Privacy & Cookie Policy – Musicali

Last updated: 22 October 2026

This policy explains what information is collected when you browse musicali.co.il or contact us, what we do with it, who we share it with, and what your rights are. It covers the website in all languages (Hebrew, English, Spanish, French and Russian) and enquiries that come through it or through our ads: contact form, WhatsApp, phone and email.

In short

• What you give us (name, phone, email, event date) is used to reply with a quote, coordinate your event and serve you.
• We use Google and Meta (Facebook/Instagram) measurement and advertising tools. They show us which ad brought an enquiry and let us show ads to people who already visited the site (remarketing). Some of this information is also sent to them directly from our server. When you submit a form, your email and phone are sent too, in hashed (one-way encrypted) form.
• We do not sell personal information, and we do not send advertising messages without your prior explicit consent.
• You can ask to access, correct or delete your information, or object to personalised advertising, by emailing [email protected].
• The “Cookie settings“ link at the bottom of every page lets you switch analytics and marketing tools off at any time (section 6). Visitors from the EEA, the UK and Switzerland are asked for consent in a banner before these tools run.

1. Who is responsible

“Musicali” is the business of Tal Rudovsky, Israeli licensed business (Osek Murshe) no. 300928181, Holon, Israel. Tal is the controller of your personal information and is responsible for how it is handled.

• Privacy contact: [email protected]
• Phone / WhatsApp: +972-54-764-9630

2. What we collect

2.1 Information you give us

You are not legally required to give us any information. It is your choice, but without contact details we cannot reply, and without event details we cannot quote or perform. We do not ask for sensitive information (such as health data), and we ask you not to send it. The website is not directed at children: bar/bat mitzvah enquiries come from parents.

2.2 Information collected automatically

• Technical data: IP address, device, browser and operating system, language, and approximate location (city/country) derived from the IP address.
• Activity on the site: pages viewed and for how long, scroll depth, video plays, clicks on WhatsApp/phone buttons, starting and submitting a form.
• Where you came from: referring site, ad or search, including ad click identifiers (e.g. Google gclid, Meta fbclid) and campaign parameters (utm).
• Identifiers stored in cookies and browser storage (section 6).

3. Why we use it, and on what legal basis

We do not make automated decisions that have legal or similarly significant effects on you.

4. Measurement and advertising tools: exactly what happens

4.1 Google Analytics 4 and Google Tag Manager (Google)

These measure visits and actions on the site. Google signals is enabled, so Google may associate data with the Google accounts of users who allowed this, for cross-device reporting and advertising. Analytics data is kept for 14 months. Remarketing audiences (e.g. “visited the bouzouki page and did not contact us”) are built in Analytics and shared with Google Ads. How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites

4.2 Google Ads (Google)

• Conversion tracking: if you arrive from an ad and click WhatsApp or phone, or submit a form, Google learns that the ad produced an enquiry.
• Enhanced conversions: when you submit a form, the email and phone number you typed are hashed (SHA-256) in your browser and only then sent to Google, to link the enquiry to the ad click. Hashing is not anonymisation: Google can match the hash to its own users.
• Closed bookings: when an enquiry becomes a booking, we report the ad click identifier and the booking value to Google, and sometimes the phone or email (hashed), so Google learns which ads bring customers.
• Remarketing: third-party vendors, including Google, show Musicali ads on sites across the internet and on YouTube. They use cookies and/or device identifiers to serve ads based on past visits to our website. Audience membership lasts 30 to 540 days.
• You can opt out of Google’s use of cookies for personalised advertising in your Ads Settings (https://myadcenter.google.com) or on the Network Advertising Initiative opt-out page (https://optout.networkadvertising.org).

4.3 Meta (Facebook, Instagram, WhatsApp)

• We and third parties, including Meta, may use pixels, cookies and similar storage technologies to collect or receive information from this website and elsewhere, and use it for measurement, ad targeting and ad delivery. How to opt out is explained at the end of this section and in section 6.
• The Meta Pixel on the site measures page views and enquiries. Meta’s automatic advanced matching is on: when you submit a form, the pixel hashes the contact details you typed (such as email and phone) in your browser and sends them to Meta.
• Conversions API from our own server: in addition to the pixel, and only when marketing is on (section 6), our web server sends Meta intent events directly: an engaged visit (one minute on a page or 75% scroll), a video play, a WhatsApp or phone click, starting a form, and submitting a form. Each event includes your IP address, browser user agent, Meta cookie identifiers (_fbp, _fbc), a random identifier stored by our site in the mz_eid cookie (hashed), and the page address. On form submission it also includes your email and phone, hashed with SHA-256 (never in clear text). The purpose is measurement and remarketing on Facebook and Instagram.
• Bookings: we report closed bookings to Meta (via Zapier, with hashed contact details for matching). For lists of enquirers and customers, see section 4.5.
• Your Meta ad preferences: https://www.facebook.com/adpreferences · Meta Privacy Policy: https://www.facebook.com/privacy/policy

4.4 WhatsApp and the reference number

When you click a WhatsApp button, the site adds a random 4-digit reference number to your message. The number is part of handling your enquiry: it tells us which page and service you contacted us about. Our own server records the click time, reference number, page, traffic source and campaign. If you came from an ad and have not switched marketing off in “Cookie settings” (and, in the EEA, the UK and Switzerland, if you accepted marketing), the ad’s click identifier is recorded too, so we can report a closed booking to Google (4.2). No IP address or other identifying details are stored in this log. The conversation itself takes place on WhatsApp (Meta) and is stored on Tal’s phone.

4.5 Lists of enquirers and customers (Google Customer Match and Meta Custom Audiences)

• What is uploaded: only hashed (SHA-256) contact details, i.e. email and/or phone number, of (a) people who sent us an enquiry through a website form in the last 24 months, and (b) customers who booked with us.
• Why: to show relevant Musicali ads on Google, YouTube, Facebook and Instagram to people who contacted us and have not booked yet, and to exclude customers who already booked, so they are not shown our ads.
• What Google and Meta do with it: they compare the hashed data with their own users. Under their terms, they use it only for this matching and delete data that did not match. We never give them the details in clear text.
• Visitors from the EEA, the UK and Switzerland: enquirers from these regions are not added to advertising lists without their consent.
• Opt out: email [email protected] and we will remove you from these lists within 30 days. You can also turn off personalised ads in your Google and Meta ad settings (section 6).

4.6 Other services that receive technical data

• YouTube and Vimeo: videos are shown as images. A youtube-nocookie.com or Vimeo player loads only when you press play, and from then on their privacy policies apply.
• Reviews: reviews from Mit4Mit and Google are displayed. Reviewers’ profile pictures load from Google servers, so Google receives your IP address.
• Accessibility widget (Elementor Ally): loaded from Elementor’s servers. Your settings (such as text size and contrast) are stored in your browser.
• Infrastructure and security: Cloudflare (content delivery and attack protection), our hosting provider (server logs: IP, browser, requested page) and Wordfence (attack blocking).

4.7 Microsoft Clarity (Microsoft)

Clarity shows us how the website is used so we can improve the pages: click and scroll heatmaps, and recordings of on-page movement (scrolling, clicks and mouse movement), without names or identifying details. Anything typed into form fields is masked and not collected. We do not use Clarity for advertising. Microsoft keeps recordings for up to 30 days and aggregated data for up to 13 months. Details: privacy.microsoft.com

5. Who we share information with

• The musicians performing at your event: name, phone, date, venue and schedule, only for the event.
• Service providers acting for us (processors): Google Workspace / Gmail / Google Sheets (email and booking records), Brevo (delivery of form emails), Zapier (booking reports), our hosting provider, Cloudflare, Wordfence, Elementor (website, forms, accessibility widget), Microsoft (Clarity – heatmaps and usage recordings), and the business’s accountant and invoicing software.
• Advertising and measurement platforms: Google and Meta, as described in section 4. They use some of the data under their own policies and responsibility, for example to improve their advertising services.
• Where required by law, or to protect our rights.
• If the business is transferred, the information transfers with it on the same terms.

We do not sell or rent personal information.

6. Cookies and browser storage

Cookies are small files that a website or a third party stores in your browser. We also use localStorage and sessionStorage, which work in a similar way.

Your choices:

• “Cookie settings“ (link at the bottom of every page) lets you choose at any time: All (analytics and marketing), Analytics only (Google Analytics and Microsoft Clarity), or Necessary only. Your choice is stored in the mz_consent cookie in this browser.
• In Israel and the rest of the world the tools run by default until you choose otherwise. Visitors from the EEA, the UK and Switzerland see a banner, and analytics and marketing tools do not run until they accept.
• What “off” means: Google tags (Analytics and Ads) run in Consent Mode with consent denied. They set no cookies, and Google may receive anonymous, cookieless signals without identifiers. The Meta Pixel does not load. Our server sends no Conversions API events to Meta and sets no mz_eid cookie. Ad click identifiers are not stored in mz_src. With “Analytics only”, only Google Analytics and Microsoft Clarity run. Google Ads, Meta and the Conversions API stay off.
• Browser settings: block or delete cookies (some features may stop working).
• Google Analytics opt-out add-on: https://tools.google.com/dlpage/gaoptout
• Ad settings: Google https://myadcenter.google.com · Meta https://www.facebook.com/adpreferences
• Industry opt-outs: EU https://www.youronlinechoices.eu · US https://optout.aboutads.info · https://optout.networkadvertising.org

7. International transfers

Musicali is based in Israel. Some providers store data outside Israel, mainly in the United States and the European Union: Google, Meta, Microsoft, Cloudflare, Zapier and Wordfence in the US, and Brevo in the EU. Transfers from Israel are made under the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001, to providers that commit to protecting the data. For visitors from the EEA: the European Commission recognises Israel as providing an adequate level of data protection. Onward transfers to US providers go to companies certified under the EU-U.S. Data Privacy Framework, or are covered by Standard Contractual Clauses.

8. How long we keep information

9. Security

The site uses HTTPS and is protected by Cloudflare and Wordfence. Access to accounts, records and the site admin is limited to Tal and the people who maintain the website for him. Emails and phone numbers sent to ad platforms are hashed. We follow the Israeli Privacy Protection (Data Security) Regulations, 2017. No system is perfectly secure. If a security incident requires notification, we will notify as the law requires.

10. Your rights

Under Israeli law (Privacy Protection Law, 1981) you can:

• access the information held about you (s. 13);
• request correction or deletion of information that is inaccurate, incomplete, unclear or out of date (s. 14);
• ask not to receive direct marketing and to be removed from a direct-marketing list (s. 17F);
• withdraw consent at any time;
• complain to the Israeli Privacy Protection Authority: https://www.gov.il/en/departments/the_privacy_protection_authority

If you are in the EEA, the UK or Switzerland (GDPR / UK GDPR / Swiss FADP), you also have the rights of access, rectification, erasure, restriction and data portability, the right to object at any time (including to direct marketing and remarketing), the right to withdraw consent (without affecting earlier processing), and the right to complain to your local data protection authority.

How: email [email protected] with details that help us find your information (your name, and the phone or email you used). We reply within 30 days. If we need to verify your identity, we will ask only for the minimum necessary.

11. Advertising messages

• Replying to your enquiry (a quote, follow-up questions about the event you asked about) is not advertising, and we do it on the channel you used.
• We do not send advertising messages (offers, newsletters, marketing updates) without your prior explicit consent. If we ever ask for that consent, every such message will be labelled as advertising and will include an easy way to unsubscribe.
• If you ever receive something from us you do not want, reply “STOP” on WhatsApp or email [email protected].

12. Other websites

The site links to WhatsApp, YouTube, Instagram, Facebook, Mit4Mit and Google. Their own privacy policies apply there.

13. Changes

We update this policy when we add a tool or when the law changes. The date at the top shows the latest version. We will announce material changes on the site.

14. Language

This policy is also published in Hebrew. If the versions conflict, the Hebrew version prevails, unless the law that applies to you requires otherwise.

15. Contact

Tal Rudovsky, Musicali · Osek Murshe no. 300928181 · Holon, Israel · [email protected] · +972-54-764-9630