Privacy Policy
Last updated: September 26, 2026
This policy explains what information the RunWay service and website collect, why, who sees it and what your rights are. It follows Israel’s Protection of Privacy Law, 5741-1981, as amended (including Amendment 13), and its data security regulations.
1. Who is responsible for the information
The Service is operated by RunWayTech. There are two kinds of information, each with a different party responsible for it:
- Information about the businesses’ own clients (for example, the clients of a hair salon that uses RunWay): the business is the controller and decides what is collected and why. We hold and process it on the business’s behalf only. Requests about this information should go to the business first.
- Information about subscribing businesses and website visitors: for this information, we are the controller.
2. What we collect
Inside the system, entered by the business: clients’ names, phone numbers, email addresses and dates of birth; appointments, treatments and payments; WhatsApp messages sent and received; and, for businesses that choose to use them, signed declarations (such as a health declaration).
About the business and its team: names, contact details, usernames, passwords (stored only as an encrypted hash) and a sign-in log with IP address and browser type, for security.
On the marketing website: the details you leave in the contact form (name, phone, email, business name). The website does not currently use analytics or advertising tools.
3. How the information is used
- To provide the Service to the business: appointments, client files, reminders and messages.
- To secure the Service and prevent misuse.
- For billing, support and contacting the business.
- To get back to people who left their details on the website.
4. Do you have to provide it?
There is no legal obligation to provide this information. Without basic details (such as a name and phone number), a business cannot book an appointment or send a reminder, and without contact details we cannot reply to an enquiry from the website. Agreeing to receive WhatsApp messages is optional and can be withdrawn at any time by replying “STOP”.
6. Security
- All communication is encrypted (HTTPS).
- Signed declarations, two-step verification secrets and access keys are stored encrypted (AES-256), as are backups that leave the server.
- Each business’s data is separated, and safeguards in the code and the database prevent access from another business.
- Two-step verification, lock-out after failed attempts, and a sign-in log.
- Daily backups, and notification of the relevant parties after a serious security incident, as the law requires.
7. How long information is kept
Information inside the system is kept for as long as the business uses the Service. After the Service ends, the business can download its data for 30 days, after which it is deleted (backups are deleted in the normal cycle). Website enquiries are kept for up to two years, or deleted sooner at your request. Security logs are kept for up to one year.
8. Your rights
By law, you may see the information held about you and ask for anything inaccurate, incomplete, unclear or out of date to be corrected or deleted. You may also ask us not to use your information for marketing.
If you gave your information to a business that uses RunWay, please contact that business first. For any other request, or if the business does not reply, contact us at support@run-way.online. We will reply within 30 days. You may also complain to Israel’s Privacy Protection Authority or to the data protection authority where you live.
10. Minors
The Service is intended for businesses. A business that keeps information about minors in the system (for example, students or young trainees) is responsible for obtaining parental consent where required.
11. Changes to this policy
We will update this policy when something changes and will notify businesses in advance of any material change. The date of the last update appears at the top of the page. This policy is published in Hebrew, English and French; if the versions differ, the Hebrew version prevails.
12. Contact
For any privacy question: support@run-way.online, or by post: RunWayTech.