Privacy policy
Updated: November 1, 2026. This policy applies to https://msgroupprojects.com, its contact forms and the club members’ personal area. It is intended to explain the processing of information in accordance with the Protection of Privacy Law, 5741–1981, including Amendment 13, and the applicable regulations. Publication of this policy does not constitute legal certification of full compliance with the law.
1. Who Operates the Website and How to Contact Us
The website is presented under the M.S GROUP brand. For inquiries concerning personal information: office@msgp.co.il, telephone 072-2133266; office at B.S.R Tower 4, 7 Matsada, Bnei Brak. The full legal name and registration number of the entity that is the data controller have not yet been provided for verification and must be completed; the brand name is not a substitute for identifying the legal entity.
2. Providing Information Is Your Choice
There is no legal obligation to provide information in the website’s forms. Providing it depends on your willingness and your consent to the purpose explained at the time of collection. Without a name and telephone number, the contact form cannot be submitted; without a name, email address and password, a club account cannot be created. You may view public content without registering or contact us by telephone. Merely browsing the website or reading this policy does not constitute blanket consent to every use of information or to receiving advertisements.
3. Contact Forms and Interest in a Project
The form collects a full name and telephone number as required fields, and an email address and the project you are interested in as optional fields. These details are stored in the inquiry management system together with the time the inquiry was created. The purpose of collection is to handle your request, contact you about it and tailor the response to your chosen project. There is no need to provide an identity card number, credit card details, medical documents or information about family members in the form. Confirming that you have read the policy in the form does not constitute separate consent to the sending of advertisements.
4. Registration, Login and Club Services
A full name, email address and password are collected upon registration. Account details are processed through the Lovable Cloud authentication service to create an account, confirm the email address, enable secure login and recover a password. The password is supplied to the authentication service and is not a field in the inquiry management system. Do not disclose your password to company representatives or by email. Operational account and login data may be retained as part of the authentication service.
5. Information About Club Activity
Your choice to follow a project is stored together with the account and project identifiers, so that your selected projects can be displayed in your personal area. You can unfollow a project in your personal area. Logged-in members can view benefits and early previews intended for them; registration does not constitute the purchase of an apartment or a commitment to a transaction. A contact form displayed in a club-related context is a request to be contacted and does not, in itself, create a user account.
6. Service Emails and Marketing Communications
The account system is used to send service messages, such as email address confirmation and password recovery. Club registration or a request to be contacted does not, in itself, constitute consent to receiving advertisements by email or text message. Sending advertisements, if implemented, will require an appropriate legal basis under the law and, where consent is required, separate, documented consent; an opt-out option will be provided as required. An active marketing mailing system or records of consent to mailings have not been verified on the website. You may contact us for clarification or to request that marketing use of your details cease, subject to the law.
7. AI-Based Recommendation and Project Summary Tools
When you use the recommendation tool, your selected city and the free-text request you entered are sent to an artificial intelligence service via Lovable AI, together with information from the project catalog, to generate the recommendation. When a summary is requested, the project content is sent. Do not enter identifying details, passwords or unnecessary sensitive information into the tool. Retention settings and provider terms depend on the service and model; no undertaking that data is not retained is established here. Recommendations do not constitute a binding decision or professional advice.
8. Technical Data and Browser Storage
During operation of the website, hosting, authentication and security services may process IP addresses, browser and device details, request times and error data to provide, operate and protect the service. The website stores accessibility preferences, data needed to maintain login and a post-login return destination in the browser. Deleting website data in the browser may reset preferences or log you out of your account, but does not delete information stored in the company’s systems.
9. External Content and Services
The website incorporates YouTube videos, video images, Google Maps and mapping services, as well as fonts loaded from Google Fonts. Loading external content may transmit an IP address and request details to the provider, which may use cookies or identifiers in accordance with its policy. Some content loads while a page is being viewed, even without clicking play. A subtitle preference or deferred loading is not a cookie consent mechanism. No mechanism for prior choice covering all external content has been configured on the website; this policy must not be regarded as a substitute for such a mechanism where required by law.
10. Measurement and Advertising
The review of the website’s code did not verify the operation of a Meta, TikTok or LinkedIn advertising pixel. This does not prove that no measurement is carried out by hosting services or external services. Before additional advertising or tracking tools are activated, the disclosures and choice or consent mechanisms must be updated in accordance with applicable law. This policy must not be construed as authorizing uses that do not actually take place.
11. To Whom Information Is Disclosed
Inquiry information is intended to be handled by persons with administrative permissions within the company; club information is used to operate the account and personal area. Hosting, storage, authentication and maintenance providers, including Lovable Cloud, process information to provide their services. AI requests and external content are processed by the providers described above. If details need to be transferred to a developer, marketing partner or additional provider to handle your request, you must be informed of the recipient and purpose, and an appropriate legal basis must be ensured; this policy does not authorize unlimited transfers. Information may also be disclosed in response to a valid legal demand or for legal proceedings, to the extent required by law.
12. Storage and Transfers Outside Israel
Cloud services and external content services may process information outside Israel. The countries of storage and processing and the data transfer arrangements with providers have not been verified for the purposes of this text. The company must ensure that transfers comply with the law and the Protection of Privacy Regulations (Transfer of Data to Databases Outside the State’s Borders), insofar as applicable, and establish appropriate safeguards with providers. Continued browsing is not a substitute for examining the transfer conditions.
13. Information Retention and Deletion
Information must be retained only for as long as necessary for the purpose for which it was collected and for applicable legal obligations, with the need for retention being reviewed. Defined retention periods for inquiries, accounts, logs and backups have not yet been approved by the company; the website has no verified automatic process for deletion based on retention periods. Inquiries can be deleted by an authorized administrator. A request to close an account or delete information will be considered after identity verification and in accordance with the law; limited information may need to be retained to comply with a legal obligation or protect rights. Information held by providers and in backup copies must also be investigated, and it must not be assumed that deletion on one screen deletes all copies.
14. Information Security
The website’s code includes restrictions on access to inquiry information based on administrator permissions and separates project follows by account. These measures do not replace security procedures, permissions management, arrangements governing work with providers and incident handling under the Protection of Privacy Regulations (Data Security), 5777–2017, insofar as applicable. No full security audit of all providers and procedures has been carried out here. No system is completely immune, but this statement does not exempt the company from its legal obligations. Suspected unauthorized use or disclosure of information may be reported to office@msgp.co.il.
15. Access, Correction and Other Requests
Subject to Section 13 of the Law, you may request access to personal information held about you in a database. Subject to Section 14, if the information is not correct, complete, clear or up to date, you may request its correction or deletion. These rights do not constitute an unlimited right to have all information deleted in every situation. You may also request account closure, unfollow projects in your personal area and contact us regarding direct mailing or opting out of advertisements, in accordance with applicable rights. Contact office@msgp.co.il with a description of your request and contact details; do not send a password. Proportionate identity verification may be required to protect you. The request will be considered in accordance with the provisions and deadlines prescribed by law.
16. Updates and Scope of the Policy
A material change in collection purposes, providers or uses requires a review and update of the policy and the notice provided at the time of collection, and additional consent where required. This text does not grant advance consent to new uses. The terms of transactions or the company’s activities outside the website may be governed by separate documents and notices. Details of the legal entity, retention periods, provider arrangements and obligations to register a database or appoint a data protection officer, insofar as applicable, require completion and professional review; this policy is neither a legal opinion nor a guarantee against claims.