Route 38 · Data & Privacy

Privacy Policy

Last updated: February 2026

This policy explains what personal information Route 38 collects, why, and what you can do about it. We've tried to write it in plain English.

Operated by Route 38 LLC (Maryland). Questions: privacy@route38.co.il

Contents

Twelve sections, no legalese maze

Jump straight to what you need. Every section is written to be read.

  1. 01 Who we are
  2. 02 What we collect
  3. 03 Why we use it
  4. 04 Who we share it with
  5. 05 Where your information goes
  6. 06 How long we keep it
  7. 07 Your rights
  8. 08 Security
  9. 09 Children
  10. 10 Referrals
  11. 11 Changes
  12. 12 Getting in touch
01

Who we are

Route 38 LLC is a Maryland limited liability company. In this policy we call ourselves "Route 38", "we", or "us".

Registered address: 2833 Smith Ave STE 308. Baltimore MD 21209. You can reach our privacy team any time at privacy@route38.co.il.

Route 38 Professional Services Ltd, our affiliated Israeli company, acts as the legal employer in Israel when we provide Employer-of-Record (EOR) services. Both Route 38 LLC and Route 38 Ltd are covered by this policy — wherever your data sits, the same commitments apply.

02

What we collect

We only collect what we genuinely need to answer your questions, run payroll, and pay out referral rewards. Here's the breakdown.

When you fill in a form

The basics you choose to give us so we can respond to your enquiry or quote.

NameEmailPhoneCountryEmployerJob titleFree text

When you become a client or employee

Identity documents, date of birth, national ID or passport, address, bank details, salary and tax info, dependants, and pension or benefits elections.

Referral program

Name and contact of the person referred and the referrer, plus tax information such as a W-9 where we need it to issue a reward.

Automatically

IP address, browser and device details, pages you viewed, the site that referred you, and your city or country-level location.

We do not ask for — and do not want

Government ID or bank details submitted through a web form; health information; race, religion, politics, sexual orientation, or union membership. If you send them anyway, we'll delete them.

03

Why we use it

Every use of your data maps to a specific, lawful reason. Here's what we do, and why we're allowed to.

What we use it forWhy we're allowed to
Responding to your enquiry or quoteYour request; our legitimate interest
Providing EOR & payroll servicesPerforming our contract
Israeli employment, tax & social insuranceLegal obligation
Running the referral program & rewardsYour request; our legitimate interest
Verifying a referralPreventing fraud
Improving the websiteYour consent (cookies); legitimate interest
Marketing emailsYour consent — withdrawable anytime
Preventing fraud & abuseLegitimate interest; legal obligation

We do not sell your personal information. No cross-context behavioural or targeted advertising. No profiling with legal effects.

04

Who we share it with

We share your information only where it's necessary to deliver the service — and only with these categories:

05

Where your information goes

Route 38 operates between the United States and Israel, so your information may move between the two.

Israel is recognised by the European Commission as providing an adequate level of data protection. Where no adequacy decision applies, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

06

How long we keep it

We keep information only as long as we need it — then we let it go.

Enquiries that don't go anywhere[24 months] from last contact
Client & employment recordsEngagement + Israeli tax/employment retention, generally [7 years]
Referral records[24 months] after program closes, longer if tax requires
Marketing preferencesUntil withdrawn, plus a record of withdrawal
07

Your rights

Everyone can ask us to:

  • Tell you what we hold and give you a copy
  • Correct what's wrong
  • Delete information where we don't need it
  • Stop marketing — always, no questions asked
  • Object to or restrict certain uses

Israel

Under the Protection of Privacy Law 5741-1981, you may complain to the Privacy Protection Authority.

Maryland

Under the Online Data Privacy Act, you have a right to a portable copy and a right to appeal our decision.

California, Colorado, Connecticut, Virginia & other US states

We honour the same rights regardless of the state you live in.

UK & EEA

You have data portability rights and can complain to your local supervisory authority.

How to exercise your rights

Email us at privacy@route38.co.il. We respond within 45 days, at no charge. We may need to verify your identity, and an authorised agent may act for you with written permission.

Email privacy@route38.co.il
08

Security

We protect your information with access controls, encryption in transit, vetted providers, and limited internal access. No system is perfectly secure, so if a breach occurs we'll notify you where the law requires it.

09

Children

Our services are for adults. We don't knowingly collect information from anyone under 18, and we'll delete it on notice. We do not sell the data of, or serve targeted ads to, under-18s (as required by Maryland law).

10

Referrals — a word to both sides

Naming a referrer means we'll contact them to confirm the referral and arrange the reward. If you're named as a referral, we'll tell you and you can opt out. Please only refer people who would genuinely want to hear from us.

11

Changes

When this policy changes, we update the date at the top. If a change materially affects you, we'll tell you directly rather than leaving you to find it.

12

Getting in touch

Questions or complaints?
Email privacy@route38.co.il, or write to us at our address above.

You're entitled to complain to the Israeli Privacy Protection Authority, your state Attorney General, or your local data protection authority — but we'd genuinely appreciate the chance to fix it first.

Email privacy@route38.co.il