Privacy policy
Last updated: 11 October 2026
This Privacy Policy explains how Phytoguard Systems Ltd ("Phytoguard", "we", "us" or "our") collects, uses, shares and protects personal data when you visit www.phytoguardsystems.com or phytoguardsystems.com (the "Site"), contact us, or otherwise interact with us in connection with the Site.
We have written it to meet the requirements of the EU General Data Protection Regulation 2016/679 ("GDPR"), the UK GDPR and Data Protection Act 2018, Israel's Protection of Privacy Law, 5741-1981, as amended (including Amendment No. 13) and its regulations, the Swiss Federal Act on Data Protection, and comparable laws in other countries where they apply.
Summary
- We collect only what you send us (for example, through the contact form) and the minimum technical data needed to run and secure the Site.
- We use your details to answer your inquiry and manage any resulting business relationship. We do not sell personal data.
- Analytics cookies are off by default and load only if you click "Accept all". You can change your choice at any time.
- You can ask to access, correct or delete your data by emailing info@phytoguardsystems.com.
1. Who is responsible for your data
The controller (database owner) responsible for your personal data is:
Phytoguard Systems Ltd
Company number: 516906260
Registered address: 10 Ibn Hayyan St, Kabul 2496300, Israel
Email: info@phytoguardsystems.com
For any question about this policy or your data, contact us at the email above. If we appoint a data protection officer or an EU or UK representative, we will publish their contact details here.
2. Personal data we collect
2.1 Data you give us
- Contact form: full name, business email address, organization (optional), inquiry type, the content of your message, your acknowledgement of this policy, and, only if you tick the box, your choice to receive company updates.
- Email and other correspondence: your name, contact details, job title and anything else you choose to include when you write to us or meet with us.
Please do not send us sensitive personal data (for example, health data) or confidential technical or commercial information through the Site. If detailed discussions are needed, we will first agree a confidentiality agreement with you.
2.2 Data collected automatically
- Server and security logs: the Site is hosted on Microsoft Azure. When you visit it, Microsoft automatically processes technical data such as your IP address, browser type and version, the pages you request, the referring page, and the date and time of the request, in order to deliver the pages and protect the service against abuse. We do not use this data to identify you.
- Consent record: your cookie choice and the date you made it, stored in your own browser.
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information about how you use the Site, such as pages viewed, time on page, approximate location (country or city), device type and browser. See our Cookie Policy.
2.3 Data from other sources
If you are a representative of a business we work with or are considering working with, we may obtain your business contact details from your colleagues, public company websites or professional networking sites, to manage that relationship.
3. How we use your data and our legal bases
Under the GDPR and UK GDPR we must have a legal basis for each use of personal data. We rely on the following:
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your inquiry and following up on discussions about NemaGuard Duo, partnerships, investment, media or other topics | Contact form and correspondence data | Our legitimate interest in responding to business inquiries and developing our business; or taking steps at your request before entering into a contract (Art. 6(1)(f) and 6(1)(b)) |
| Managing business relationships, contracts and confidentiality agreements | Contact and correspondence data | Performance of a contract with you or your organization, or our legitimate interests (Art. 6(1)(b) and 6(1)(f)) |
| Sending occasional company updates by email | Name and email address | Your consent, given by ticking the optional box (Art. 6(1)(a)). You can unsubscribe at any time. |
| Operating, securing and maintaining the Site, and preventing abuse and spam | Server and security logs | Our legitimate interest in running a secure website (Art. 6(1)(f)) |
| Measuring and improving how the Site is used | Analytics data | Your consent (Art. 6(1)(a)); consent is also required for the related cookies under the ePrivacy Directive and UK PECR |
| Complying with legal obligations and responding to lawful requests from authorities | Any relevant data | Legal obligation (Art. 6(1)(c)) |
| Establishing, exercising or defending legal claims | Any relevant data | Our legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us for more information about this balancing, and you have the right to object (see section 8).
Is providing your data mandatory? No. You are under no legal obligation to give us personal data. However, if you do not provide your name, email address and message, we will not be able to respond to your inquiry.
Automated decisions. We do not make decisions about you based solely on automated processing, and we do not use your data for profiling.
4. Who we share your data with
We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising. We share it only with:
- Service providers (processors) that act on our instructions under written contracts requiring them to protect your data, namely:
Provider Service Location of processing Microsoft Corporation / Microsoft Ireland Operations Ltd (Azure Static Web Apps) Website hosting, content delivery and security logs Global content-delivery network; service region United States (East US 2) Microsoft (Azure Functions) Receiving contact form submissions and forwarding them to our mailbox European Union ([Azure region, e.g. Germany West Central]) Microsoft (Microsoft 365) Business email and document storage [Data location of our Microsoft 365 tenant] Google Ireland Limited / Google LLC (only with your consent) Google Analytics EU and United States - Professional advisers, such as lawyers, auditors and accountants, under duties of confidentiality.
- Prospective partners, investors or acquirers, and their advisers, in connection with a potential partnership, financing, merger, acquisition or sale of assets, subject to confidentiality obligations.
- Public authorities, regulators or courts, where we are required by law or need to protect our rights, property or safety, or those of others.
5. International transfers
We are based in Israel. The European Commission and the UK Government recognize Israel as providing an adequate level of data protection. Our main service provider is Microsoft. Some processing takes place in the European Union and some in the United States and other countries where Microsoft operates its global network. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on:
- the recipient's certification under the EU-U.S. Data Privacy Framework, its UK Extension or the Swiss-U.S. Data Privacy Framework (Microsoft and Google are certified); or
- the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where relevant, and supplementary measures where needed.
Transfers of data from Israel abroad are made in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. You can ask us for more information about the safeguards we use.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Inquiries that do not lead to a business relationship | Up to 3 years from our last contact |
| Business relationship and contract records | For the duration of the relationship and up to 7 years afterwards, in line with limitation periods and accounting obligations |
| Mailing list (company updates) | Until you unsubscribe or withdraw consent |
| Server and security logs | As set by Microsoft for the Azure service, generally no longer than 12 months |
| Google Analytics data | 14 months |
| Cookie consent record (in your browser) | 12 months, after which we ask again |
We may keep data longer where required by law or to establish, exercise or defend legal claims. When data is no longer needed we delete or anonymize it.
7. How we protect your data
We use appropriate technical and organizational measures to protect personal data, in line with Israel's Privacy Protection (Data Security) Regulations, 5777-2017 and Article 32 GDPR. These include encrypted connections (HTTPS with HTTP Strict Transport Security), a restrictive Content Security Policy, access restricted to staff who need it, multi-factor authentication on our business accounts, and contractual safeguards with our providers. No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the competent authorities as required by law.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and receive a copy;
- Correct data that is inaccurate, incomplete or out of date;
- Delete your data ("right to be forgotten");
- Restrict how we use your data;
- Object to our use of your data based on legitimate interests, and to direct marketing at any time;
- Data portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organization;
- Withdraw consent at any time, without affecting processing carried out before withdrawal. For analytics, use "Cookie settings" in the footer; for emails, use the unsubscribe link or contact us.
To exercise any right, email info@phytoguardsystems.com. We may need to verify your identity before acting on your request. We will respond within one month (or within 30 days under Israeli law), and may extend this where the law allows, in which case we will tell you why. We will not charge a fee unless a request is clearly unfounded or excessive.
Complaints. If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work, or where an alleged infringement took place. In Israel this is the Privacy Protection Authority; in the UK, the Information Commissioner's Office; in the EU, your national data protection authority.
9. Additional information for residents of the United States
Some U.S. state privacy laws give residents rights to know, access, correct and delete personal information, and to opt out of the "sale" or "sharing" of personal information or targeted advertising. In the past 12 months we have collected the categories of personal information described in section 2 (identifiers, professional information, internet activity information) for the purposes in section 3, and disclosed them only to the recipients in section 4. We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising, and we do not use or disclose sensitive personal information. We honour Global Privacy Control signals: if your browser sends one, analytics will not load unless you actively opt in. You may exercise your rights, or appoint an authorized agent to do so, by contacting us as described in section 8. We will not discriminate against you for exercising your rights.
10. Children
The Site is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we will delete it.
11. Links to other websites
The Site may link to websites operated by others. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. If we make material changes, we will highlight them on this page and, where appropriate, notify you directly.
13. Contact us
Phytoguard Systems Ltd, 10 Ibn Hayyan St, Kabul 2496300, Israel
Email: info@phytoguardsystems.com
This policy is provided in English. If it is translated, the English version prevails to the extent permitted by law.