Privacy policy

What this notice is about

On the website it was possible to leave personal details on two forms: the volunteer form and the contact form on the 'Contact Us' page. Both were closed after the election to the Knesset held on 27 October 2026. This notice explains what was done with the details, to whom they were transferred, and what rights are available to anyone who provided them. It was written pursuant to section 11 of the Protection of Privacy Law, 5741-1981, as worded following Amendment 13, which came into effect on 14 August 2025.

The notice applies to these two forms — including the details provided on them before they were closed — as well as to the Meta pixel loaded on all pages of the website — which has its own section below. Aside from these, the pages of the website ask nothing of you.

The two forms differ from each other in one key respect, and it is worth knowing it before reading further: details provided on the volunteer form were transferred to the parties you marked, whereas a message sent on the contact form was not transferred to any party. Each of them has its own section below.

Providing the details is voluntary

There was no legal obligation to provide the details. Providing them depended solely on your wishes and your consent.

Anyone who chose not to provide them lost nothing, and was able to continue reading any page on the website. The only consequence was that we did not read what they wished to submit on the contact form, or that they were not contacted regarding volunteering.

Why the details are requested

On the volunteer form, the sole purpose was that you would be contacted regarding volunteering ahead of the election to the Knesset held on Tuesday, 27 October 2026: the parties you marked, one or more, or the joint headquarters if you marked 'The Joint List'.

On the contact form, the sole purpose was for the joint headquarters to be able to read your message and get back to you regarding it, if required.

The details are not used for any other purpose. They are not sold, not rented, and not transferred to any third party — except for transferring a volunteer's details to the parties they marked, which was the entire purpose of the volunteer form, and the services that operated the forms and operate the spreadsheets, Tally and Google, detailed below.

Who is responsible for the information

The database controller is the joint headquarters of the list, established for the election to the Knesset on 27 October 2026. Its contact person is מאוריסיו לפצ׳יק.

The postal address for the joint headquarters is the registered address of Hadash: אחד העם 70, תל אביב.

What exactly was submitted on the volunteer form

These are all the details that the form requested, and there are none besides them:

Selecting the parties on whose behalf you would be contacted is information about political opinion. The law defines such information as information of special sensitivity, and applies stricter protection to it than that applied to regular information. You selected them at the end of the form, under 'You will be contacted on behalf of': one or more of the three parties, or 'The Joint List' — the joint headquarters, without any party.

The form itself was operated on the Tally service, of the company Tally BV from Belgium. The details are stored with it, in the joint headquarters' account, on servers in Europe, and are encrypted. Apart from the fields above, the time of submission was recorded.

Like any internet service, Tally processes the requests that your browser sends to it, including the IP address. What it retains from them and for how long is subject to its privacy policy and not to this policy. Tally uses service providers of its own, some of them in the United States, including Sentry, an error-tracking service that the form page accesses.

To whom the details were provided

The details were provided only to the parties that you selected on the form, in order to make contact regarding volunteering. A party you did not select did not receive them. The three parties running on the list are:

From Tally the details were copied to a Google Sheets spreadsheet of each party you selected, which only it is authorised to read.

If you selected 'The Joint List', alone or alongside parties, the details were also copied to a spreadsheet of the joint headquarters, which only the staff of the joint headquarters is authorised to read. For anyone who selected only 'The Joint List', their details were not provided to any party.

No party was selected in advance, and this was intentional. Transferring a person's details to a party they did not request is exactly what the law is intended to prevent, and your selection is what made the consent explicit. Anyone who did not want any party to contact them selected 'The Joint List'.

From the moment the details were transferred to the party you marked, the party is responsible for them itself and its own privacy policy applies to them from that moment onwards.

Enquiries regarding privacy matters to any of the three parties can be sent to the same address: אחד העם 70, תל אביב.

The contact form

The form on the "Contact Us" page requested four things only: full name, telephone, email, and the message itself. Apart from these, the time of sending was recorded. This form was also operated on Tally, as described above.

A message sent via this form was not provided to any of the three parties. It is kept in Tally, in the account of the joint headquarters, and was copied to a Google Sheets spreadsheet that only the headquarters' contact person, מאוריסיו לפצ׳יק, is authorised to read, so that it can be read and answered.

The content of the message is whatever you chose to write in it. We did not request sensitive details in it and did not require them; if you wrote such details in it, they are retained as part of the message and will be deleted together with it.

The messages are retained for the same period during which volunteer details are retained — up to six months after election day — and then deleted. The rights detailed below apply to them in full: you can review a message that was sent, request that it be corrected, and request that it be deleted.

The site does not guarantee a reply to a message, nor does it guarantee a timeframe. For routine activity, it is better to contact the parties directly, as stated at the top of the contact page.

How long the details are retained

The copies held by the joint headquarters, in Tally and in spreadsheets — apart from the spreadsheet for "The Joint List", described below — are kept for up to six months after election day, that is until 27 April 2027, and are then deleted. This period is intended to enable responses to enquiries and clarifications that arise after the election — for example, a request for review, a request for deletion, or a question from someone who submitted details and was not contacted.

The deletion is a real deletion, not concealment: the record is deleted from Tally and from the spreadsheet, including its version history. Tally deletes a deleted record from its backups as well, within 90 days.

After the election, both forms were closed, in all languages. Closing a form does not delete details that were already submitted — that is what this section is for.

Details submitted to The Joint List are not deleted at this time. They are kept in the joint headquarters' spreadsheet even after the election, ahead of future election campaigns, until you ask to delete them, as described in the rights section.

Details that have already been transferred to the party you selected are not deleted in this deletion. From the moment of transfer, they are the responsibility of that party, and its privacy policy is what applies to them.

Your rights

Under section 13 of the law, every person is entitled to inspect the personal information about them held in a database. The law explicitly provides that inspection will be enabled in Hebrew, Arabic or English.

Under section 14 of the law, anyone who has inspected the information and found that it is not correct, complete, clear or up to date may request to correct it or delete it.

You can also withdraw consent at any time and request not to be contacted any more.

To exercise these rights, contact mauricio@jointlist.org.il, or by post to אחד העם 70, תל אביב.

Under section 13(b) of the law, inspection will be enabled in Hebrew, Arabic or English — in any of the three languages.

The Meta pixel

To help the campaign reach more people, a pixel from Meta, the company that operates Facebook and Instagram, is loaded on the site. It measures how many people arrive at the site from our adverts, and makes it possible to show the list's adverts to anyone who has already shown interest in it. For this purpose, Meta receives information about the visit, such as the pages you visited, and processes it according to its privacy policy. The pixel does not see what you write in the forms, and the joint headquarters does not receive identifying details about visitors from Meta. If you would prefer not to, an ad blocker in your browser also blocks it.

What the site does not do

Apart from the Meta pixel, there are no measurement or advertising services on the site: neither Google Analytics nor Google Ads.

Aside from the Meta pixel, the website does not load fonts, scripts or images from third-party servers, and does not place cookies in your browser. As long as the forms were open, they were loaded with their script from Tally, and the form pages operated under Tally's privacy policy.

There are no donations on this website. Each of the three parties raises funds independently, and the website does not collect payment methods and does not transfer funds.

The voter register does not reach this website and is not stored on it. The flow of information was in one direction only: from whoever chose to volunteer to whoever they indicated, and never in the opposite direction.

The forms did not save what you typed on your device. Tally's option to save a form midway through and continue later was disabled across all forms, deliberately, so that nothing would remain on a shared device.

And finally, regarding requests for the website's pages themselves: the website is hosted on the Cloudflare service, and is served purely as files — it contains no code that runs upon request, there is no request logging initiated by the joint headquarters, and there is no transfer of request logs to the joint headquarters. As the infrastructure service serving the pages, Cloudflare processes requests and maintains its own statistical data; what it retains and for how long is subject to its policy rather than this one, and does not reach the joint headquarters.

Status of this version

This version was last updated on 1 November 2026, after the forms were closed.