Privacy Policy

Last updated: September 4, 2026

This policy explains what personal data Metalgrass LTD (“we”, “us”) collects through this website, why, and what rights you have. We process personal data in line with the EU/UK GDPR and applicable Israeli privacy law.

What we collect

• Information you give us — name, email address, and any details you submit through our contact forms, newsletter sign-up, or when you order a product (including billing details and order history).
• Information collected automatically — IP address, browser and device type, pages viewed, referring site, and similar usage data, via our analytics (see below).

Why we use it

• To deliver the products and services you request, issue invoices, and provide support.
• To send newsletters and marketing emails — only if you have opted in.
• To operate, secure, and improve the website, and to understand how it is used.
• To meet legal, tax, and accounting obligations, and to prevent fraud.

Our legal bases are: performance of a contract (orders and support), consent (marketing emails, non-essential cookies), legal obligation (tax and accounting records), and legitimate interests (site security and improvement).

Analytics

We use Matomo Analytics (Matomo Cloud) to measure website traffic. Matomo acts as our data processor and does not sell or reuse your data. Analytics data is stored on EU servers.

Cookies

Cookies are small files stored by your browser. We use:

• Essential cookies — needed for the site and shopping cart to work. These are always active.
• Analytics cookies — set by Matomo, and only if you consent via our cookie banner.

You can change or withdraw your cookie choice at any time through the cookie banner, and you can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.

Payments

Payments are handled by PayPal and Stripe. Your card details are entered directly with them and are never seen or stored by us. Their processing is governed by their own privacy policies (PayPal, Stripe).

Newsletters

We send newsletters and marketing emails only to people who have actively opted in. Every email includes an unsubscribe link, and you can also ask us to remove you at any time. We use a third-party email delivery provider to send these messages.

Sharing your data

We do not sell your personal data and we do not allow others to do so. We share it only with service providers who work on our behalf — website hosting, analytics, payment processing, and email delivery — under agreements that limit them to our instructions. We may also disclose data where required by law.

Retention

We keep order and invoice records for as long as required by tax and accounting law. Contact and newsletter details are kept until you unsubscribe or ask us to delete them. Analytics data is retained for up to 24 months.

Your rights

You have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time. To exercise any of these, contact us through the website contact form. You also have the right to complain to your local data protection authority.

Security

We use reasonable technical and organizational measures to protect your data, including encrypted (HTTPS) connections. No transmission over the internet can be guaranteed fully secure.

Third-party links and social media

Our sites link to third-party websites and social platforms that we do not control. Their own privacy policies apply to any data you share with them.

Changes

We review this policy regularly and will post any changes on this page with an updated date.

Contact

Metalgrass LTD — please use the website contact form for any privacy question or request.