Privacy Policy

Who we are

Shoresh Helsinki — Jewish Learning Center is based in Helsinki, Finland. For any privacy-related question, email us at info@shoresh.fi.

What we collect, and why

Contact form

When you send us a message through our contact page, we collect your name, email address, subject, and message. We use this only to reply to you. The form is processed by our hosting provider, Netlify, and forwarded to our inbox.

Kol Shoresh newsletter

When you subscribe to Kol Shoresh, we collect your email address with your explicit consent (you submit the form and confirm via a verification email). We use it only to send you our weekly Shabbat magazine. Delivery is handled by MailerLite. Every issue includes a one-click unsubscribe link.

Online Academy

When you sign in to the Online Academy with Google, Facebook, or email, we collect your name and email address. We store this — along with your assigned classes and any messages you exchange with us — in Google Firebase, and we use it only to provide your courses.

Anonymous site traffic

Our host (Netlify) keeps short-lived technical logs of IP addresses, browser type, and pages visited. These are used only to keep the site running and secure. We do not run analytics or advertising trackers, and we do not use any cookies for marketing.

Who else can see your data

We share your data only with the services that make this site work:

• Netlify (hosting and contact-form processing) — US-based, GDPR-compliant via Standard Contractual Clauses
• MailerLite (newsletter delivery) — based in Vilnius, Lithuania (EU)
• Google Firebase (Academy login and class records) — US-based, GDPR-compliant via Standard Contractual Clauses
• Google / Meta — only if you choose to sign in with Google or Facebook, in which case those providers see your sign-in event

We never sell, rent, or share your data for advertising.

How long we keep your data

• Contact messages — until your inquiry is resolved, plus up to one year
• Newsletter subscription — until you unsubscribe (link in every issue)
• Academy account — until you ask us to delete it
• Server access logs — automatically deleted by Netlify within 30 days

Your rights

Under the EU General Data Protection Regulation (GDPR) and Finnish data protection law, you have the right to:

• See what personal data we hold about you (right of access)
• Have inaccurate data corrected (right of rectification)
• Have your data deleted (right to erasure / "right to be forgotten")
• Withdraw consent at any time, including by unsubscribing from the newsletter
• Object to, or restrict, our processing of your data
• Receive your data in a portable, machine-readable format
• Lodge a complaint with the Finnish supervisory authority — the Office of the Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, email info@shoresh.fi. We'll respond within 30 days.

Cookies

We use a single technical cookie (in your browser's local storage) to remember your language preference. We do not use tracking, analytics, or advertising cookies. Some embedded services — MailerLite's subscribe form, Google sign-in, Facebook sign-in — may set their own technical cookies when you actively use them; their privacy policies cover those cookies.

Changes to this policy

If we change anything material in this policy, we'll update the "last updated" date below and notify newsletter subscribers in their next issue.

Last updated: 5 May 2026