Privacy Policy

---

Last updated: June 12, 2026

1. Who we are

This website, culturalproperty.law, is operated by NGM Art & Cultural Property Law ("we", "us", "the Firm"), an Israeli law firm and the controller of the personal information collected through this site. It is currently built and hosted on the GoDaddy Websites + Marketing platform.

• Address:     Nicaragua 5, Jerusalem 96586, Israel
• Email for privacy matters: info@culturalproperty.law
• Phone:     +972‑53‑346‑8233

2. Which law applies to you

We aim to honour the protections of three regimes for every visitor: the Israeli Privacy Protection Law (PPL); the EU/UK GDPR (Section 12); and US state privacy laws (Section 13). Global Sections 1–10 apply to everyone.

3. What information we collect

Only where you choose to provide it:

• Contact form: name, email, telephone (optional), any file attachments you upload, and your message.
• Newsletter / email list: your email address, where you opt in.
• Staff/colleague accounts: name, email and login credentials for accounts we create; the public cannot self‑register.

We do not knowingly collect information from anyone under 18 through this site.

4. Cookies, reCAPTCHA and tracking

We use no analytics, advertising, or social‑media tracking cookies on this site. The site is built on GoDaddy's Websites + Marketing platform, and we have confirmed that GoDaddy's "Advanced Tracking", Google Analytics, Meta Pixel, Google AdSense, tag managers and similar tracking features are switched off. As the site runs on a third‑party platform, some cookies that are necessary for the site to function, and beyond our control, may still be set.

The one exception is Google reCAPTCHA, which protects our contact form from spam. reCAPTCHA sets cookies and collects information (including device and usage data and your IP address) which it sends to Google for bot‑detection/security purposes, under the Google Privacy Policy and Terms of Service. This processing is outside our control and involves a transfer of data to Google (see Section 8). If you prefer not to interact with reCAPTCHA, you can reach us by email, telephone or WhatsApp instead of using the form.

5. Why we use your information (purposes)

To respond to your enquiry and provide requested legal services; to send newsletters/updates where you opt in; to operate, secure and maintain the site; and to comply with our legal and professional obligations. Providing your information is voluntary; if you do not provide what the contact form requests, we cannot respond. (EEA/UK legal bases: Section 12.)

6. Who has access to your information

Your information may be processed on our behalf by service providers ("processors") under contract, including:

• GoDaddy — website hosting and the contact‑form/newsletter platform;
• Google — reCAPTCHA spam protection on the contact form;
• our professional advisers, where necessary.

We do not sell your personal information, and we do not share it for cross‑context behavioural advertising or transfer it to third parties for their own marketing.

7. Confidentiality

Information you send in connection with a potential or actual legal matter may be subject to attorney-client professional confidentiality, and we handle it accordingly. Note: do not send sensitive or confidential matter details through the website form; contact us directly to arrange a secure channel.

8. International transfer of information

Our service providers process data outside Israel, the EEA and the UK, including in the United States: GoDaddy (hosting/platform) and Google (reCAPTCHA). We rely on appropriate safeguards:

• Israeli law: consistent with the Transfer of Information Abroad Regulations, 5761‑2001, on the basis of your consent and/or written undertakings/data‑processing      agreements with the providers.
  
• EEA/UK: Standard Contractual Clauses, the EU‑US/UK Data Privacy Framework, or equivalent safeguards in the providers' terms.

By using the contact form (which loads reCAPTCHA) and submitting information, you consent to these transfers. Copies of the relevant safeguards are available on request at info@culturalproperty.law.

9. Data security

We maintain administrative, physical and technical safeguards appropriate to the sensitivity of the information, consistent with the Israeli Data Security Regulations (basic tier) and GDPR Art. 32, including access on a need‑to‑know basis and secure handling of form attachments. The site itself holds no client files.

10. How long we keep your information

We keep personal information only for as long as necessary for the purposes described in this policy and to meet our legal and professional obligations, after which it is deleted or anonymised. How long we keep it depends on the type of data and the context — for example: enquiries that do not become a client matter are kept for a limited period and then deleted; where an enquiry leads to a client engagement, the information is retained under the professional and legal rules that apply to client files (including limitation periods for potential claims and Israel Bar record-keeping requirements); and newsletter details are kept until you unsubscribe. We review our holdings at least annually and remove data that is no longer needed.

11. Your rights — Israel (PPL)

You have the right to inspect the information we hold about you (s.13), request correction (s.14), request deletion (subject to legal/professional retention duties), and opt out of marketing at any time. Contact info@culturalproperty.law.

12. Your rights — EEA & United Kingdom (GDPR / UK GDPR)

To the extent that the Firm is subject to the EU GDPR or the UK GDPR in respect of its processing of your personal information, the Firm will comply with the applicable obligations, including as set out below. Where those regulations do not apply to the Firm, this Section 12 creates no independent obligations and your information is handled under the other sections.

Where the GDPR/UK GDPR applies, our legal bases (Art. 6) are: steps prior to / performance of a contract (responding and providing services); your consent (newsletters; withdrawable); our legitimate interests (operating and securing the site, including spam prevention via reCAPTCHA); and legal obligation where applicable. Your rights (Arts. 15–22): access, rectification, erasure, restriction, portability, objection (including to direct marketing), and withdrawal of consent. We carry out no solely automated decision‑making with legal or similarly significant effects. You may complain to your local supervisory authority (UK: the ICO). Contact info@culturalproperty.law; we respond within one month.

13. Your rights — United States (California & other states)

To the extent that the Firm is subject to the California Consumer Privacy Act (as amended by the CPRA) or another US state comprehensive privacy law in respect of your personal information, the Firm will comply with the applicable obligations, including as set out below.

Where no such law applies, this Section 13 creates no independent obligations. As a matter of good practice, the Firm will honour requests from US visitors to exercise the following four rights regardless: the right to know/access, the right to correct, the right to delete, and the right to a portable copy. (The further opt‑out rights — sale, "sharing," profiling — are inapplicable because we do not engage in those activities, so this good‑practice commitment does not extend to them.) We do not sell or share your personal information. We will not discriminate against you for exercising these rights. To exercise or appeal, contact info@culturalproperty.law; you may use an authorized agent.

14. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.

15. Governing law

For Israeli‑law purposes, this policy is governed by the laws of the State of Israel. Nothing here limits mandatory rights you have under the GDPR/UK GDPR or applicable US state law.