Privacy policy
Last updated: 2026-08
I'm Stav, and I run Ha-Boutique Ha-Katan. This page explains what details are collected when you browse and order, what I do with them, and what will never be done with them. I wrote it in plain language, because I don't like fine print either.
What I collect, and why
When you order — Your full name, phone and email, along with your cart and the pickup slot you chose. Without these I can't prepare the order or reach you if something changes. Once delivery opens, delivery orders will also include an address and apartment details.
When you pay — Card details are entered on a secure payment page run by the processor Grow (Meshulam). Your card number never passes through this site and is never stored with me. I hand Grow only your name, phone, email and the order total, to set up the payment page. Paying cash at pickup? No payment details are collected at all.
When you talk to me — The site has an AI shopping assistant, and you can also write to me on WhatsApp. Conversation content is stored so the chat can pick up where it left off, and is processed by Anthropic — the company behind the AI model — to compose replies. WhatsApp messages pass, like all of WhatsApp, through Meta. And one thing I want you to know: I can read the conversations and join them. That's the whole point — there's a person behind the bot.
When you review — After pickup I'll sometimes send one WhatsApp message asking for a rating. Wrote a review? The name you chose to display, the rating and the text will appear on the product page after a quick approval.
When you use the contact form — Your name, email and message land straight in my inbox.
Technical data — Your IP address is used to protect against flooding and fraud, and operational logs are kept by Vercel, the company hosting the site.
How long it's kept
- The operational order record deletes itself after 7 days. Order confirmations are kept as bookkeeping records, as the law requires.
- Chat and WhatsApp conversations: an active conversation — 24 hours; history — up to 30 days. After that everything is deleted automatically.
- To recognize returning customers (say, for a first-order coupon), only a digital fingerprint (hash) of your email and phone is kept long-term — not the readable details.
- Published reviews stay on the site until you ask to remove them.
What stays in your browser
Your cart, accessibility preferences, chat history and chosen language are stored in your browser and never sent to me. There are no advertising cookies, no social-network pixels and no cross-site tracking. For statistics I use Vercel Analytics — an anonymous count of visits and speed, with no cookies and no personal profiles.
Who I share details with
Only with the vendors who run the shop, and each gets exactly what its job requires: Grow/Meshulam (card processing), Make (payment-page connection), Meta (WhatsApp), Anthropic (assistant replies), Vercel (hosting and statistics), Upstash (database), Sanity (catalog and reviews) and Resend (email). Once delivery opens, delivery addresses will be verified against the OpenStreetMap mapping service.
I don't sell details, don't rent them and don't pass them to advertisers. Period. I don't send marketing mail either — and if I ever start a newsletter, it will be strictly opt-in, with an unsubscribe option in every message.
Your rights
Under Israel's Privacy Protection Law, you may review the details stored about you, and ask to correct or delete them. Write to me at stav@thelittleboutique.co.il — I'll take care of it and get back to you.
Security
The site is served over HTTPS only, card details never touch my servers, and access to the admin systems is protected. And the most important principle of all: I keep as little as possible. What isn't stored can't leak.
Changes to this policy
If anything here changes, I'll update this page and the date above. A material change will also get a visible notice on the site.
Questions?
Write to me: stav@thelittleboutique.co.il, or on WhatsApp. I answer personally.