E-house Privacy PolicyE-House Ltd. (together with its affiliates companies – “ehouse”, “we”, “our” or “us”) provides an all-in-one eCommerce workspace and centralized logistics management platform designed to streamline and optimize eCommerce merchants’ day-to-day business operations (“Platform”).  

This Privacy Policy describes how we collect, store, use and disclose personal data or personal information which relates to (i) our business customers which are eCommerce merchants who use the Platform to manage the storage, fulfillment, and/or delivery of their products (“Member(s)”) to individuals whose orders are managed through the Services (“Receiver(s)”); (ii) users of the Platform and ehouse’s physical distribution centers on behalf of our Members (“User(s)”); and (iii) individuals who visit our website (https://www.joinehouse.com/, the “Site”, and collectively with the Platform, the “Services”), participle at our events, or otherwise interact with our online ads and content, emails, integrations or communications under our control (collectively, “Prospect(s)”).

This Privacy Policy describes ehouse’s independent privacy and data processing practices as a “Data Controller” and does not cover our privacy practices with respect to the processing of the personal data of Receivers, which we collect, process and manage solely on behalf our Members in our capacity as a Data Processor, as further explained in Section 9 below. If you are a Receiver, please contact the merchant with whom you placed your purchase and that is the “Data Controller” of your personal data for any questions or requests regarding the processing of your Personal data.
 
Specifically, this Privacy Policy describes our practices regarding:
‍
1. Data Collection & Processing
2. Data Uses & Lawful Bases
3. Data Location & Retention
4. Data Disclosure
5. Cookies and Tracking Technologies
6. Communications
7. Data Security
8. Data Subject Rights
9. Data Controller/Processor
10. Requirements under US State Privacy Laws
11. Additional Notice & Contact Details
‍‍
‍If you are a Member, User, or Prospect (“you”), please read this Privacy Policy carefully and make sure that you fully understand and agree to it. 
‍
‍You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. If you do not wish to provide us with your personal data, or to have it processed by us or any of our Service Providers (defined below), please avoid any interaction with us including visiting our Sites or using our Services. 

1. Data Collection & Processing When we use the terms “personal data” or “personal information” in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. It does not include aggregated or anonymized information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual.

We collect or generate the following categories of personal data in relation to the Services:

-Member Data: personal data concerning our Members, including contact, contractual and billing details of internal focal persons who directly engage with us (e.g., billing contacts and authorized signatories on behalf of our Members), details concerning their needs and preferences relevant to our existing engagement with them, as well as the type of ehouse services purchased. We may also collect information about the Member’s picking address if the package is not delivered from our warehouse.

-User Data: personal data we collect and generate about Users, which may include:
•User account information (e-mail address and, when applicable, hashed password);
•Platform usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (like type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies installed or utilized on their device); 
•Direct interactions and communications with us (e.g., for support).

-Receiver Data: personal data we collect about Receivers, which may include their full name, shipping address, and order details (including items ordered and status). We collect, process, and manage such data solely on behalf and under the instructions of our Members as their Data Processor, in accordance with our Data Processing Addendum with them. For more information, please refer to Section 9 below.

-Prospect Data: personal data we collect and generate about our Prospects, which may include:

•Contact and business details, as well as any needs, preferences, attributes, and insights relevant to our potential engagement; 
•Site usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (such as type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies and pixels installed or utilized on their device);
•Direct interactions and communications with us.

We collect such data either automatically, through the data subject’s interaction with us or with our Services; or through third-party services, social media, analytics tools, and other business initiatives.  

2. Data Uses & Lawful Bases
‍We use personal data as necessary for the performance of our Services (“Performance of Contract”); to comply with our legal and contractual obligations (“Compliance with Legal Obligations”); and to support our legitimate interests in maintaining and improving our Services, e.g. in understanding how our Services are used and how our campaigns are performing, and gaining insights which help us dedicate our resources and efforts more efficiently; in marketing, advertising and selling our Services to you and others; providing customer services and technical support; and protecting and securing our Users, Members, Prospects, ourselves and our Services (“Legitimate Interests”).

If you reside or are using the Services in a territory governed by privacy laws under which “consent” is the only or most appropriate legal basis for processing personal data as described in this Privacy Policy (either in general, based on the types of personal data you expect or elect to process or have processed by us or via the Services, or due to the nature of such processing) (“Consent”), your acceptance of our Terms and of this Privacy Policy will be deemed as your consent to the processing of your personal data for all purposes detailed in this Privacy Policy, unless applicable law requires a different form of consent. If you wish to revoke such consent, please contact us at support@joinehouse.com.  

Specifically, we use personal data for the following purposes (and in reliance on the legal bases for processing noted next to them, as appropriate):


Data Location & Retention

‍Data Location:
‍
We and our authorized Service Providers (defined below) maintain, store and process personal data in Israel, Europe, the UK, the US and other locations as reasonably necessary for the proper performance and delivery of our Services, or as may be required by applicable law.

ehouse is headquartered in Israel, a jurisdiction which is considered by the European Commission, the United Kingdom Secretary of State, and the Swiss Federal Data Protection and Information Commissioner (FDPIC), to be offering an adequate level of protection for personal data of individuals residing in the European Economic Area (EEA), the UK and Switzerland, respectively. We transfer data from the EEA, the UK and Switzerland to Israel on this basis. 

While privacy laws vary between jurisdictions, ehouse and its Service Providers are each committed to protecting personal data in accordance with this Privacy Policy, customary and reasonable industry standards, and such appropriate lawful mechanisms and contractual terms requiring adequate data protection, regardless of any lesser legal requirements that may apply in the jurisdiction to which such data is transferred. For data transfers from the EEA, the UK and Switzerland to countries which are not considered to be offering an adequate level of data protection, we enter into Standard Contractual Clauses as approved by the European Commission, UK Information Commissioner’s Office, and the FDPIC (as appropriate). You can obtain a copy of these clauses by contacting us as indicated in Section 12 below. 

Data Retention:
We may retain your personal data for as long as it is reasonably needed in order to maintain and expand our relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy and at our reasonable discretion. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of such data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it, and the applicable legal requirements. If you have any questions about our data retention policy, please contact us by email at support@joinehouse.com.

4. Data Disclosure
‍We may disclose personal data in the following instances:
‍
‍Service Providers:
We may engage selected third-party companies and individuals to perform services on our behalf or complementary to our own. Such service providers include logistics service providers (including for storage, packaging, transportation or payment), hosting services, data security services, billing and payment processing services, fraud detection and prevention services, web and product analytics, e-mail distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, voicemails, support, enablement and customer relation management systems, and our legal, financial and compliance advisors (collectively, “Service Providers“). Our Service Providers may have access to personal information, depending on each of their specific roles and purposes in facilitating and enhancing our Services, and may only use the data as determined in our agreements with them.
‍
‍Service Integrations:
‍You may choose to integrate third-party services with our Services such as eCommerce platforms or payment solutions (provided that such integration is supported by our Services). The provider of this integrated third-party service may receive certain relevant data (that may include personal data) from our Services, or share certain relevant data from such third-party provider’s service with our Services, depending on the nature and purpose of such integration. Note that we do not receive or store your passwords for any of these third-party services (but do typically require your API key in order to integrate with them).

‍Legal Compliance:
We may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.

‍Protecting Rights and Safety:
We may share personal data with others if we believe in good faith that this will help protect the rights, property or personal safety of ehouse, any of our Users or Members, or any members of the general public.

‍ehouse Subsidiaries and Affiliated Companies:
We may share personal data internally within our group, for the purposes described in this Privacy Policy. In addition, should ehouse or any of its subsidiaries or affiliates undergo any change in control or ownership, including by means of merger, acquisition or purchase of substantially all or part of its assets, personal data may be shared with or transferred to the parties involved in such an event. We may disclose personal data to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal data may also be disclosed in the event of insolvency, bankruptcy or receivership.

For the avoidance of doubt, ehouse may share personal data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.

5. Cookies and Tracking Technologies 
‍Our Services (including some of our Service Providers) utilize “cookies”, anonymous identifiers, pixels, container tags and other technologies in order for us to provide and monitor the use of our Services and Sites, to ensure that they perform properly, to analyze our performance and marketing activities, and to personalize your experience. Such cookies and similar files or tags may also be temporarily placed on your device. Certain cookies and other technologies serve to recall personal data, such as an IP address. To learn more about our practices concerning cookies and tracking, please see our Cookie Policy. 

You can manage your cookies preferences, and accept, remove or entirely block cookies, through your browser settings. If you choose to opt-out of certain cookies, this will typically generate a new cookie which will preserve your choice, and indicate it to our Services in your next visits so that the cookies you opted-out of will not be utilized. 

Certain web browsers may transmit “Do Not Track” signals to websites with which the browser communicates. However, due to differences in how web browsers interpret this feature and send those signals, and lack of standardization, we do not change our practices in response to such “Do Not Track” signals. 

6. Communications
‍We engage in Services and promotional communications, through email, phone, SMS and notifications.
‍
‍Services Communications:
We may contact you with important information regarding our Services. For example, we may send you notifications (through any of the means available to us) of changes or updates to our Services, billing issues, log-in attempts or password reset notices, etc. 
‍
‍Promotional Communications:
We may also notify you about new features, additional offerings, and special opportunities or any other information we think you will find valuable. We may provide such notices through any of the contact means available to us (e.g. phone, mobile or email), through the Services, or through our marketing campaigns on any other sites or platforms. If you do not wish to receive such promotional communications, you may notify us at any time by sending an email to support@joinehouse.com, or by following the “unsubscribe”, “stop”, “opt-out” or “change email preferences” instructions contained in the promotional communications you receive.
‍
‍Data Security
‍In order to protect your personal data held with us, we use industry-standard physical, procedural and technical security measures, including encryption as appropriate. However, please be aware that regardless of any security measures used, we cannot and do not guarantee the absolute protection and security of any personal data stored with us or with any third parties as described in Section 4 above. 
‍
‍Data Subject Rights
‍Individuals have rights concerning their personal data. Please contact us by e-mail at support@joinehouse.com if you wish to exercise your privacy rights under any data protection law applicable to you, including the EU or UK General Data Protection Regulation (GDPR). 

Such rights may include – the right to request access to (specific pieces of personal data collected; categories of personal data collected; categories of sources from whom the personal data was collected; purpose of collecting personal data; categories of third parties with whom we have shared personal data), rectification or erasure of your personal data held with ehouse, to restrict or object to the processing of such personal data, or to port such personal data. If you are a GDPR-protected individual, you also have the right to lodge a complaint with the relevant supervisory authority in the EU or the UK, as applicable.

If you are a Receiver and would like to make any requests or queries regarding your personal data that we process as a Data Processor on our Member’s behalf, including exercising your right to access, correct, or delete your data, please contact your merchant directly, which is the Data Controller of such data. 

Please note that when you ask us to exercise any of your rights under this Privacy Policy or applicable law, we may need to ask you to provide us with certain information to verify your identity, in order to avoid disclosure to you of personal data related to others and to better understand the nature and scope of personal data that you request to access. We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the individual about whom we collected the personal data, or that such data is processed on behalf of any of our Members, so that we may forward it to such Member for their further handling. Such additional information may be then retained by us for legal purposes (e.g., as proof of the identity of the person submitting the request, or proof of request fulfillment), in accordance with Section 3 above.

‍Data Controller/Processor
‍Certain data protection laws and regulations, such as the GDPR, typically distinguish between two main roles for parties processing personal data: the “Data Controller”, who determines the purposes and means of processing; and the “Data Processor”, who processes such data on behalf of the data controller. Below we explain how these roles apply to our Services, to the extent that such laws and regulations apply.

‍Ehouse is the “Data Controller” of Member, User and Prospect Data, as detailed in Section 1 above. Accordingly, we assume the responsibilities of a Data Controller (solely to the extent applicable under law), as set forth in this Privacy Policy. 

‍Ehouse is the “Data Processor” of Receiver Data that we process on behalf of our Members (who are the Data Controllers of such data) and in accordance with their reasonable instructions, subject to our Terms, our Data Processing Addendum (to the extent applicable) and other commercial agreements with them. Therefore, our Members are responsible for handling requests to exercise privacy rights from Receivers or other individuals whose data they process through the Services.

‍Requirements under US State Privacy LawsThis Privacy Policy describes the categories of personal information we may collect and the sources of such information (in Section ‎1 above), and our retention (Section ‎3) and deletion (Section 8) practices. We also included information about how we may process your information (in Sections ‎1 through ‎7), which includes “business purposes” under the CCPA and similar state laws, as applicable. We do not “sell” or “share” your personal information for the intentions and purposes of the CCPA, nor disclose personal information that we “control” to any third party for their direct marketing purposes. We may disclose personal data to third parties or allow them to collect personal data from our Services as described in Sections ‎4 and 5 above, if those third parties are our Members (in respect of Receiver Data processed on their behalf) or our authorized Service Providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal data, or if you integrate the Services of third parties, or direct us to disclose your personal data to third parties, or as otherwise described in Section 4 above. You may also designate an authorized agent, in writing or through a power of attorney, to request to exercise your privacy rights on your behalf. The authorized agent may submit a request to exercise these rights by emailing us. We will not discriminate against you by withholding our Services from you or providing a lower quality of service to you for requesting to exercise your rights under the law.

If you have any questions or would like to exercise your rights under any applicable US State privacy laws, you can contact support@joinehouse.com.

‍Additional Notices & Contact Details

‍Updates and Amendments:
We may update and amend this Privacy Policy from time to time by posting an amended version on our Services. The amended version will be effective as of the date it is published. When we make material changes to this Privacy Policy, we will give notice as appropriate under the circumstances, e.g., by displaying a prominent notice within the Services or by sending an email. Your continued use of the Services after the changes have been implemented will constitute your acceptance of the changes. 

‍Third Party Websites and Services:
Our Services may include links to third-party websites, and allow integrations with third-party services. Such websites and third-party services, and any information you process, submit, transmit or otherwise use with or to such websites and services are governed by such third party’s terms and privacy practices and policies, and not by this Privacy Policy. We encourage you to carefully read the terms and privacy policies of such websites and third-party services. 

‍Our Services are not directed to children under the age of 16:
We do not knowingly collect personal data from children and do not wish to do so. If we learn that a person under the age of 16 is using the Services, we will attempt to prohibit and block such use and will make our best efforts to promptly delete any personal data stored with us with regard to such child. If you believe that we might have any such data, please contact us by email at support@joinehouse.com.

‍EU Representative:  eHouse Space GmbH has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the GDPR. eHouse Space GmbH may be contacted on matters related to the processing of personal data of residents of the EU/EEA by email at support@joinehouse.com or by post at Charlottenburger Str. 62, Berlin.

‍UK Representative: JOIN EHOUSE LTD has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the UK GDPR. JOIN EHOUSE LTD may be contacted on matters related to the processing of personal data of UK residents by email at support@joinehouse.com or by post at 95A Rye Ln, London

‍Questions, concerns or complaints: If you have any comments or questions regarding our privacy policy or practices, or if you have any concerns regarding your personal data held with us, or if you wish to make a complaint about how your personal data is being processed by ehouse, please contact ehouse’s at support@joinehouse.com. 

Last updated: July 2023

Social Media Giveaway Terms & Conditions
By entering the competition you agree to be bound by these terms and conditions.
The Promotors competitions with entry via Instagram and/or Facebook are open only to residents of Berlin, Germany.
No purchase necessary.
Winners will not be required to pay to enter the competition.
Entrants must be over 18 years old on the date of their entry.
Employees of The Promoter are not eligible to enter.
Instagram or Facebook are not in any way affiliated or involved in the competition.
Only one entry per person per competition will be accepted.
The Prize will be awarded to a randomly selected winner who has entered on Facebook/Instagram.
The Promoter will not be held liable if the named prize becomes unavailable or cannot be fulfilled.
The Promoter will not be help liable for any failure of receipt of entries.
The Promoter takes no responsibility for any entries which are lost, delayed, illegible, corrupted, damaged, incomplete or otherwise invalid.
To the extent permitted by applicable law, The Promoter’s liability under or in connection with the competition or these terms and conditions shall be limited to the cost price of the Prize in question.
To the extent permitted by applicable law, The Promoter shall not be liable under or in connection with these terms and conditions, the competition or any Prize for any indirect, special or consequential cost, expense, loss or damage suffered by a participant even if such cost, expense, loss or damage was reasonably foreseeable or might reasonably have been contemplated by the participant and the promoter and whether arising from breach of contract, tort, negligence, breach of statutory duty or otherwise.
Prizes are non-negotiable, non-transferable and non-refundable.
No cash alternative is available. Where a Prize becomes unavailable for any reason, the promoter reserves the right to substitute that prize for a prize of equal or higher value.
The name, address, email address and phone number of the winner must be provided to The Promoter if requested and will be shared to enable fulfilment of the Prize.
​In the event of unforeseen circumstances beyond The Promoter’s reasonable control, the promoter reserves the right to cancel, terminate, modify or suspend the competition or these terms and conditions, either in whole or in part, with or without notice.The Promoter's decision is final. No correspondence will be entered into.The winner’s name and social media username may be posted on the social media profiles of The Promotor after the winner has been selected.