retention periods are as follows:

Waitlist email address — retained until you unsubscribe or the product launches and you have been notified, whichever comes first. You may request deletion at any time.
Order and customer data — retained for 7 years from the date of purchase, as required by Israeli tax and accounting law.
Support correspondence — retained for 3 years from the date of the last communication, after which it is permanently deleted.
Anonymised analytics data — retained for up to 26 months, after which it is automatically deleted by the analytics platform.

At the end of each retention period, data is securely deleted or anonymised so that it can no longer be linked to you.

Data Security & Breach Notification

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

Encrypted data transmission (HTTPS/TLS) for all website communications
Access controls limiting who within our organisation can access personal data
Using reputable, security-certified third-party processors (see Section 4)
Regular reviews of our data handling practices

      No method of transmission over the internet is 100% secure. While we do our utmost to protect your data, we cannot guarantee absolute security. We encourage you to use a strong, unique password for any accounts and to contact us immediately if you suspect any unauthorised use of your information.
    

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Israel Privacy Protection Authority (PPA) without undue delay, and in any case within 72 hours of becoming aware of the breach, as required by Amendment 13 to the Protection of Privacy Law. If the breach is likely to result in a high risk to you personally, we will also notify you directly as soon as reasonably practicable.

Your Rights

You have the following rights in relation to your personal data. These rights apply under Israel's Protection of Privacy Law (as amended by Amendment 13, effective August 2025) and, where applicable, under the GDPR:

Right of Access — to request a copy of the personal data we hold about you, free of charge.
Right to Rectification — to request that inaccurate or incomplete data about you be corrected.
Right to Erasure ("Right to be Forgotten") — to request deletion of your personal data, where there is no overriding legal obligation for us to retain it.
Right to Data Portability — to receive your data in a structured, commonly used, machine-readable format, and to transmit it to another service provider (where technically feasible).
Right to Object — to object to the processing of your data on the basis of legitimate interests, or for direct marketing purposes. Upon such objection, we will stop processing your data for that purpose.
Right to Restrict Processing — to request that we limit the way we use your data in certain circumstances (e.g., while we verify the accuracy of a correction request).
Right to Withdraw Consent — where processing is based on your consent (e.g., the waitlist), you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing emails, use the unsubscribe link in any email or contact us directly.

To exercise any of the above rights, please contact us at contact@rising-gorilla.com. We will respond within 30 days. In complex cases we may extend this by a further 60 days, in which case we will notify you.

Right to Lodge a Complaint: If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

Israel: The Privacy Protection Authority (PPA) — www.gov.il/en/departments/the_privacy_protection_authority
EU/EEA residents: The data protection authority in your country of residence.

Cookies & Tracking Technologies

We use the following types of cookies on our website:

Strictly necessary cookies — essential for the website to function correctly (e.g., maintaining your session). These are placed without requiring your consent as they are technically necessary.
Analytics cookies — used to collect anonymised information about how visitors use our site (e.g., pages visited, time on site). These cookies are only placed with your consent, where required by applicable law.

We do not use advertising, targeting, or social media tracking cookies.

You can control and delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. For further information, visit www.allaboutcookies.org.

Children's Privacy

Our website and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@rising-gorilla.com and we will delete it promptly.

External Links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policy of any website you visit before providing personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date at the top of this page will always reflect the most recent version.

For material changes — those that significantly affect your rights or how we use your data — we will notify you by email (if you are on our waitlist or are a customer) at least 14 days before the change takes effect. We will never retroactively apply changes to data already collected without obtaining fresh consent where required.

We do not treat continued use of the website as consent to material policy changes.

Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or how we handle your personal data, please contact:

Email: contact@rising-gorilla.com
Data Controller: Rising Gorilla Planner, operated by Ofer Levi, Israel

We aim to respond to all requests within 30 days.