Legal
Privacy policy
Last updated: 24 October 2026 · Version 2026-10-24
This policy explains what personal data Golden Hour Estates collects, why, and your rights. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and the Israeli Privacy Protection Law.
Controller
Niv Bretschneider, trading as Golden Hour Estates, Israel. Contact for any privacy question or request: nivbret@gmail.com.
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, company, email, phone, country | Taking and managing your order, contacting you about it | Contract |
| Property photos, property name, town, details you write | Making your film and route map | Contract |
| Payment confirmation from PayPal (amount, status, PayPal order ID) — never your card details | Recording payments, accounting and tax | Contract, legal obligation |
| Consent records (time, wording, browser) for portfolio and marketing emails | Proving and respecting your choices | Consent, legal obligation |
| Anonymous visit statistics (pages viewed, country, device type) | Understanding and improving the website | Legitimate interest |
We send marketing emails only if you ticked the box that allows it, and every email has an unsubscribe link. We do not sell your data, and we do not use your photos for anything except your film (and our portfolio, only if you allowed it).
Cookies
This website does not use advertising or tracking cookies. Visit statistics come from Vercel Web Analytics, which works without cookies and does not identify you. When you pay, PayPal sets its own cookies under its own privacy policy. Your browser may remember whether you have seen our opening animation (session storage) — this is not sent to us.
Who processes your data for us
| Provider | What for | Location |
|---|---|---|
| Vercel Inc. | Website hosting, anonymous analytics | USA / global |
| Supabase Inc. | Order database and photo storage | Singapore |
| PayPal | Payments | EU / USA |
| Higgsfield AI | AI image and video generation from your photos | USA / EU |
| Anthropic (Claude) | AI assistance in planning and checking films | USA |
| Google (Gmail) | Email communication | Global |
Some providers are outside the EU/UK. Where that is the case, the transfer relies on adequacy decisions (Israel has one from the European Commission), the EU–US Data Privacy Framework where the provider is certified, or the European Commission’s standard contractual clauses included in the providers’ data processing terms.
How long we keep it
- Photos and films: for 12 months after delivery so we can help with re-downloads and changes, then deleted from our storage — or sooner on request.
- Order and payment records: 7 years, as required for tax and accounting.
- Marketing consent: until you unsubscribe, plus the record that you did.
Your rights
You can ask us to access, correct, delete, restrict or port your data, object to processing based on legitimate interest, and withdraw consent at any time (this does not affect earlier processing). Email nivbret@gmail.com; we reply within one month. You can also complain to your local data-protection authority, or in Israel to the Privacy Protection Authority.
Security
Access to orders is limited to the owner of the business, who signs in with a one-time email link; data is encrypted in transit and at rest by our providers. Your order page is reachable only through its private link — please do not share it publicly.
Children
The service is for businesses and adults. We do not knowingly collect data about children.