Privacy Policy

This policy is written by Hoshen Car Ltd., company number 514393511, of Nahal Dolev 19, Beit Shemesh ("the Company", "we"), which operates the website www.hoshencar.co.il ("the site"). The Company is the owner and holder of the database, within the meaning of the Privacy Protection Law, 5741-1981.

To contact us on any matter relating to privacy: email office@hoshencar.com  ·  telephone 02-9999052  ·  post: Nahal Dolev 19, Beit Shemesh.

This document explains what personal information we collect about you, why, to whom it is passed, how long it is kept, and what you are entitled to demand in relation to it. It applies to use of the site and to the rental services the site leads to.

This document does not constitute your consent. Consent is given separately and expressly, in the ways described in section 6.

• Full name, telephone and email - when booking, making an enquiry or registering. Required in order to complete a booking.
• Identity card number - for signing in to your personal area and for booking. Required, for identification and for entering into the rental agreement.
• Driving licence number and licence tenure - required, to check eligibility under the rental and insurance terms.
• Address - for the rental agreement and the invoice. Required for the rental itself.
• Payment method details - for the deposit and the charge. Required for the rental itself.
• Free-text enquiry content - in the contact form. Optional.

Before providing another person's personal details, please make sure that their consent has been obtained.

The Company maintains its own database, on its servers, of site usage events, and the measurement is carried out at two levels.

For every visitor, the events themselves are recorded, as separate rows and without any identifier - no visitor identifier, no visit identifier and no ordering between them - so that they cannot be assembled into any particular person's path. This is an operational measure of the site itself: how many searches were made, how many bookings were completed, and where people stop.

For a visitor who has given consent, an ordered chain of events is recorded in addition - a visitor identifier, a visit identifier and the order of actions - and that is what makes it possible to see a complete path. Two items in the list below are recorded only at this level: the arrival source, and the sign-in events.

The information recorded is as follows:

• Pages - the path viewed (without the query string), the page title, and which page or site you arrived from.
• Behaviour on the page - how long the page was visible on screen, and how far you scrolled through it (as a percentage).
• Path - the order of actions within the visit.
• Searches and bookings - pick-up and return branch, dates, number of rental days, how far in advance the booking was made, age band and licence tenure band (bands only, not exact values), vehicle chosen, extras and price, and the stage you reached in the booking process.
• Obstacles - cases in which you could not proceed and why (for example a branch that does not permit online booking, or a missing detail in a form). Collected in order to fix the site.
• Contact - clicking on telephone, WhatsApp, navigation or email: the fact that it was clicked, and from which page.
• Sign-in - starting to sign in, sending a code, verification, and a failure and its reason code only.
• Device - a coarse classification only: mobile / tablet / desktop, derived from the browser window width and not from identifying the device.
• Language - the interface language selected.
• Performance - measures of how quickly the site loads for you.
• Arrival source - channel, source, medium and campaign (for example organic search or a paid advertisement), and an advertising click identifier if you arrived through an advertisement.
• Approximate geographic area - country, region and city name, derived from your network address at the moment of receipt. The network address itself is not stored (see section 3.3): it is converted to a place name in memory, and only the result is recorded together with its radius of uncertainty. This locates the network and not you - internet providers route whole areas through a single point, and the estimate is therefore coarse: in Israel the median is a radius of about 20 km, and in about a quarter of cases 50 km or more. There is no precise location here and no use of GPS.

The following restrictions apply to the database on the Company's servers. For third-party tools see section 3.4.

• We do not store your IP address in this database.
• We do not store the browser type and we do not create a device "fingerprint".
• We do not store a name, telephone, email, identity card number or any other identifying detail in this database. A dedicated filter runs twice, in the browser and on the server, and blocks any such field before storage.
• We do not collect precise geographic location - no GPS, no device positioning and no coordinates. Only an approximate area derived from the network address is stored, together with its radius of uncertainty (see section 3.2). When you click "find the nearest branch", the location the browser provides is used in the browser only, in order to sort the branches by distance, and is not sent to the server and not stored.

The infrastructure is always loaded; the tools themselves - only if you have approved them. Google Tag Manager is loaded on every page. It is loading infrastructure only and does not itself collect information about your use of the site. Immediately on loading it is told that every measurement category is refused, and for as long as you have not approved a category none of the tools below is loaded and none receives anything about you. By virtue of the request for the infrastructure file itself, Google receives your network address, your browser type and the page address, and the request is marked for the removal of advertising identifiers. In addition, a single measurement message is sent to Google, whose entire content is that you refused, the page address and those same connection details. It is marked as non-personalised and for the removal of advertising identifiers, carries no identifier of yours and creates no cookie, and its only function is to allow a statistical count of visits without identifying you. If you refuse, those are the only two requests, and no tool from the list below is loaded.

• Microsoft Clarity (Microsoft) - records your browsing session on the page: mouse movements, clicks and scrolling, and lets us view the recording and see heat maps. Used to find places where users get stuck. Category: analytics.
• Meta Pixel (Meta / Facebook) - measuring advertising effectiveness and tailoring adverts. Category: marketing.
• Google Tag Manager (Google) - the infrastructure that loads the tools above. Loaded on every page, including without consent, writes no cookies and loads no tool until you approve. Category: infrastructure, not conditional on consent.
• Google Ads Conversion Linker (Google) - attributing a booking to the advertisement that led to it. Category: marketing.

A clarification about the recording: Microsoft Clarity records the course of your browsing on the page. The provider states that input fields are masked by default, but this is a recording tool in every sense and it is the tool on this site with the broadest effect on privacy. We use it for one purpose: to identify places on the site where users get stuck, and to fix them. Refusing the analytics category prevents it from loading entirely, and harms no service. The retention period for the recording is set out in section 11.

Given your consent to analytics, a random identifier and a visit identifier are stored on your device. They contain no personal detail, are generated at random, and are not linked to a person - except as stated in section 8. Without consent these identifiers are not created at all - they are not written in the first place, rather than written and then deleted.

When you sign in to your personal area, we record the sign-in itself: the time of the sign-in, the sign-in method (email and password, an SMS code or Google), whether it succeeded or failed, the IP address from which it was carried out and the browser identifier (user agent). If a Company representative enters your account in order to provide service, their name is recorded too - such an entry is marked separately and is not recorded as a sign-in by you.

The purpose is account security only: to allow you and us to establish who entered the account and when, to identify failed sign-in attempts and to deal with them. This information is not used for measurement, is not used for advertising and is not passed to any external provider.

This recording does not depend on cookie consent. Unlike the browsing measurement in section 3.2, it is required for the security of your account and is carried out on every sign-in, even if you refused analytics cookies. The restrictions in section 3.3 apply to the site usage measurement database, and not to the sign-in recording described here.

A failed sign-in attempt against an identifying detail that belongs to no customer - an email address that is not in the system, for example - is not recorded at all.

• The details you provided - managing the booking, the rental and the payment; contacting you about the booking; meeting the legal obligations that apply to a vehicle lessor.
• Identity card and licence - identification and checking fitness to drive under the rental and insurance terms.
• The site usage database - understanding how the site is used, finding faults and obstacles, improving the booking process and measuring advertising effectiveness.
• Arrival source - to know which marketing channels bring customers.
• Performance - to find slow pages and fix them.

The information is not sold to anyone, and is not passed to a third party for that party's own direct marketing.

• Providing a name, telephone, identity card number and licence is a condition of booking and of renting. Without them we cannot enter into a contract with you, because the law and the insurance require identification and a fitness check.
• Consent to analytics and marketing is not mandatory at all. Refusing does not affect your ability to browse the site, search for a car, book, or receive service. The site works fully without your consent.

On your first visit to the site a consent banner will be displayed. Until you choose, no analytics information is collected about you and no third-party tools are loaded - the default state is refusal.

• The accept and reject buttons are presented with equal prominence.
• The choice is between approving the additional tools - analytics and marketing together - and rejecting, which means continuing to browse with strictly necessary cookies only. Both categories are answered together, in one decision.
• The choice is kept for 180 days, after which you will be asked again.

Withdrawing consent: at the bottom of every page on the site there is a "Cookie settings" link, which reopens the consent screen and allows any choice to be changed, at any time. When you withdraw consent we actually delete from your device the identifiers and cookies that were written as a result of it, rather than merely recording a "no". External tools that were already loaded stop being loaded immediately, and the page is reloaded to confirm this.

Strictly necessary cookies (keeping you signed in, security, language and booking state) are always active and cannot be disabled, since without them the site cannot function.

• Strictly necessary - sign-in, security, language, booking state. Cannot be refused.
• Analytics - our usage database and the measurement tools in section 3.4. Can be refused.
• Marketing - tailoring advertising and measuring conversions. Can be refused.

Cookies can also be managed through your browser settings, but the primary and decisive tool is the site's consent banner.

If and when you sign in to your personal account on the site, we link the browsing activity of that visit to your customer account.

• What is linked: only the visit during which you signed in - from its beginning, including what preceded the sign-in within that visit, and from that moment onwards.
• What is not linked: earlier visits from the same browser. The reason is substantive: one computer can be used by several people, and attributing an entire browsing history to the first person who signed in on it is a false attribution and an infringement of another person's privacy.
• Why: to understand the customer's path towards a booking and improve it, and to give context-based service when you get in touch.
• Deletion: if you request deletion, the link to the account is deleted and the usage records remain without any identification, as statistical data only.

This section is not relevant for as long as you have not consented to analytics, since without consent there is no identifier that could be linked.

• Company employees - as required by their role.
• Credit card clearing provider - the payment details, for the charge and the deposit.
• Insurance companies - the driver's and the rental's details, for insurance cover.
• Infrastructure and hosting providers - to operate the system and for secure storage.
• Professional advisers (accountant, lawyer) - as required.
• Authorities - as required by law or by order.
• Microsoft, Meta and Google - browsing data, and in Microsoft's case also a recording of the course of your browsing, for the purpose of usage analysis and advertising measurement. Only with your consent, and only as set out in section 3.4.

The tools in section 3.4, and for as long as you have approved them, transfer information to servers outside Israel, mainly to the United States and the European Union. Such a transfer is subject to the Privacy Protection Regulations (Transfer of Information to Databases Abroad), 5761-2001.

Refusing the analytics and marketing categories prevents any such transfer.

Two technical exceptions, which are neither measurement nor advertising:

• The site's display fonts are hosted on the Company's servers and involve no request to any external server.
• The map tiles displayed on the branch pages and at the branch-selection stage are loaded from an external content delivery network (CARTO). In order to send you an image, that network necessarily sees your IP address - as does any server from which an image is loaded. We send it no identifier of ours, and we do not use it for measurement or for advertising. These tiles are loaded as part of displaying the map, even if you refused analytics and marketing, because they are part of the content and not a tracking tool.

• Site usage events - 120 days. Beyond that, trends are what is needed, not raw rows.
• The consent cookie - 180 days, after which we will ask again.
• Arrival source data stored on your device - 90 days.
• Bookings, rental agreements and invoices - in accordance with the retention obligations in law, including tax and accounting law.
• The link between the browser and the customer account - for as long as the account exists, or until deletion is requested.
• The browsing recording in Microsoft Clarity - 30 days. A recording that we have flagged for review, and a small random sample, are kept by Microsoft for up to 9 months. These periods are set by Microsoft and not by us.
• Recording of sign-ins to the personal area - 24 months. Required for resolving disputes about use of the account, and deleted when the customer is deleted.

• The transfer of information to and from the site is encrypted.
• Access to the databases is restricted by role.
• The credentials for the personal area are stored in cookies that are not accessible to code in the browser.
• A personal-information filter runs twice, in the browser and on the server, before an event is written to the usage database.

Under the Privacy Protection Law, 5741-1981, and in particular following Amendment 13 which came into force on 14 August 2025:

• Right of access (section 13) - you are entitled to inspect the personal information about you held in the database. The information will be provided in Hebrew, Arabic or English.
• Right of correction or deletion (section 14) - if you find that the information is not correct, complete, clear or up to date, you are entitled to demand that it be corrected or deleted. If we accede to the request we will also notify the parties who received the information of the change. If we refuse, we will notify you of this in writing and with reasons, and you are entitled to apply to the court.
• Withdrawal of consent - as set out in section 6.
• Removal from marketing communications - at any time, through any of the contact channels and through the unsubscribe link in every message.

How to exercise them: by contacting us using the contact details in section 1. We will ask to verify your identity before providing information, so that we do not give your information to someone else.

Renting a car with us is possible from age 17, in accordance with the rental terms and the insurance terms. Accordingly, we knowingly collect and process personal information also of a renter or a driver who has not yet reached 18, to the extent required in order to carry out the booking, for identification, for entering into the rental agreement, for insurance purposes and for compliance with obligations in law. The types of information and the uses made of it are those set out in sections 3 and 4, and are no broader because the renter has not yet reached 18.

Parent or guardian. Entry into a rental agreement by someone who has not yet reached 18 requires, by law, the consent of a parent or guardian. Where such consent has been given, we also process the parent's or guardian's details, including name, contact details and identifying document details, as part of the rental file and for those same purposes.

Beyond that, the service is not intended for children, and we do not knowingly collect personal information about anyone who is not a renter, a driver on the agreement, or their parent or guardian. If you become aware that a child has provided us with information, please contact us using the contact details in section 1 and we will delete it.

The site may include links to third-party websites. We have no control over the privacy policies and practices of those sites and we are not responsible for them.

We will update this policy from time to time. A material change, and in particular an expansion of the purposes of collection, will be presented to you actively and will not be limited to a quiet update of the page. The version and effective date appear at the head of the document.

If you believe we have infringed your privacy, we would like to hear about it and put it right. You are also entitled to apply to the Privacy Protection Authority at the Ministry of Justice.