Privacy Policy

Last updated: 11.11.2026

1. Who we are

This website is operated by Matnat Chaim (עמותת מתנת חיים), an Israeli registered nonprofit (Amuta No. 580506889) that promotes living kidney donation. Matnat Chaim is the controller of the information collected on the site.

• Postal address: Matnat Chaim, 17 Nachum Hefetzadi St., Jerusalem 9548407, Israel
• Privacy email: [email protected]
• Phone: +972-2-500-0755

This policy applies to the Hebrew and English sections of the site and to the forms embedded in it. It is governed by Israeli law, including the Protection of Privacy Law, 5741-1981, as amended.

2. What information we collect

You are not legally required to give us any information. Providing it is voluntary. Required fields are marked in each form: without them we cannot handle your inquiry or request. All other fields are optional.

Contact form (on every page)

Full name, phone, email, topic and message. Used to reply to you and handle your inquiry. Without a name and a way to reach you, we cannot reply.

Donor questionnaire, transplant-candidate questionnaire and eligibility (BMI) quiz

Identification and contact details, and details about health: for example height, weight, medical status, and medical details of a transplant candidate. This information is used to check initial suitability for kidney donation, to support donors and candidates through the process, and to get back to you. Without it we cannot check suitability or support you.

Round Up (עיגול לטובה) sign-up

Full name, phone, email, Israeli ID number, credit card company and the last 4 digits of the card. This information is passed to the Round Up (עיגול לטובה) service, which carries out the round-up donations. The ID number is needed to identify your enrollment with the Round Up service and to issue a tax receipt. Without these details you cannot join the service. We do not collect full card numbers or security codes (CVV) on this site.

Donations

Donations are made on a payment page operated by Cardcom (donations in Israel) or IsraelGives (donations from abroad, including the US, UK and Canada). Your card details are given directly to these companies and are not stored by us. We receive the donation details and the information needed to issue a receipt, and we email a digital tax receipt (Section 46 of the Israeli Income Tax Ordinance) to the address you provided. Donations made through IsraelGives are processed by IsraelGives, which issues the receipt for those donations.

Newsletter and updates

If you agreed to receive updates, we keep your name and email or phone number to send you news about our work. See section 10.

Information collected automatically

When you browse the site, technical information is collected: IP address, browser and device type, pages visited, visit duration and referring site. Some of it is collected through cookies. See section 9.

3. Medical information – especially sensitive information

Health information is information of special sensitivity under Israeli privacy law. We collect it only in the questionnaires designed for that purpose, and only from people who choose to fill them in.

• It is used only to check suitability and to support you through a donation or transplant process.
• Access is limited to staff members who need it for their role and who are bound by confidentiality.
• As the donation or transplant process moves forward, relevant information from the questionnaire may be shared with the treating medical team and transplant center. This is done only with your consent, and only as far as the process requires.

If you fill in a questionnaire on behalf of someone else (for example, a family member waiting for a transplant), please do so only with that person’s knowledge and consent.

4. How we use information

• To reply to you and handle inquiries.
• To check initial suitability for kidney donation and support donors and transplant candidates.
• To receive donations, manage Round Up sign-ups and issue receipts.
• To send updates and newsletters, only to those who agreed.
• To operate and secure the site and protect it from misuse.
• To understand how the site is used and improve it (statistics).
• To meet our legal obligations, such as keeping donation records for tax purposes.

We will not use information for any other purpose without telling you and, where required, asking for your consent.

5. Who sees the information

• Our staff and authorized volunteers – only those who need it for their role. Contact-form submissions are stored in the website system and emailed to staff.
• Internal staff tools on the site are password-protected and not accessible to the public.
• Service providers that help us run the site and our services, as listed in section 6.
• Authorities – when the law requires us to disclose information.

We do not sell information and do not share it with others for marketing or advertising.

6. Service providers that receive information

• Fillout Inc. (United States) – runs the donor and candidate questionnaires, the eligibility quiz and one of the Round Up sign-up forms. Receives everything entered in those forms, including medical information.
• Round Up (עיגול לטובה) (Israel) – receives Round Up sign-up details and carries out the round-up donations.
• Cardcom (Israel) – donation payment processing. Receives payment details directly from you.
• IsraelGives – a platform for donations from abroad. Receives donor and payment details directly from you.
• Google (United States) – Google Analytics and Google Tag Manager (site usage statistics), and YouTube (videos embedded on the site).
• Microsoft Clarity (United States) – site usage analysis, including session recordings and heatmaps (see section 9).
• Cloudflare (United States, global server network) – delivers and secures the site. Processes IP addresses and requests to the site.
• Hosting provider – JetServer, with servers in Israel. Stores the site and contact-form submissions.
• Wordfence – a security plugin running on the site’s server that logs IP addresses and access attempts to block attacks.
• Our email service – Google Workspace.
• Mailing list – newsletter sign-ups are stored in the website system and used only to send updates from the organization.

When you follow a link to Facebook or another external site, information collected there is governed by that site’s policy.

7. Transfer of information outside Israel

Some of the providers in section 6 are based in the United States or process information on servers outside Israel, including Fillout, Google, Microsoft and Cloudflare. As a result, information you give us, including medical information in the questionnaires, is stored and processed outside Israel as well. Transfers are made in accordance with the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, on the basis of the providers’ commitments to protect the information at an appropriate level.

8. Security

• The site is served over an encrypted connection (HTTPS).
• We use protection services (Cloudflare and Wordfence) to detect and block intrusion attempts.
• Access to information is limited to authorized people, and internal tools are password-protected.
• Card details do not pass through the site and are not stored by us.
• We follow the Israeli Privacy Protection (Data Security) Regulations, 5777-2017.

No system is completely secure. If a security incident occurs, we will follow our procedure: investigate, act to stop the harm, report to the Israeli Privacy Protection Authority where the law requires, and notify affected people where needed or where the Authority instructs us to.

9. Cookies, statistics and session recordings

The site uses cookies and browser storage:

• Essential cookies – to run the site, the forms and security (including Cloudflare and Wordfence).
• Google Analytics (via Google Tag Manager) – statistics on visitors, pages viewed and traffic sources.
• Microsoft Clarity – heatmaps and recordings of how the site is used (mouse movement, clicks, scrolling), so we can find places where the site is hard to use. Fillout questionnaires load from a separate service and are not recorded.
• YouTube – an embedded video may set Google cookies when it loads or plays.
• Accessibility preferences – the accessibility toolbar stores your chosen settings only in your own browser (localStorage) and does not send them to us.

We do not use cookies for targeted advertising.

How to opt out:

• Your browser settings let you delete and block cookies. Blocking essential cookies may affect how the site works.
• Google Analytics: install the Google Analytics opt-out browser add-on.
• Microsoft Clarity: blocking third-party cookies or using a tracking blocker prevents collection. More in the Microsoft Privacy Statement.

10. Newsletters and updates

• We send newsletters or promotional messages (email, SMS or WhatsApp) only if you explicitly agreed, using a separate box that is not pre-ticked, as required by Section 30A of the Israeli Communications Law.
• Accepting our terms or filling in a form is not consent to receive mailings.
• Every message includes a way to unsubscribe. You can also write to [email protected]. Unsubscribing is free and possible at any time.
• If we send mailings based on your characteristics (segmentation), we will say that it is direct mail and where your details came from, and you can ask to be removed from the direct mail list.

11. How long we keep information

• Contact-form inquiries: for as long as needed to handle your inquiry and stay in touch, and as required by law.
• Medical questionnaires: as long as a screening or support process is ongoing, and afterwards for the period required by law. You can ask for earlier deletion – see section 12.
• Donation records and receipts: for the period required by tax law.
• Mailing list: until you unsubscribe.
• Statistics: according to the retention settings of Google Analytics and Microsoft Clarity.

At the end of the period, information is deleted or kept only in a form that does not identify you.

12. Your rights and how to use them

• Access – ask to see the information we hold about you. We will respond within 30 days.
• Correction – ask us to correct information that is wrong, incomplete or out of date.
• Deletion – ask us to delete information, unless the law requires us to keep it (for example, donation records).
• Unsubscribe – at any time, including removal from a direct mail list.
• Withdraw consent – you can withdraw consent you gave. We will stop using the information from then on.

To use any of these rights, write to [email protected] with your name and contact details. We may ask you to verify your identity before we disclose or delete information. If we refuse a request, we will explain why in writing.

If you believe we have not handled your request properly, you may contact the Israeli Privacy Protection Authority.

13. Minors

The questionnaires on this site are intended for adults (18 and over). A questionnaire for a transplant candidate who is a minor should be filled in by a parent or guardian. If we learn that a minor has given us information without parental consent, we will delete it.

14. Privacy Protection Officer

The organization has not appointed a Privacy Protection Officer. For any privacy question, contact us at +972-2-500-0755 or [email protected].

15. Changes to this policy

We will update this policy when the way we use information changes. The date at the top shows the last update. If we make a material change, we will publish it on the site and, where required, ask for your consent again.

16. Contact us

Questions about this policy or your information: [email protected], or by mail: Matnat Chaim, 17 Nachum Hefetzadi St., Jerusalem.