Amendment 13 is already in force. Has your site caught up?
Since August 2025, a site that collects personal information — even a contact form counts — must tell visitors what is collected, why, and what their rights are. I go over the site and implement the technical side in code: notices, consent, and a policy that matches reality.
A fast, clear quote
What is usually not compliant
- Forms collecting a name and phone with no word on what happens to the data — the duty of notification applies exactly there.
- Facebook and Google pixels running with no disclosure, though they collect data like anything else.
- A template privacy policy describing some other site — or none at all.
- A pre-ticked marketing checkbox, or one consent that bundles everything together.
- No route to request access to or deletion of data — a right the law gives the visitor.
What I actually do
Mapping what the site actually collects
Forms, pixels, analytics, cookies, logs. You cannot give notice about what you have not mapped.
Notification in code, on every form
A short, clear notice beside every collection point: what is collected, why, and the rights. Attached to the form itself, not buried in the footer.
Consent that does its job
Separate, un-pre-ticked marketing consent, cookie and pixel disclosure, and a record of what the visitor agreed to.
A privacy policy that matches reality
The page is written from what the site actually does, and the site actually does what the page says. Final legal wording is a lawyer's call — I make sure the technical reality stands behind it.
In code, not a generator
Same as accessibility: a sticker does not solve it. A generator that pastes a generic policy onto the site does not change the fact the form still collects without notice and the pixel still fires without disclosure. I fix what the site does, not just what it declares. And in full transparency: I am a developer, not a lawyer — your counsel completes the legal side, and I hand them a site they can stand behind.
Related work
Noviks
Case studyDesigned and developed Noviks, a premium e-commerce website, ensuring a seamless shopping experience with a sleek, user-friendly interface. Leveraged Shopify's capabilities to create a high-performance, visually engaging, and fully responsive platform that enhances user engagement and drives conversions.
noviks.co.il
Designed and developed the e-commerce website for Pure Diamonds, a premium Israeli jewelry brand specializing in diamond rings, earrings, necklaces, and bracelets. The site delivers a luxurious shopping experience with a sleek, elegant interface that highlights their iconic collections and craftsmanship.
purediamonds.co.il
How it works (no surprises)
Intro call
A fast, clear quote
Development with regular updates
Launch & support
Frequently asked questions
Yes. A name and phone number are personal information, and the moment the site collects them the duty of notification applies. For a site like that the work is short — but it is not optional.
Amendment 13 is Israeli law, inspired by GDPR principles, and applies to Israeli sites regardless of Europe. If you also sell to Europe, those are two separate obligations best handled together.
The amendment requires an officer only for certain kinds of organisations — that question is answered with legal counsel. I handle the site side, which applies to everyone.
A policy is a declaration. If the site in practice collects things it does not mention, or does not honour the rights it promises, the declaration is not worth much. First align the site, then the wording.
The amendment significantly expanded the Privacy Protection Authority's enforcement powers, and there is exposure to lawsuits as well. I deliberately avoid quoting amounts — they depend on circumstances, and that is what legal counsel is for. What is certain: compliance costs less than the alternative.
Tell me what you're building.
A short message is enough. I'll get back within a business day — with a real answer, not a sales script.