Privacy Policy
Updated on November 20, 2025
1. General
1.1. Novo Financial Ltd., Company No. 515550432 (“the Company”, “we” or “us”), is committed to protecting the privacy of all individuals who interact with it, including clients, suppliers, business partners, job applicants, and users of the Company’s website and social media platforms (each: “the User” or “you”). The Company is committed to protecting the personal information that may be provided to it by any of the above.
1.2. The purpose of this Privacy Policy (“the Policy”) is to detail the types of information the Company collects, how it is used, how it is stored, and the measures taken to protect it. Information is collected in connection with and in the course of receiving the services provided by the Company and during the use of its digital systems, including: (a) the Company’s website at https://yairncpa.co.il/ (“the Website”), operated by CPA Yair Novoselsky, the owner of the Company; (c) in connection with engaging the Company for services; (d) telephone calls, email correspondence, WhatsApp communications with Company representatives; (e) other interactions with the Company, including through third parties involved in its business; or (f) submitting job applications to the Company.
1.3. For the purposes of this Policy, the following terms shall have the meanings set out below:
1.3.1. “Information” – any fact, assessment, opinion, document, record, processing, or analysis of any of these, including drawing conclusions and producing outputs – in whole or in part – held by either party in relation to itself and/or to the other party, as applicable and according to the context.
1.3.2. “Personal Information” – as defined in the Israeli Privacy Protection Law, 1981 (the “Privacy Protection Law”), including information relating to an identified or identifiable individual, including through identifiers such as name, ID number, biometric identifier, location data, online identifier, or one or more factors related to the individual’s physical, health, economic, social, or cultural identity.
1.3.3. “Communication Channels” – including, without limitation: the Company’s website, telephone service center, email, “Contact Us” forms, SMS and WhatsApp messages, digital media channels used by the Company to publish professional information (such as the Company’s official Facebook page), and any other communication medium used by the Company.
1.3.4. “Services” or “the Company’s Services” – any information, content, service, or activity that the Company offers, provides, or performs, whether past, present, or future.
1.3.5. “Content” – any information of any kind presented or displayed on the Website, including (but not limited to) text, written content, visual content, design, website layout, graphic language, materials, data, images, photos, illustrations, videos, graphic files, other file types, links, and similar items.
1.4. If, after reading this Policy, you find that it does not align with your expectations or preferences, you must refrain from providing information to the Company and from using its Services or Communication Channels. We regret this, but it is your full right.
1.5. You may contact the Company at any time regarding this Policy via email at Yair@yairnpca.co.il.
1.6. Use of the Website and/or engagement to receive services from the Company constitutes confirmation that you have read and understood this Policy and that you agree to all its terms.
1.7. This Policy may be updated from time to time, including due to changes to the Website, legislative updates, or regulatory requirements. By continuing to use the Website, you express your consent to such changes and updates.
1.8. This Privacy Policy is written in masculine grammatical form for convenience only and applies equally to all genders. Any reference in singular form shall be interpreted as plural where relevant, and vice versa.
1.9. Section headings in this Privacy Policy are for convenience only.
2. Collection, Processing, Use of Information and Purpose of Information Use
2.1. The Company shall collect, process, and store Personal Information in accordance with this Policy and applicable law. Personal Information will be processed solely for legitimate, defined, and explicit purposes and will not be processed in ways inconsistent with the purposes for which it was collected.
2.2. The Company will maintain the confidentiality of Personal Information in accordance with applicable law and subject to legal and regulatory obligations.
2.3. In cases where the User is not legally required to provide Personal Information—providing such information is subject to the User’s consent. However, refusal to provide information, or providing partial or incorrect information, may impair or entirely prevent the Company’s ability to provide certain services. The User may withdraw consent at any time without affecting the legality of processing based on consent prior to its withdrawal.
2.4. Types of Information the Company Processes or May Process
The Company processes the following categories of information:
2.4.1. Identification and contact details – name, ID number, contact details (address, phone number, email).
2.4.2. Financial information – information regarding consumption habits, purchasing patterns, and interest in services, for the purpose of improving the services offered by the Company to its clients.
2.4.3. Usage and browsing data – location data, usage timestamps, duration and frequency of use, browsing history, IP address, browser type, device characteristics, cookies and pixels, statistical data including Google Analytics, data from IT and cloud service providers, information from security providers, and behavior analytics including fraud-related activity.
2.4.4. Communication Channel information – information regarding your use of the Communication Channels, customer satisfaction surveys, feedback, and marketing preferences.
2.4.5. Audio recordings – telephone calls with the Company may be recorded for monitoring, control, and service quality improvement purposes.
2.5. The Company may collect and store your Personal Information:
2.5.1. when you provide or enter it while using the Website or Communication Channels;
2.5.2. in connection with purchasing the Company’s services;
2.5.3. for the purpose of providing services to the User, including customer service;
2.5.4. when you provide or enter information during registration for courses;
2.5.5. via security cameras installed at Company facilities for security purposes only, and through an automatic attendance system for recording the arrival and departure of employees or visitors.
2.6. The Company will use the information for delivering its services and fulfilling its legal, business, and contractual obligations, including for the following purposes:
2.6.1. providing services, including offering additional services;
2.6.2. managing and supplying services on the Website, including customizing the browsing experience, maintaining and improving the Website and its content, fraud prevention, operation, security, detecting fraud and/or other illegal activity;
2.6.3. business and statistical purposes, troubleshooting, conducting research and analytics (including user experience analysis) for service improvement;
2.6.4. fulfilling obligations as a potential employer for job applicants;
2.6.5. conducting financial transactions relating to payments for services;
2.6.6. notifying you of changes to our services;
2.6.7. contacting you for technical assistance, troubleshooting, and related support;
2.6.8. responding to inquiries, identifying problems or errors, preventing fraud or other criminal activity;
2.6.9. providing you with commercial and marketing information about additional services offered by the Company;
2.6.10. requesting feedback regarding services purchased;
2.6.11. compliance and auditing purposes;
2.6.12. enforcing our terms, policies, and legal agreements; complying with court orders; supporting law enforcement; preventing and investigating fraud, trespassing, identity theft, crime, and money laundering; resolving disputes and legal proceedings.
2.7. Subject to your consent and provision of contact information, the Company may send marketing communications, including advertisements as defined in the Israeli Communications Law (Telecommunications and Broadcasting), 1982. You may withdraw consent at any time by clicking “unsubscribe” or contacting the Company directly. The Company will process the request within a reasonable time, and no later than 7 business days.
2.8. Information is stored in the Company’s databases (“the Database”), in accordance with the Privacy Protection Law, on Company systems, Company-owned or controlled servers, and/or reputable third-party hosting or backup service providers, possibly located outside Israel. Any transfer of information abroad will be made only to jurisdictions providing adequate protection or under contractual agreements ensuring equivalent protection. Your consent to this Policy constitutes consent to such transfer.
2.9. For the avoidance of doubt, information is stored in the Company’s databases even if the User no longer interacts with the Company, subject to business needs and legal requirements.
2.10. The Company may use AI-based systems, including generative AI, digital and voice AI agents, advanced analytics tools, and machine learning to fulfill the purposes described in this Policy, including customer service, internal processes, service development, user experience optimization, fraud detection, pricing decisions, risk assessment, business insights, and forecasting trends. For these purposes, the Company may collect and process your Personal Information, including information from public sources, in accordance with applicable law.
3. Right to Access and Correct Information
3.1. Under the Privacy Protection Law, the User has the right to access Personal Information about them that has been provided to the Company and stored in the Company’s databases, and to request corrections if the information is inaccurate or incomplete, subject to the following:
3.1.1. Requests may be submitted via the methods specified in Section 8 of this Policy.
3.1.2. Prior to granting access or making corrections, the Company may require identity verification. The Company will provide the requested information within a reasonable period as required by law.
3.1.3. If the User reviews the information and finds it incomplete or inaccurate, they may request correction or discontinuation of use. The Company will act in accordance with legal requirements. For clarity, a request does not obligate the Company to correct or delete information.
3.1.4. Some information may be exempt from access, correction, or deletion rights under insurance, tax, privacy, or data protection laws.
4. Retention Period
4.1. The Company retains different types of information for varying periods depending on usage purposes and legal requirements. Information is stored according to principles of necessity and proportionality and is deleted or anonymized when no longer needed. Some information may be stored by third-party service providers according to their retention policies.
4.2. Even after you cease using the services or Website, we may retain copies of your Personal Information for legal and archival purposes.
4.3. We may retain non-identifiable information indefinitely. Identifiable elements may be removed from information no longer required in identifiable form. Such information may include metadata and statistical usage information.
5. Automatic Data Collection; Use of Cookies
5.1. When a User visits the Website, technical data may be automatically collected, including: IP address, unique device identifier, browser type and version, operating system, screen resolution, device language, access timestamps, referring URLs, and geolocation data (subject to consent).
5.2. These data are collected to improve service security, personalize user experience, perform business analytics, prevent fraud, and meet regulatory requirements.
5.3. The Website uses advanced technologies including: Cookies, Web Beacons, Pixels, Local Storage, Session Storage, and similar technologies (“Cookies”). Cookies may be session-based (deleted when the browser closes) or persistent (stored longer). Cookie details and expiration dates may be viewed in browser settings.
5.4. Cookies may be classified as follows: essential cookies, operational cookies, analytical cookies, and marketing cookies.
5.5. The Company uses third-party services such as Google Analytics to collect data regarding user browsing habits, in accordance with their terms.
5.6. Users may manage cookie preferences via the Website’s preferences center or browser settings. Disabling certain cookies may impair Website functionality. Third-party cookie deletion is subject to their terms.
5.7. The Company may adopt new tracking technologies to improve services. Material changes will be announced in advance, including an opt-out option. The Policy will be updated accordingly.
6. Transfer of Information to Third Parties
6.1. The Company will transfer Personal Information to third parties only in the following cases, while adhering to the principle of data minimization and ensuring appropriate legal protections:
6.1.1. Service providers and business partners – including technology providers, security providers, cloud services, logistics providers, and customer support services.
6.1.2. Affiliated companies – subsidiaries, sister companies, or affiliates, solely for the purpose of providing shared services and subject to equivalent privacy standards.
6.1.3. Law enforcement or supervisory authorities – where required to protect vital interests or prevent harm.
6.1.4. Legal obligations – when required by law, court order, or authorized authority.
6.1.5. Breach of terms – in cases of material violation of terms or unlawful activity.
6.1.6. Legal proceedings – to protect the Company’s rights in legal proceedings or disputes.
6.1.7. Merger, acquisition, sale, or transfer of Company assets – subject to ensuring continuity of privacy protection.
6.2. Cross-border transfers – will occur only to jurisdictions with adequate protection or under agreements ensuring equivalent protection.
7. Governing Law and Jurisdiction
This Policy is governed by Israeli law, including the Privacy Protection Law, 1981, the Data Security Regulations, 1988, and any applicable regulatory provisions. Any dispute arising from or related to this Privacy Policy, including privacy violations, unauthorized information use, or data subject rights, shall be subject to the exclusive jurisdiction of the competent courts in Jerusalem.
The Company undertakes to act in accordance with the guidelines of the Israeli Database Registrar and the Privacy Protection Authority, where applicable.
8. Contact Us
For any inquiry related to this Policy, including exercising your rights under the Privacy Protection Law, you may contact us through the following:
Email: Yair@yairnpca.co.il
Mailing Address: HaTnufa 12, Jerusalem
Phone: 077-4201002 (business days, 08:30–16:00)
We are committed to addressing your inquiry as soon as possible and, where necessary, will update you on the progress. In urgent cases related to data security incidents, we will take immediate action.