Privacy Policy

The provision of information to the Company depends on the user's voluntary consent and free will and does not stem from a legal obligation. However, without providing the required information, the user will not be able to receive some of the services offered by the Company (such as receiving details about projects, scheduling meetings, signing agreements, or receiving responses to inquiries). The information will be stored and managed in the Company's databases for the purposes detailed in this policy.

In this policy, the meaning of the term "information" or "personal information" is any data or information collected by the Company or provided to it by the user (or anyone on their behalf), through which the user can be identified directly or indirectly, and which is protected under the Privacy Protection Law, 5741-1981 (hereinafter: "the Law") and its regulations.

The Company collects information about the user from the following sources:

• Information provided actively during the completion of forms on websites, newsletter registration, inquiries via email, telephone, WhatsApp, conference registration, or submission of proposals and forms at sales and company offices.

• Information collected as part of projects and transactions during engagement in real estate transactions, investments, or within the framework of urban renewal processes (Pinui-Binui / TAMA 38).

• Digital interaction and social networks inquiries and interactions through the Company's pages on Facebook, Instagram, LinkedIn, Google, and additional platforms.

• Technological and automatic information collected automatically during browsing and use of the websites via cookies, monitoring technologies, pixels, and analytics systems.

The Company may collect and process the following types of information (all or part of them):

• Identification and contact details including full name, ID number / passport, residential/business address, email address, and phone numbers.

• Financial and business data including requested budget/investment details, payment data, payment methods, financing preferences, and data required to examine suitability for real estate and investment transactions.

• Property and rights data (including in urban renewal) including Land Registry extracts (Tabu), ownership documents, details of existing apartments/properties, valuation estimates, and additional relevant data necessary for the advancement of real estate projects.

• Technical and browsing data including IP address, device identifier, browser type and operating system, language preferences, pages viewed, duration of stay on the website, estimated geographical location, and clickstream data.

The Company collects and processes information for the following legitimate purposes:

• Provision of services and execution of transactions including marketing, brokerage, initiation, accompanying real estate and investment transactions, negotiation management, and contract signing.

• Management and promotion of projects including feasibility testing, planning, registration, and execution of real estate projects, including urban renewal projects vis-à-vis rights holders and authorities.

• Contact and customer service including responding to inquiries, questions, handling requests, and providing ongoing support.

• Marketing, advertising, and direct mailing including sending updates, value propositions, newsletters, information on new projects, promotions, and event invitations via electronic means (email, SMS, instant messaging) and telephone, subject to the provisions of the law.

• Customization and profiling including analysis of preferences and browsing/investment characteristics in order to tailor content, real estate offers, and personalized advertisements on websites and across the network.

• Operation, monitoring, and improvement of websites including statistical analysis, research and development, ensuring continuous user experience, and improving service quality.

• Information security and fraud prevention including protecting company systems, identifying and preventing fraud, unauthorized use, or criminal activity.

• Compliance with legal requirements and legal defense including complying with any legal provision, responding to court orders or competent authorities, and defending against legal claims and arguments.

The Company does not sell your personal information. The Company may transfer information to third parties only to the extent necessary and for the purposes detailed in this policy, as set forth below:

• Service providers and professional advisors including CRM and mailing system operators, cloud server hosting providers, analytics and technology providers, law firms, accountants, real estate appraisers, architects, and surveyors accompanying the Company.

• Business partners and accompanying entities in the real estate sector including lending banks, insurance and finance companies (for issuing Sale Law guarantees/financing), executive contractors, supervision companies, and authorized marketing/sales agents involved in projects.

• Authorities and public bodies including government ministries, the Land Registration and Settlement Authority (Tabu), the Israel Land Authority, planning and building committees, and local authorities, insofar as required for the advancement and registration of transactions and projects.

• Legal requirement and court orders in the event of receiving a judicial order or alternative legal instruction mandating the provision of information, or within the framework of legal proceedings between the user and the Company.

• Business structural change in the event of a merger, acquisition, sale of company assets, or reorganization, provided that the receiving party undertakes to comply with the provisions of this privacy policy.

• Transfer of information abroad where some of the Company's service providers (such as cloud services and advertising platforms) operate servers outside the borders of the State of Israel, with the Company ensuring that data transfer abroad is carried out in accordance with the privacy protection regulations.

• The websites make use of cookies, pixels, web beacons, and similar technologies for their ongoing operation, collection of statistical data, identity verification, customization of the browsing experience, and display of personalized advertisements.

• The Company uses third-party analytics and advertising services, such as Google Analytics, Meta (Facebook/Instagram), Taboola, Outbrain, and additional advertising platforms.

• The data collected through these tools is also subject to the privacy policies of those companies, and their privacy policies and opt-out options can be reviewed via their respective links: Google Privacy Policy, Meta Privacy Policy, Taboola Privacy Policy, Outbrain Privacy Policy.

• Cookie management and cancellation allows you to change your internet browser settings at any time to block or delete cookies, though neutralizing cookies may impair the availability or quality of some website features.

• The Company may send the user who initiated an inquiry or registered for its services marketing updates, project offers, and messages via email, SMS, or instant messaging (such as WhatsApp).

• Opt-out allows the user to revoke consent to receive marketing mail at any time by clicking the "Unsubscribe" link appearing at the bottom of every marketing message, or by sending an unsubscribe request to the email address: sales@once-estate.com.

• In accordance with sections 13 and 14 of the Privacy Protection Law, 5741-1981, any person is entitled to review (themselves or via an authorized attorney in writing) information about them held in a database.

• A person who has reviewed information about themselves and found it to be incorrect, incomplete, unclear, or outdated may contact the database owner with a request to correct or delete the information.

• If the information used for direct mailing is no longer required by the Company for the purpose of providing services or complying with its legal obligations, the user is entitled to request its deletion from the database.

• To contact for the purpose of exercising these rights, you may reach out to the Company using the details appearing in the final section below.

• The Company implements standard organizational, technical, and physical information security measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

• However, the user clarifies and understands that due to the very nature of the internet and the transmission of information via electronic means, the Company cannot guarantee absolute and final immunity against unauthorized intrusions or cyber risks.

The Company will store personal information for the duration necessary to achieve the purposes detailed in this policy, or for a longer period as required or permitted by law (for example, for book-keeping and tax law duties, agreement documentation, or defense against legal claims subject to the statute of limitations).

The websites may contain links to websites, applications, or platforms of third parties that are not under the Company's control. The Company is not responsible for the privacy practices, information security, or content of those entities, and it is recommended to review the privacy policy of each third-party website separately.

The Company may update or modify this privacy policy from time to time, at its sole discretion. In the event of material changes, the Company will publish an appropriate notice on the websites and update the revision date at the bottom of the document. Continued use of the websites and company services following the update constitutes consent to the updated privacy policy.

For any question, clarification, request for review, correction, or deletion of information, you may contact the Company via the following means:

• Company Name: Asaf Nachshoni Investments Ltd., Company Registration Number 515301455 (ONCE)

• Mailing Address: 19 HaA'am St., Rehovot

• Email for Privacy Inquiries: sales@once-estate.com

Updated to September 2026