Introduction
Effective as of October 19, 2026
We at TIPA Corp. Ltd. (together with its affiliated companies – “TIPA”, “we”, “us” or “our”), develop, design, market and supply innovative, sustainable packaging solutions for business customers. Our offerings include advanced compostable flexible films, laminates and finished packaging designed to deliver the functionality and performance of conventional plastic packaging, as well as recyclable paper-based packaging solutions, serving customers across a wide range of products, applications and industries (collectively, the “Packaging Solutions”).
This Privacy Policy describes how we collect, store, use, and disclose data relating to identified or identifiable natural persons (“personal data” or “personal information”) in relation to the following categories of individuals:
- Business Contacts who act as or work for a service provider or supplier to TIPA, or for one of our existing customers or other business partners, and whose personal data is made available to us for purposes such as billing, invoicing and managing those relationships; and
- Prospects who engage with us in relation to our Packaging Solutions – whether through our websites at https://tipa-corp.com/, https://www.bio4pack.com/, and https://sealpap.com/, our online ads and content, or our emails and other communications (collectively – the “Sites“) – or who otherwise interact with us through sales and marketing channels under our control. This also includes attendees at events, webinars and other business or marketing activities that we host or take part in, and individuals who act as or work for our prospective customers or partners.
The activities described above are the “Services” to which this Privacy Policy applies. Specifically, this Privacy Policy describes our practices regarding:
If you are a Business Contact or a Prospect (“you” or “your”), please read this Privacy Policy carefully and make sure you fully understand it and accept its application to you. You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. However, without it, we may be unable to provide you with the fullest access to the Services or provide them to you, nor offer the best experience when interacting with our Sites. If you do not wish to provide us with your personal data, or to have it processed as detailed in this Privacy Policy, please refrain from accessing, using or interacting with our Services. You may also submit a request to exercise your rights, or to withdraw your consent, as explained in Section 9 below.
Data Collection
We collect various types of personal data about you in relation to the Services. Such data is typically collected through your interactions with us or with our Sites or Services, through automatic means, directly from you, or through third parties, including our Service Providers (defined in Section 5 below). Specifically, depending on the nature of our relationship with you, we may process personal data about you as detailed below.
- Business Contact Data: We may collect or generate the following types of personal data concerning you when you interact with us as a Business Contact:
- Contact, professional and commercial information: Name, email address, phone number, company, position, country, and other professional or contact details, together with information concerning our relationship with you or the organization you represent, such as expressed, presumed or identified product or service requirements, quotations, purchase or sale orders, contracts, transaction history, customer, partner or supplier records, and communications preferences.
- Financial and billing Information: Information required to administer payments made or received in connection with our commercial relationships, such as contractual and billing details, billing addresses, payment methods, bank account information, IBAN or SWIFT details and receipts, where these relate to an identifiable individual. Information relating solely to a legal entity (e.g., a company) is not personal data and is not covered by this Privacy Policy.
- Direct interactions and communications with us: Personal data contained in emails, forms, telephone or video conference calls, chats, letters and other correspondence with us, together with recordings and transcripts of such communications, where applicable.
- Prospect Data: When you interact with us or our Sites as a Prospect, we may collect or generate the following types of personal data about you:
- Business profile information: Name, email address, phone number, industry, company, position, country, together with your expressed or inferred product needs and interests, marketing preferences, and other attributes and insights relevant to our potential engagement.
- Sites usage information: Connectivity, technical and usage data concerning your interactions with our Sites, such as browser version and details, device and application information (like device type, operating system, mobile device ID, IP address, location, locale and language settings used, network interfaces and bandwidth), activity and web server logs, crash reports, the cookies and pixels installed or utilized on your device (as further described in Section 6 below), and your recorded activity (sessions, clicks, use of features, logged activities and other interactions) in connection with the Sites.
- Direct interactions and communications with us: Personal data contained in any forms and inquiries that you may submit to us, including registrations to mailing lists or events that we host, organize, sponsor or take part in, surveys, feedback and testimonials received, and interactions through social media channels and instant messaging apps; recordings and transcripts of your phone and video conference calls, emails, and chats with us, as well as screen recordings, screenshots, documentation and relevant information that may be automatically recorded, tracked, transcribed and analyzed, for purposes such as analytics, quality control, improvements, training, and record-keeping.
- Data received from third parties: We may also receive personal data concerning you from event or webinar organizers, business partners, Service Providers, professional networking platforms such as LinkedIn, other TIPA group companies, and publicly available sources. This may include your name, company, position, country, contact details, professional background, and business interests and preferences.
For the purposes of the California Consumer Privacy Act (“CCPA”), specifically in the last 12 months preceding the date this Privacy Policy was last updated, we have collected the personal information described above, which falls within these CCPA-defined categories: Identifiers; Customer Records Information; Professional or Employment-Related Information; Commercial Information; Internet or other Electronic Network Activity Information; Inferences; Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information; and Location Information. We do not use or disclose sensitive personal information, as defined by the CCPA, beyond what is necessary to provide our Services.
Data Uses
We use your personal data as necessary for the following business and commercial purposes and in reliance on the legal bases detailed below:
Purpose | Legal basis for processing |
To facilitate, operate and provide our Sites and Services. | ▪ Legitimate Interests |
To provide customer service and technical support | |
To monitor, study and analyze use of our Sites and Services. | ▪ Consent (where applicable) ▪ Legitimate Interests |
To gain a better understanding of how you use and interact with our Sites and Services, and how we could improve your and others’ user experience and continue improving our offerings and the overall performance of our Services. | |
To facilitate and optimize our marketing campaigns, ad management, and sales operations, and to manage and deliver advertisements for our Packaging Solutions more effectively, including on other websites and applications. This includes contextual, behavioral and interests-based advertising based on your and others’ activities, preferences or other data available to us or to our Service Providers (defined in Section 5 below), and business partners. | |
To explore and pursue growth opportunities by facilitating a stronger local presence and tailored experiences through facilitating or sponsoring certain events, offers, promotions, and offline campaigns. | |
To contact you with general or personalized Services-related messages, as well as promotional messages that may be of specific interest to you, as further described in Section 7 below. | |
To create aggregated statistical data, inferred non-personal data or anonymized or pseudonymized data (rendered non-personal), which we or our business partners may use to provide and improve our respective services, or for any other purpose. | ▪ Legitimate Interests |
To enforce our agreements, resolve disputes, and protect the rights and interests of TIPA, any of our personnel, Service Providers, customers, website visitors, or any member of the general public. | |
To evaluate, test and monitor our Services, diagnose or fix problems and bugs, as well as develop new features, technologies, and improvements to our Services. | ▪ Legal Obligations ▪ Legitimate Interests |
To support and enhance our data security measures, including for purposes of preventing and mitigating the risks of fraud, error, or any illegal or prohibited activity. | |
To comply with court orders and warrants, prevent misuse of our Sites, and take any action in any related legal dispute and proceeding. | |
To comply with applicable laws and regulations. |
If you reside in or are using the Services in a territory governed by privacy laws under which “Consent” is the only or most appropriate lawful basis for the processing of personal data (in general, or specifically with respect to the types of personal data you expect or elect to submit or have processed via the Services), your acceptance of our contractual terms (where applicable) and this Privacy Policy will be deemed as your consent to the processing of your personal data for all purposes detailed in this Privacy Policy, unless applicable law requires a different form of consent. If you wish to revoke such consent, please contact us at legal@tipa-corp.com.
Data Location
Your personal data may be maintained, stored and processed by us, our authorized Service Providers (as defined in Section 5 below) and other recipients in multiple locations, including in the European Union (EU), the United Kingdom (UK), Israel, the United States of America, Australia, and other jurisdictions, as reasonably necessary for the proper performance and delivery of our Sites and Services, or as may be required by law.
Local privacy laws may be different in your location. For such data transfers across territories, we and our Service Providers take appropriate measures to protect your personal data, your fundamental rights and freedoms, and the exercise of your rights in accordance with applicable laws.
If we transfer personal data originating in the European Economic Area (EEA), the UK, or Switzerland to countries that have not been recognized as offering an adequate level of data protection based on the adequacy decisions published by the European Commission (and associated), the UK or Switzerland, as relevant, we rely on appropriate contractual undertakings and data transfer mechanism as established under applicable law, such as the standard contractual clauses adopted by the EU (available here) and the UK (available here). You can obtain a copy by contacting us as indicated in Section 12 below. For data transfers to countries that have been recognized to be providing an adequate level of data protection, we rely on such adequacy findings regarding the level of data protection offered by the recipient country.
Data Retention
We will retain your personal data for as long as is reasonably necessary for us to maintain and expand our relationship and provide you with our Services and offerings; to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise after our relationship with you or the organization you represent has ended), all in accordance with our contractual terms and data retention policy.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it and the applicable legal requirements.
Please note that except as required by applicable law or agreements governing our relationship with you or your organization, we will not be obligated to retain your personal data for any particular period, and we are free to securely delete, anonymize or restrict access to it for any reason and at any time, with or without notice to you.
Data Disclosures
We may disclose your personal data to certain third parties, as follows:
- Service Providers: We engage selected third-party companies and individuals to perform services complementary to our own. Such service providers may include hosting and server co-location, communications and content delivery networks (CDNs), data and cybersecurity, fraud detection and prevention, web analytics, email distribution and monitoring, content transcription and analysis, session, activity recording and analysis, performance measurement, data optimization and marketing, social and advertising networks, content providers, support and customer relation management systems, sessions recording services, and our business, legal, financial and compliance advisors (collectively, “Service Providers”). Our Service Providers may have access to your personal data, depending on, and limited to, each of their specific roles and purposes.
- Partnerships: We engage selected business and channel partners, resellers, distributors, agents and providers of professional services related to our Services. In such instances, we may disclose relevant contact, business and usage details to the respective partner, to allow them to engage with you for such purposes. If you directly engage with any of our partners, please note that any aspect of that engagement which is not directly related to the Services and directed by TIPA, is beyond the scope of this Privacy Policy, and may therefore be governed by the partner’s terms and privacy policy.
- Event Collaborators: If you register for any event that we host, organize or sponsor, then with your permission we may disclose your registration details to others, including the hosts, organizers, speakers, service providers, and sponsors of that event, so that they may contact you with relevant information and offers, or to fulfil any promotions related to that event.
- Sharing your Feedback or Recommendations: If you submit a public review or feedback, note that we may (at our discretion) store and present your review on our Sites and in our Services. If you wish to remove your public review, please contact us at legal@tipa-corp.com.
- TIPA Group and Organizational Changes: We may disclose personal data internally within our group of companies for the purposes described in this Privacy Policy. In addition, should TIPA or any of its affiliates undergo any change in control or ownership, including by means of merger, acquisition, or purchase of substantially all or part of its assets, your personal data may be disclosed to the parties involved in such an event. If we believe that such change in control might materially affect your personal data then stored with us, we will notify you of this event and the choices you may have via email or prominent notice on our Sites.
- Legal Compliance: In exceptional circumstances, we may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; and/or (c) disclosure is required to protect the security or integrity of our Sites and Services.
- Protecting rights and safety: We may disclose personal data to others if we believe in good faith that this will help protect the rights, property, or personal safety of TIPA or our personnel, directors and officers, any of our customers, Business Contacts, Prospects, Service Providers, or any member of the general public.
- Additional disclosures: For the avoidance of doubt, TIPA may disclose personal data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal and anonymous.
For the purposes of the CCPA, during the 12 months preceding the last update of this Privacy Policy, we may have disclosed to the third parties listed above the following CCPA-defined categories of personal information: Identifiers; Customer Records Information; Professional or Employment-Related Information; Commercial Information; Internet or other Electronic Network Activity Information; Inferences; Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information; and Location Information.
Cookies & Tracking Technologies
When you visit our Sites, we and other Service Providers use cookies, pixels, tags, local storage and other similar technologies (collectively, “cookies”) to operate, secure and improve our Sites and Services, remember your settings and preferences, analyze how our Sites are used, support personalization and enhanced functionality and, where applicable, measure and support our marketing and advertising.
Cookies are small packets of information sent to your browser and returned each time your browser accesses the server that placed them. Some are placed directly by us; others are placed by third-party Service Providers whose technologies are incorporated into our Sites. Session cookies are temporary and generally removed when you close your browser, while persistent cookies remain on your browser or device for a set period or until you delete them – we use both.
The cookies on our Sites generally fall into four categories:
- Necessary Cookies are required to operate and secure our Sites, provide basic functionality, remember your privacy choices and detect or prevent abnormal or fraudulent activity – these cannot generally be disabled through our cookie banner, though you may block or delete them through your browser settings, which may prevent parts of our Sites from working as intended.
- Functional Cookies remember your settings and preferences and enable enhanced functionality and personalization.
- Statistics Cookies help us understand how visitors use our Sites, measure traffic and performance, identify technical issues and improve our Services.
- Targeting Cookies help us measure the effectiveness of our marketing and deliver content or advertising more relevant to you.
We use Google Analytics to understand how visitors interact with our Sites, including page content viewed, clicks, touches, movements, scrolls and keystroke activity. We do not merge the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to and use of the Sites is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can learn more about how Google collects and processes data specifically in connection with Google Analytics here. Further information about your option to opt out of these analytics services is available here.
Depending on the cookie, the information collected may include your IP address; cookie, browser and device identifiers; browser and device type; operating system; language and approximate location; referring and exit pages; pages viewed; date, time and duration of visits; and interactions such as clicks and scrolls.
We will not set or use optional cookies without your consent where required by applicable law. In those locations, our cookie banner will appear when you first interact with our Sites and allow you to accept or reject optional cookies by category. You may change your choices at any time by clicking the “Your Privacy Choices” link in the footer of our Sites, or by reopening the cookie banner via the toggle icon in the footer of each page – withdrawal does not affect the lawfulness of processing carried out beforehand. These choices also govern any “sale“ or “sharing“ of personal information for targeted advertising under US state privacy laws – see Section 11 below.
You may also adjust your browser settings to accept, block or delete cookies. Your preferences generally apply only to the browser and device from which they were submitted, so if you use a new device or browser, or clear your cookies, you may need to submit them again.
Our Sites do not currently respond to “Do Not Track” browser signals, as there is no universally accepted standard for interpreting them. Where required by applicable law, however, we recognize and process browser-based opt-out preference signals such as the Global Privacy Control.
Further information about the specific cookies used on our Sites, including their providers, purposes, categories and durations, is available through our cookie banner.
Communications
We may engage in service and promotional communications by email, phone, SMS and other available means.
Service Communications: We may contact you with information necessary to manage our business relationship – for example, order confirmations, shipping and delivery updates, invoicing and payment matters, responses to your inquiries, and notices regarding this Privacy Policy or our terms of engagement. As these service communications are essential to our business relationship or required by law, they cannot be opted out of.
Promotional Communications: We may also notify you about new Packaging Solutions, product launches, industry events, trade shows, webinars, special opportunities or other information we think you will find valuable, through any of the contact means available to us or through our marketing campaigns on other sites and platforms. If you do not wish to receive such promotional communications, you may notify us at any time at legal@tipa-corp.com, or by following the “unsubscribe,” “stop,” “opt-out” or “change e-mail preferences” instructions contained in the promotional communications you receive.
Data Security
We implement industry-standard physical, procedural, and technical security measures to secure your personal data held with us, and to reduce the risks of theft, damage, loss of information, or unauthorized access or use of personal data. However, please be aware that regardless of any security measures used, we cannot and do not guarantee that our Services will be immune to any wrongdoing, malfunctions, unlawful interceptions or access, or other forms of abuse and misuse. We continue to regularly seek new ways and tools for further enhancing the security of our systems.
Your Rights
If you wish to exercise your privacy rights under any applicable law, including but not limited to the EU General Data Protection Regulation (“GDPR”), the UK GDPR, Israel’s Protection of Privacy Law (“PPL”), or the CCPA, you may do so by contacting us at legal@tipa-corp.com.
Such rights may include – each to the extent available to you under the laws that apply to you – the right to know or request access to specific pieces of personal data collected, categories of data collected, and sources from whom it was collected, as well as the purposes of collecting it and categories of third parties to whom we have disclosed it; the right to request rectification or erasure of your personal data held with TIPA; the right to restrict such personal data processing (including the right to direct us not to sell or share your personal data with third parties now or in the future, as described in Section 11 below); the right to receive a copy of such personal data in a portable format and, where technically feasible, to have it transmitted to another organization; the right to object at any time to any processing of your data which is based on our legitimate interests, or to withdraw your consent to any processing of your personal data which is based on such consent (as detailed in Section 2 above); and the right to be free from discriminatory treatment for exercising these rights.
Additionally, you have a right to lodge a complaint with a competent data protection authority, such as the supervisory authority in the EU Member State of your habitual residence, place of work, or of the alleged GDPR infringement, the UK’s Information Commissioner’s Office, or your State’s Attorney General (as relevant). If you believe that our processing of your personal data infringes applicable data protection law, or if you wish to make a complaint about how we have handled your request, you may also submit a complaint directly to us as indicated in Section 12 below.
To the extent applicable to you, you may designate an authorized agent, in writing or through a power of attorney, to request to exercise your privacy rights on your behalf. The authorized agent may submit a request to exercise these rights by contacting us at the email address noted above.
When you or an authorized agent submit a rights request, we may ask for information reasonably necessary to verify your identity and to avoid disclosure to you of personal data relating to others, as well as to clarify the nature and scope of your request. We will not act on any request until we can reasonably verify that you are the individual to whom the personal data relates. Any information you provide for these purposes may be retained by us for legal purposes, such as proof of identity or of fulfillment of the request, in accordance with Section 4 above. Where relevant, we may redact from the data which we make available to you, any personal data or confidential information related to others.
Roles & Responsibilities
Certain data protection laws and regulations, such as the EU or UK GDPR, Israel’s PPL and California’s CCPA, typically distinguish between two main roles for parties processing personal data: the “Data Controller” (a “Business” under the CCPA, or “Database Controller” under the PPL), who determines the purposes and means of processing; and the “Data Processor” (a “service provider” under the CCPA, or “Holder” under the PPL), who processes the data on behalf of the Data Controller.
TIPA is the Data Controller of Business Contact Data and Prospect Data, and assumes the corresponding responsibilities to the extent applicable under law and as set out in this Privacy Policy. In such context, the Service Providers described in Section 5 process such data on our behalf in the role of Data Processor.
Opt-Out of Sale/Sharing
Under some US data protection laws, like the CCPA, our disclosure of certain internet activity and device information with third parties through cookies may be considered a “sale” or “sharing” of personal information. We do so in pursuit of the business and commercial purposes described in Section 2 above.
For the purposes of the CCPA, in the last 12 months we may have “sold” or “shared” (for targeted advertising) the following CCPA-defined categories of personal information with our analytics and advertising Service Providers: Internet or Other Electronic Network Activity Information, Geolocation Data, Commercial Information, and Inferences, in each case where the relevant cookies remained active because the visitor had not opted out of them. TIPA has not knowingly sold or shared the personal information of individuals under the age of 16.
If you access our Sites from a US state whose privacy laws grant you the right to opt out of the “sale“ or “sharing“ of your personal information, you may do so in the following ways:
- Click the ‘Your Privacy Choices’ link available on the footer of our Sites or reopen the cookie banner by clicking the toggle icon on the same footer, move the toggle switch next to “Share or Sale of Personal Information” to grey (disabled), then click the “Confirm my Choices” button. Please note: If you visit us from a different device or browser, or clear cookies, then you need to return to this screen to re-select your preferences.
- Set the Global Privacy Control (GPC) for each participating browser system that you use to opt out of the use of third-party Advertising and other relevant cookies (instructions on how to download and use GPC are available here).
Additional Notices & Contact Details
Updates and Amendments: We may update and amend this Privacy Policy from time to time by posting an amended version on our Sites. The amended version will be effective as of the date it is published. We will provide prior notice if we believe any substantial changes are involved via any of the communication means available to us. After such notice period, all amendments shall be deemed accepted by you.
External Links: While our Sites may contain links to other websites or services, we are not responsible for their privacy practices. We encourage you to pay attention when you leave our Sites for the website or application of such third parties, and to read the privacy policies of each and every website and service you visit. This Privacy Policy applies only to our Services.
Children: Our Services are not designed to attract children who are underage according to data protection laws in their respective jurisdictions. We do not knowingly or intentionally collect personal data from such underage children and do not wish to do so. If we are made aware that a person using the Services is underage according to the law applicable to them, we will attempt to prohibit and block such use and will make all necessary efforts to delete any personal data stored with us with regard to such child. If you believe that we might have any such data, please contact us at legal@tipa-corp.com.
Database Controller (Israel): TIPA Corp. Ltd. is the “Database Controller” responsible for the personal data processed in connection with our Services and may be contacted at legal@tipa-corp.com.
EU Representative: Bio4Pack GMBH has been designated as TIPA’s representative in the EU for data protection matters pursuant to Article 27 of the GDPR. Bio4Pack GMBH may be contacted only on matters related to the processing of personal data of individuals in the EU. To make such an inquiry, please send an email to legal@tipa-corp.com, or contact Bio4Pack GMBH by post at Marie-Curie-Str. 5, 48529, Nordhorn, Germany.
UK Representative: TIPA Corp UK Ltd has been designated as TIPA’s representative in the UK for data protection matters pursuant to Article 27 of the UK GDPR. TIPA Corp UK Ltd may be contacted only on matters related to the processing of personal data of individuals in the UK. To make such an inquiry, please send an email to legal@tipa-corp.com, or contact TIPA Corp UK Ltd by post at 30 Old Bailey, London, United Kingdom, EC4M 7AU.
Questions, Concerns, or Complaints: If you have any comments or questions regarding this Privacy Policy, or if you have any concerns regarding your personal data held with us, or if you wish to make a complaint about how your personal data is being processed by TIPA, including if you believe such processing infringes applicable data protection law, please contact us at legal@tipa-corp.com.