Privacy Policy

This page explains what information we collect when you visit the site or sign up for an event, what we do with it, who it is shared with, and how you can see it or have it deleted.

Last updated: 21 August 2026 · Applies to houseparty.co.il and to events run under The Garden Social brand.

1. Who is responsible

The Garden Social is a series of house parties and social events run by Shay Peleg in Hod Hasharon, Israel. Where this page says "we", it means that business. We are the owner of the database and the party responsible for the information collected through the site and through event registration.

For any question, request or complaint about privacy, contact me directly at shay@houseparty.co.il or on WhatsApp at +972 54-428-0347.

2. What we collect

Information you give us

• When you reserve a spot or register for an event: your name, phone number, and sometimes an email address. For some events we also ask for gender, age range and how many tickets you want, so we can keep a reasonable balance between guests and plan capacity.
• When you message us: the content of what you send by WhatsApp or email.
• In feedback forms: whatever you write after an event, if you choose to answer.

Information that comes from payment

Payment itself is processed by Morning (Green Invoice) and its payment providers, including credit card, Bit and PayPal. For events priced in foreign currency, including the Krakow Pregame at /krakow-pregame/, payment is processed instead by Stripe, using BLIK, card or a wallet. In both cases your card or BLIK details never pass through us, are never stored by us, and we never see them at any stage. What does reach us is the name, the contact details you entered at checkout, the amount, the date, and the invoice or receipt number.

Information collected automatically as you browse

• IP address, browser and device type, and operating system.
• Which pages you viewed, how long you stayed, and which site or ad you arrived from.
• Marketing parameters appended to the page address when you arrive from an ad, such as utm_source, utm_campaign, utm_content and fbclid. These tell us which ad brought you.
• Identifiers stored in advertising and measurement cookies, mainly _fbp, _fbc, _ga and an anonymous PostHog identifier.

3. Why we use it and on what basis

Giving us your details is voluntary and there is no legal duty to do so. That said, without a name and phone number we cannot hold a spot and cannot send you the address, because the exact address goes only to people who registered.

4. Cookies and measurement tools

The site uses cookies and similar technologies. Some are needed for the site to work, and some are used for measurement and advertising. These are the tools we run:

• Meta Pixel for Facebook and Instagram. It measures who viewed a page, who started registering and who bought a ticket, and lets us show you relevant ads.
• Google Analytics 4. Aggregate statistics about site traffic.
• PostHog. Product analytics showing us how people use the page and where they get stuck.

You can block or delete cookies in your browser settings. Note that blocking everything may break some functions on the site. You can also limit personalised advertising through Meta's ad settings and through Google's Analytics opt-out add-on.

This page itself, the privacy policy, runs no pixels and no measurement tools at all.

5. Meta advertising and custom audiences

We advertise on Facebook and Instagram, so we want you to know exactly what goes to Meta.

Events sent from our server

In addition to the pixel running in your browser, we also send conversion events to Meta from our own server, through an interface called the Conversions API. When we do that, identifying details such as name, phone, email, city and country are put through a one-way hash (SHA-256) before being sent. Meta receives a scrambled string rather than the details themselves, and uses it only to check whether this matches a user it already knows. Alongside that we also send IP address, browser identifier, and Meta's own click and cookie identifiers, which are not hashed.

Custom audiences

We upload lists of customers and registrants to Meta in order to build a "custom audience" and a "lookalike audience". Here too, the list is hashed before upload, in the format Meta requires. We use this for three things: to offer a new event to people who already came, to find people similar to our existing guests, and also to exclude you from advertising, for example so we do not show a sales ad to someone who already bought a ticket.

6. Who we share it with

We do not sell personal information and we do not trade in it. We do use service providers without which the site and the events would not work, and each of them receives only what it needs:

Some providers are located outside Israel, so information is transferred beyond the country's borders. Transfers are made in accordance with the Israeli Privacy Protection Regulations on transferring data to databases abroad, relying on providers being subject to a recognised data protection regime or contractually committed to a comparable level of protection.

Beyond that, we will disclose information only if required by law, court order or a demand from a competent authority, or where necessary to protect our rights or someone's safety.

7. Marketing and event updates

If you left your details or bought a ticket, we may send you an update about the next event by email or WhatsApp. We do this in line with section 30A of the Israeli Communications (Telecommunications and Broadcasting) Law, which permits contacting someone who provided their own details and did not ask not to be contacted.

Every marketing email has an unsubscribe link at the bottom. On WhatsApp it is enough to reply "remove" or "take me off the list", and I handle it manually. Opting out of marketing does not affect your ability to register for events in future.

8. Photography at events

Our events are photographed. Photos and video are used for our social media and website. As set out in our consent guidelines, anyone who does not want to be in frame says so at the door or to the photographer, and it is respected immediately and without explanation.

If a photo of you has already been published and you want it taken down, message us and we will remove it from the channels we control. Note that we cannot remove photos that other guests shared on their own private accounts.

9. How long we keep it

• Invoices and payment records: seven years, as required by Israeli tax law.
• Registration details of people who attended: as long as our relationship is active, and until you ask for deletion.
• Details of people who enquired but never completed a registration: up to 24 months from last contact, then deleted.
• Measurement and statistics data: according to each provider's retention policy, typically between 14 and 26 months.

10. Your rights

Under the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment 13 which came into force in August 2025, you have the right to:

• Access the information we hold about you.
• Correct information that is inaccurate, incomplete or out of date.
• Request deletion of your information, subject to records we are legally required to keep, such as invoices.
• Be removed from marketing lists and advertising audiences, at any time.

To exercise any of these, email shay@houseparty.co.il. We will respond within 30 days. To protect you, we may ask you to verify that the details are genuinely yours before we make a change or a deletion.

If you believe your privacy has been infringed and you did not get an adequate response from us, you may file a complaint with the Israeli Privacy Protection Authority at the Ministry of Justice.

11. Security

The whole site runs over an encrypted connection (HTTPS). Registrations are stored in a managed database configured so that a form on the site can only add a record and cannot read anyone else's records. Access to the data is limited to me alone, and card details, as noted, are never stored by us at all.

That said, no system is completely immune. We cannot guarantee absolute protection, and we act according to reasonable and accepted measures. If a serious security incident affecting your information occurs, we will act in accordance with our reporting obligations under the law.

12. Age

Our events are intended for ages 18 and over, and the site is not aimed at children. We do not knowingly collect information about minors under 18. If a minor's details have reached us, contact us and we will delete them.

13. Visitors outside Israel

Some of our events are aimed at English speakers and new immigrants, and we sometimes organise trips abroad. If you are in the European Union or the United Kingdom, you also have the rights granted under the GDPR, including the right to receive a copy of your data in an accessible format, the right to object to processing for marketing purposes, and the right to withdraw consent. All of these go to the same email address.

14. Changes to this policy

If we change how we collect or use information, we will update this page and the date at the top of it. A material change will also be announced on the relevant event page. The Hebrew version of this policy is the binding one.

15. Contact