Privacy policy

Last updated: 30 October 2026

This page explains what personal information Sami Bakery collects through this website and its table, booking and work screens, why, and what you can ask us to do with it.

Who is responsible

Sami Bakery runs this service and is responsible for your information (the database owner under the Israeli Privacy Protection Law, 5741-1981).

Contact: 046928844 · דרך יפו 137, חיפה

What we collect

Table bookings: your name, phone number, number of guests, date and time, and any occasion or note you choose to add.

Table menu (QR code): no personal information. A cookie on your device remembers the language you chose.

On your own device: your name and phone number are remembered in your browser to make the next booking faster. Tap “Not you?” on the booking page to change them.

Technical information: to protect the service from abuse we keep short-lived counters keyed by a scrambled form of your IP address; we use Vercel Web Analytics (anonymous page statistics, no cookies) and Vercel BotID (automated-traffic detection).

Restaurant staff: staff accounts and attendance (including the location at clock-in) are covered by a separate notice given at work.

Why we use it

To take and manage your booking, prepare your table, and contact you about it.

To keep the service secure and working, and to stop abuse.

We do not use booking details for marketing. Marketing messages are sent only to people who join our club and agree to them separately.

Who we share it with

We never sell personal information.

Service providers process it for us under contract: Vercel (hosting, EU and US), Neon (database, Frankfurt, EU), and Ably (live updates of the staff screens, without guest details). When we start sending booking messages on WhatsApp, Meta will process your phone number for that.

We may disclose information when the law requires it.

How long we keep it

Booking details (name, phone, note) are erased 12 months after the visit; only the date and number of guests remain, for statistics.

Security records are kept for 30 days or less.

Records the law requires us to keep, such as supplier invoices and staff attendance, are kept for 7 years.

Your rights

You may ask to see the information we hold about you, to correct it, or to delete it. Contact us by phone; we will answer within 30 days.

You can change or cancel a booking yourself with the link you received when booking.

If you are not satisfied with our answer, you may complain to the Israeli Privacy Protection Authority.

How we protect it

All connections are encrypted. Only staff who need the information can see it, and sensitive changes are recorded in a log that cannot be altered.

Changes to this policy

We will update this page when our practices change. The date at the top shows the latest version.