Privacy Policy
Last updated: 6 October 2026
This policy explains what personal data Darwish Guitar collects through darwishguitar.com and our WhatsApp line, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and similar laws.
Who we are
The controller of your personal data is Darwish Guitar (Eran Levy), a registered business based in Israel.
Contact for privacy questions: [email protected]
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Booking form: name, phone, email, event type, date, number of guests, place and your message | To answer your request and arrange a performance | Steps before a contract, at your request (Art. 6(1)(b)) |
| Inner Circle newsletter: name and email | To send you a few letters a year about live dates and releases | Your consent (Art. 6(1)(a)). You can withdraw it at any time. |
| WhatsApp messages: your phone number, name on WhatsApp and the conversation | To answer questions and bookings. Replies may be written with the help of an automated assistant. We may send up to a few follow-up messages; reply STOP to end them. | Steps before a contract, and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f)) |
| Anonymous visit statistics: country, language, device type (mobile/desktop), the website that referred you, time on page, which sections you viewed and which music or contact links you clicked | To understand which parts of the site are useful and where our audience comes from | Our legitimate interest in improving the site (Art. 6(1)(f)) |
We do not store your IP address in our statistics, we do not create advertising profiles, and we never sell your data.
Cookies and local storage
We do not use advertising or tracking cookies. The site stores a few small settings in your own browser so it works the way you left it:
- your chosen language;
- whether you switched the background music off;
- a timestamp that prevents the same form being sent twice within a minute.
These are strictly necessary for the features you use, so they do not require consent. You can clear them at any time in your browser settings.
Services we use
We rely on these providers to run the site. Some of them may process data outside the European Economic Area:
- Cloudflare hosts the website and protects it from attacks. It also provides privacy-friendly visit statistics without cookies.
- Google (Apps Script, Sheets and Gmail) receives booking and newsletter submissions and the anonymous visit statistics, and delivers them to us by email.
- ipapi.co receives your IP address once per visit, only to detect your country so that the site can open in your language. We store only the country, not the IP address.
- Twilio and WhatsApp (Meta) carry our WhatsApp conversations.
- Google Gemini helps our automated WhatsApp assistant write replies.
- YouTube (Google) and Apple Music provide the embedded video and music players. YouTube videos use the privacy-enhanced "youtube-nocookie" mode. These providers have their own privacy policies.
International transfers
We are based in Israel, which the European Commission recognises as providing an adequate level of data protection. Where a provider processes data in the United States, the transfer relies on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
How long we keep data
- Booking requests and WhatsApp conversations: as long as needed to handle your request and any resulting performance, and then for as long as tax and accounting law requires.
- Newsletter: until you unsubscribe.
- Anonymous visit statistics: up to 12 months.
Your rights
You have the right to:
- access the personal data we hold about you;
- have it corrected or deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw your consent at any time, for example by unsubscribing from the newsletter with one reply.
To use any of these rights, email [email protected]. We will reply within one month.
If you are in the EU, you also have the right to complain to the data protection authority in your country.
Changes
We may update this policy from time to time. The date at the top of this page shows when it last changed.