Who we are
All Car S&T Ltd. (company no. 517156618), trading as Millennium Leasing, 6 HaMaslul St, Ashkelon, is responsible for the information described here (the “database controller” under the Privacy Protection Law, 5741-1981).
This policy covers the website, the WhatsApp channel, the voice assistant, phone and SMS, the tracking systems in our cars, and the information you give us when you sign a contract with us. It follows the Privacy Protection Law as amended by Amendment 13, in force since August 2025.
What we collect and why
We collect only what we need to provide the service, and use it only for the purposes described here.
- The website
- When you send a form (rent, lease, buy, trade-in, business or “call me back”): your name, phone and what you wrote in the form, such as dates, car type, plate and car details, and photos of a trade-in car. Purpose: to get back to you, prepare an offer and provide the service. A plate is checked in the Ministry of Transport's public vehicle registry. Your IP address is kept only as a hashed code, to block abuse.
- Your number, the name shown on WhatsApp, and the messages, photos and locations you send. Purpose: to answer, open a request, and, for existing customers, show their contract and car details. Messages pass through Meta (WhatsApp) and the service provider Gupshup.
- The voice assistant
- The assistant is an AI, and says so. Your voice goes to Google (Gemini) so the assistant can understand and answer; we keep the conversation as text only, never as a recording. You can type instead of talking. No request is sent until you check the card on the screen and tap “Send”.
- Phone and SMS
- Calls and texts go through the communications provider Twilio. We keep: the numbers, the time and length of the call, the text of messages and notes our team writes. Some calls may be recorded to improve our service and settle disagreements; recordings are kept by the communications provider, and only managers and the employee on the call can listen to them. A voicemail you leave is recorded.
- Customers and contracts
- When you rent, lease or buy a car: your name, ID number, driving licence, address, phone and email, the car and contract details, payments and charges, signed agreements, and handover and return details (km, fuel, damage). Purpose: the contract and billing, legal duties (such as tax law), insurance, traffic fines and road tolls.
- Vehicle tracking (Ituran)
- Our cars have an Ituran unit. It reports the car's location, trips, km, speed and driving events, and we match each trip to the contract and driver who had the car at the time. Purpose: fleet management, billing by km, finding a stolen car, handling fines, tolls (Highway 6) and accidents, safety and maintenance. Location is sensitive information: only the office sees locations, and every look is logged. Customers see km and services only, never locations.
- Businesses
- Contact details of people at companies, given to us or found in public sources, to offer business leasing. Anyone who asks us not to call is put on a “do not call” list, which we check before every call.
Do you have to give us information?
There is no legal duty to give us information; you give it of your own free will. Without some details (for example a name and phone with a request, or an ID number and driving licence for a rental contract) we can't get back to you or sign a contract with you.
Who sees the information
- Our employees, each according to their role: the office, the sales team and the field team.
- The Millennium Group: the group's system admin sees the list of the group's employees (name, mobile number, the business each works in, the dining rooms they may order in and whether they have an app sign-in) and each employee's monthly food total, and for the employees' cars also the charges and the car-benefit values. The group's fleet manager sees the cars and drivers, and when choosing a car's driver also the employee's name, business and the last four digits of their phone. Each dining room's kitchen sees the name on each of its orders.
- Providers that run our systems for us, only to provide the service: website hosting and the database (servers in Frankfurt, Germany), WhatsApp (Meta and Gupshup), phone and SMS (Twilio), the voice assistant (Google), vehicle tracking (Ituran) and our accounting software.
- Insurers, garages and assessors, when an accident, damage or repair needs handling.
- Authorities, when the law requires: for example the police, the Tax Authority and the authorities that handle traffic fines.
We don't sell information or pass it to others for advertising.
Transfers abroad
Some of our providers operate outside Israel, in the European Union and the United States. Information is transferred to them under the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001: to countries that give protection similar to Israel's, or to providers that have committed to protect the information and use it only to serve us.
Security
- Communication with the website is encrypted (HTTPS).
- Access to information is by role, with a personal password; passwords are kept only as a hashed code, never as text.
- Every look at a car's location is logged.
- Our providers are bound to confidentiality and information security.
No system is fully secure. If a serious security incident happens, we will report it as the law requires.
How long we keep information
We keep information only as long as we need it for the purpose it was collected for, or as long as the law requires:
- Contracts, invoices, payments and signed documents: at least 7 years, as tax law requires.
- Requests that didn't lead to a deal, and WhatsApp and SMS conversations: up to 24 months after the last contact.
- Voice assistant transcripts: up to 12 months.
- Locations and trips from Ituran: up to 12 months, unless needed for a fine, a claim or a dispute.
- Call recordings: up to 12 months.
After that, the information is deleted or kept in a form that doesn't identify you.
Your rights
- To see the information we hold about you (section 13 of the Privacy Protection Law).
- To ask us to correct or delete information that is wrong, incomplete, unclear or out of date (section 14 of the law).
- To ask us to remove you from direct-mail lists (section 17F of the law), and to refuse advertising messages at any time. On WhatsApp and SMS you can write “STOP”.
To use a right, write to AllCar@all-car.co.il or call 077-8801700. We will answer within 30 days. We may ask you to confirm your identity, so that we don't give information to someone who isn't entitled to it. If you get no answer, you can contact the Privacy Protection Authority.
Minors
Our services are meant for adults. We don't knowingly collect information about children under 18.
Cookies
The website uses only necessary cookies: a language cookie (kept for a year) and a sign-in cookie for people who sign in to their area (up to 30 days). There are no advertising, analytics or third-party tracking cookies.
Changes to this policy
We may update this policy. The date of the last update is at the top of the page.
Contact
All Car S&T Ltd., 6 HaMaslul St, Ashkelon. Phone: 077-8801700. Email: AllCar@all-car.co.il. Privacy requests: AllCar@all-car.co.il.