Who is responsible
notalone.org.il is operated for את לא לבד, registration number 580826758, also known as NOTALONE and You Are Not Alone. The organisation determines the purposes of processing and is the controller of the personal information. Contact address: 8 Mohilever Street, Rishon LeZion, Israel. Privacy and rights enquiries: support@notalone.org.il.
Your choice and consent
You are not legally required to complete a form on this website. You choose whether to contact us and what optional information to provide. The support form requires a name or chosen name, a safe contact method, the corresponding phone number or email, instructions about leaving messages, a nine-digit Israeli identity number and consent to processing. The number is requested for a later eligibility check for women who hold an Israeli identity card, including those with qualifying status in a graduated procedure. Citizenship is not required. A number or card photo alone does not verify the document or current status; an authorised staff member checks them. You may omit document photos from the initial form and arrange a safe way to provide them later. Without required details the online form cannot be sent.
Form-processing consent uses a separate, initially unchecked box. It is not consent to advertising, newsletters, or publication of your story or photographs. Permission for the external map is managed separately in cookie settings.
Information we receive
The support form receives contact details, city, languages, safe contact times, requested support and a description of the situation. If you choose, this may include violence, health, mental health or family circumstances. This is sensitive information; please provide only what is necessary for your request.
The volunteer form collects contact details, languages, experience, skills, qualifications, interests, availability and motivation; its identity-number and other supplementary fields remain optional. The support form requires an Israeli identity number. You may optionally attach photos of the front and back of the card and its appendix for a staff review of your status. The appendix may show your address and family members; you may cover details unrelated to the check if the necessary details remain readable. Photos are used to consider the enquiry and are not published. Avoid sending information about other people unless necessary.
We also retain the reference number and date, form language, consent version and wording, a policy snapshot, processing status and authorised staff notes. The server and hosting provider may receive IP addresses, request times, page addresses, browser details and technical errors to deliver, protect and troubleshoot the website.
Purposes
We use information to consider enquiries, make safe contact, coordinate possible support, discuss suitable volunteering, document interactions, prevent misuse and meet legal duties. Submitting a form does not guarantee a particular service or acceptance as a volunteer. We do not sell form information or use it for targeted advertising. The website does not make automated decisions about access to support.
Who may receive information
Access is intended for authorised team members who need it to handle an enquiry and technical providers supporting hosting, maintenance and security. Sharing with a professional or partner for support will be discussed separately unless another legal basis applies. A legal duty, judicial requirement or legally recognised need to protect life and safety may require necessary disclosure to competent authorities. Absolute confidentiality cannot be promised in those situations.
When automated photo screening is enabled, a document image with EXIF metadata removed is sent to OpenAI to assess document type and legibility. OpenAI may process information outside Israel and retain it under its abuse-monitoring rules. This screening does not establish authenticity or a person’s status; a staff member makes the final decision. If the service is unavailable or uncertain, the photo is referred for staff review.
Beneficiary forms, prepared PDFs and attached document photos are automatically copied to the organisation’s Google Drive account; form data and links are recorded in Google Sheets. Volunteer forms are not currently exported to Google. Google may process transferred information outside Israel. Google Maps is a separate external service loaded only with your permission. Once loaded, Google may process technical data and cookies under its own policy, including outside Israel. The hosting infrastructure’s location and contractual safeguards require separate organisational verification; this policy does not claim that all information is stored only in Israel.
Retention and security
Form answers, consents, internal notes and uploaded document photos are encrypted at application level and stored outside the public website; photos are converted to JPEG without EXIF metadata before storage. The PDF is also encrypted and lists attached photo filenames without embedding the images. Only authorised staff can access documents through an administration area with two-factor authentication, role-based access and access logs. HTTPS and technical activity records are used. Automatic export to Google is enabled for beneficiary forms and disabled for volunteer forms. No system can guarantee complete protection against every threat. When moving from computer to phone, the QR link is valid for 20 minutes and only permits photo uploads for this form; it does not transfer the ID number or form answers. Accepted photos are temporarily stored in encrypted form until the form is submitted. If it is not submitted, a scheduled task deletes the temporary copies after two hours. Automated quality checks filter out some unclear photos but cannot confirm that every character is readable and do not replace staff review.
Retention depends on the purpose of an enquiry, the duration of the relationship, evidence of consent, applicable duties and the protection of rights in a dispute. A single retention period for all records and scheduled automatic deletion are not currently configured. Deletion requests are assessed individually; legal limits, ongoing support and the need to preserve evidence may prevent immediate deletion. Closing an enquiry does not itself delete it. Backups and logs may be held separately; we do not promise immediate deletion of every copy.
Your rights and requests
Under Israel’s Protection of Privacy Law, you may request access to your personal information in a database and correction or deletion of information that is incorrect, incomplete, unclear or out of date, subject to statutory conditions and exceptions. The law does not create an unconditional general right to erase all information. Additional rights may apply where other law governs a particular processing activity.
Email support@notalone.org.il with your reference number, the nature of your request and a safe way to reply. Initially, please do not attach an identity-document copy or sensitive personal history. We may request proportionate identity verification to prevent disclosure to others. Requests are handled within applicable legal deadlines; access requests are generally answered within 30 days. You may ask us to stop contacting you or withdraw consent for future processing based on it. This does not invalidate prior lawful processing or mandatory retention.
You may also contact Israel’s Privacy Protection Authority: https://www.gov.il/he/departments/the_privacy_protection_authority. This policy does not limit the right to approach a competent authority or court.
Safe use and updates
Do not send passwords, payment details, full medical files or material unnecessary for initial contact. If you are under 18, do not send sensitive information through the general form without first discussing a safe way to contact us. In immediate danger, contact emergency services.
The revision date appears on this page. Material changes to processing purposes or methods require updated notices and, when necessary, fresh consent. The Russian, Hebrew and English versions describe the same policy. Please report any discrepancy; translation cannot reduce rights provided by mandatory law.