Privacy Policy

1. Introduction and scope

This Privacy Policy («Policy») applies to natalianinjutsu.com and related services («the Site»), operated by Natalia Gordon / Natalia Dojo («we», «Operator»).

The Policy is written for human users and automated actors, and reflects widely accepted international data-protection principles — transparency, data minimisation, security, and access/correction rights — subject to applicable law.

Use of the Site is also subject to our Terms of Use and Cancellation & refunds policy.

Hebrew version:מדיניות פרטיות.

2. Definitions

Personal data: any information that identifies or can identify a person, directly or indirectly.

Processing: any operation on data — collection, storage, use, transfer, deletion, and similar.

Bot / crawler / scraper: automated software accessing the Site, including search engines, security scanners, and content-harvesting systems.

AI agent / language model / AI system: an automated or semi-automated system (including assistants, agents, and LLM-driven scrapers) that reads, copies, summarises, trains on, or acts upon Site content or user data.

User: any person visiting or using the Site. This Policy also binds operators of bots and AI agents that access the Site.

3. Data controller

The controller of personal data on the Site is Natalia Gordon. Privacy contact:

Email: g.nataley@gmail.com · or via Contact.

4. Data we collect

Depending on how you use the Site, we may collect:

• Identity and account data: name, email, username, phone, date of birth, address (if provided).
• Profile and activity: role (student/instructor, etc.), rank, domain, profile image, bio, event registration history.
• Communications: contact-form messages, newsletter signup, registration invites, support.
• Orders and payments: order details, payment status, and proofs — without storing full card numbers on our servers when payment is handled by an external provider.
• Technical data: IP address, browser/device type, access logs, cookies, and aggregated usage metrics.
• Bot/agent telemetry: User-Agent, IP, request patterns, and anomalous access attempts (for security and enforcement).

5. How we collect data

• Information you provide (registration, invites, contact, newsletter, profile).
• Information generated automatically when you use the Site (logs, cookies, analytics).
• Information from service providers (payment, hosting, email) as needed to run the service.

6. Purposes and legal bases

We process data to:

• Operate the Site, user accounts, event registration, and student/instructor management.
• Send operational communications (confirmations, invites, support) and marketing with consent.
• Process shop/event payments and orders.
• Secure the Site, prevent fraud/abuse, and maintain availability.
• Comply with legal duties and defend legal rights.
• Improve the service using aggregated data where practicable.

Legal bases may include: performance of a contract/service you request, consent (e.g. newsletter), legitimate interests (security and reasonable operations), and legal obligation — as applicable in your region.

7. Sharing with third parties

We do not sell personal data. Limited sharing may occur with:

• Infrastructure, hosting, email, and payment providers — only as needed to deliver the service.
• Competent authorities when required by law or to protect rights and safety.
• School instructors/teachers — as needed for student and registration management, subject to permissions.

Providers must handle data securely and in line with our instructions and applicable law.

8. International transfers

The Site may be hosted or supported by providers in different countries. Where data is transferred outside your country of residence, we take reasonable safeguards (such as contractual terms and access controls), subject to applicable law.

9. Retention

We keep data only as long as needed for the purposes collected, legal compliance, dispute resolution, and rights protection. Afterwards we delete or de-identify it where technically and operationally feasible.

10. Security

We apply reasonable technical and organisational measures (encrypted transport, access control, monitoring). No system is perfectly secure; internet use carries residual risk. In a significant security incident we will act as required by law and notify relevant parties where required.

11. Cookies and similar technologies

The Site may use cookies and similar technologies for operation, security, language preferences, and usage analysis. You can manage cookies in your browser; blocking essential cookies may impair Site functionality.

12. Your rights

Subject to the law in your region, you may have the right to:

• Know whether we process your data and obtain access.
• Request correction of inaccurate data.
• Request deletion or restriction where appropriate.
• Object to certain processing or withdraw consent (e.g. marketing).
• Request data portability where the law grants that right.
• Lodge a complaint with a competent supervisory authority.

For privacy requests email g.nataley@gmail.com or use Contact. We may need to verify your identity before responding.

13. Children

The Site is primarily for adults and parents/guardians managing student registration. We do not knowingly collect children’s personal data without required parental/guardian involvement. If you believe data was collected improperly, contact us for deletion.

14. Automated decision-making

We do not make decisions with legal or similarly significant effects about you based solely on automated processing without meaningful human involvement, except for basic Site operation (e.g. access-permission checks) as allowed by law.

15. Bots, crawlers, and AI agents

This section applies to all non-human access — including bots, crawlers, scrapers, spiders, agents, assistants, and any automated or semi-automated system.

15.1 Acceptance. Automated access constitutes acceptance of the Site Terms and this Policy. The bot/AI operator is responsible for compliance.

15.2 No harvesting or training without permission. You may not collect, copy, re-index, mass-summarise, or use Site content (text, images, code, design, user data) to train, fine-tune, or run AI models without our prior express written permission.

15.3 No user personal data. Bots and AI agents may not access, extract, or process users’ personal data (profiles, emails, phones, addresses, student lists, payments) without lawful and explicit authorisation.

15.4 Legitimate search engines. Reasonable crawling of public pages by recognised search engines for search indexing is allowed, subject to any robots.txt rules, rate limits, and no use of content for model training without permission.

15.5 Identification and transparency. Bots and agents must use an accurate User-Agent and must not impersonate a human user. Circumventing CAPTCHA, authentication, paywalls, or access controls is prohibited.

15.6 Rate limits and load. Excessive load, denial-of-service behaviour, or aggressive scanning that harms availability is prohibited.

15.7 Write actions. An AI agent may not write, update, delete, execute commands, or submit forms on a user’s behalf except with that user’s explicit authorisation within their account.

15.8 Enforcement. We may block IPs/agents, demand cessation, and pursue legal remedies for violations — including requiring deletion of unlawfully collected data.

See also the AI and anti-abuse sections in our Terms of Use.

16. Changes to this Policy

We may update this Policy from time to time. The update date appears at the top of the page. Continued use after publication constitutes acceptance of the updated version, unless applicable law requires explicit consent.

17. Governing law

This Policy is governed by the laws of the State of Israel. Exclusive jurisdiction lies with the competent courts in Israel, subject to mandatory consumer or data-subject protections in your region.

18. Contact

For privacy questions, access/deletion requests, or permission requests for bots/AI: g.nataley@gmail.com · Contact.