Privacy Policy

Who we are

This website is operated by A.R. Eland Tours Ltd. (company registration number 514460963), 11 Kadish Luz Street, Kiryat Motzkin, Israel. We are responsible for the personal data collected through this website.

Contact for privacy questions: office@elandandrei.com.

What we collect

General contact form: name, email address, and optionally phone, company or organisation, travel type, destination, group size, travel dates and your message.

Agency quotation form (Israel DMC page): agency or company name, contact name, role, email, phone, country, travel dates, group size, destinations, tour type, hotel category, guide language and your message.

Technical data: when you submit a form, your IP address is sent to Cloudflare Turnstile for the anti-spam check, and our server keeps it temporarily in working memory to block repeated submissions within 60 seconds. It is not written to a database or included in the email, and it is discarded when the server instance restarts.

Analytics data (only if you accept analytics cookies): Google Analytics receives pseudonymous usage data such as pages visited, device and browser type, approximate location derived from IP address, and the fact that an enquiry was sent (form type, page and site language only — never your name, email or message).

Why we use it

To answer your enquiry and prepare quotations at your request.

To protect our forms against spam and abuse.

To measure website use and enquiry volumes with Google Analytics — only with your consent, which you can withdraw at any time via “Cookie settings” in the footer. Separate cookie-free Lovable visitor measurement is described below.

Lovable visitor analytics

We also use Lovable's visitor analytics on our published website. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors and clicks on buttons and links. Clicks are identified by their position on the page, not their text. We do not send additional custom app events to Lovable.

This measurement uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors or recognise returning visitors. Each visit is counted separately. This does not change the cookies and data processing of Google Analytics, our forms or our other providers described in these policies.

Our worldwide consent interface passes your analytics choice to Google Consent Mode. Click tracking waits for analytics acceptance and stops after rejection or withdrawal. It is never recorded when your browser sends Global Privacy Control, even if you accept. Page visits, time on page, page speed and errors are recorded for every visitor before any choice and after rejection, without cookies and without identifying anyone. Google Analytics is separate: it loads and sends data only after analytics acceptance.

Detailed Lovable analytics data is kept for 90 days and daily summaries for a year. Your consent choice is stored persistently in your browser until you change it, clear site data or we change the consent version.

Lovable collects this data for us. https://lovable.dev/privacy explains how it handles it. Lovable describes processing through its service providers in several countries, including the United States; we do not claim that this site's visitor analytics is processed exclusively in Israel or the European Union. Its privacy policy and subprocessor information explain its international processing. Whether this cookie-free measurement requires consent or other notices under the laws applicable to you is a legal question; our interface does not stop the basic counting described above.

Who receives your data

Resend (email delivery service) transmits the contents of your form to our enquiry mailbox, which is hosted by Yahoo. Enquiries are managed by email only; we do not use a CRM system.

Cloudflare (Turnstile) checks that a form is submitted by a human and receives your IP address and browser signals for that purpose.

Google (Google Analytics) receives analytics data only if you consent.

The website is hosted on Lovable / Cloudflare infrastructure, which processes standard server request data.

Travel suppliers (such as hotels, guides and transport providers) receive personal information only when necessary to book and deliver the travel services you request. We do not routinely share your details with suppliers when preparing a preliminary quotation.

International transfers

Some of these service providers process data in the United States and other countries outside Israel and the European Union.

How long we keep it

We do not currently operate a fixed automatic deletion schedule for enquiry emails. They are kept in our mailbox for as long as needed to handle your enquiry and any resulting booking.

Google Analytics event-level data (linked to cookies and device identifiers) is retained for 14 months, as configured in our Google Analytics account, and is then deleted automatically by Google. Aggregated reports are not affected.

Your rights

Depending on the law that applies to you, you may request access to, correction or deletion of your personal data, object to or restrict its processing, request a copy of your data, and withdraw consent at any time. Write to office@elandandrei.com.

We handle every request in accordance with applicable law. Where the law, a legal claim or a contractual obligation (for example, booking or accounting records) requires us to keep certain information, we may retain it and will explain this in our reply.

You may also have the right to complain to a data protection authority, such as Israel's Privacy Protection Authority or the authority in your country of residence.

Changes

We may update this policy. The date at the top shows the latest version.