Privacy Policy

1. Data controller

The data controller is Ilia Laptev, an individual entrepreneur (identification number: 322764898; address: Georgia, Adigeni district, v. Varkhani). For data-processing matters: a1tochka322@gmail.com, +995 598 705 875.

2. What data we process

• contact details: name, email address, phone number;
• order data: items, amounts, delivery city and address, recipient contact;
• buy-out request data: links, descriptions and uploaded images of goods;
• payment data: payment method and uploaded confirmations (screenshots/receipts); we do not store card details;
• account and sign-in data: credentials, and — for Google sign-in — the provider user identifier and the verified email;
• technical data: session cookies, IP address, device information and logs (see the Cookie Policy).

3. Purposes and legal bases

• performing the contract — placing, paying for, buying out and delivering orders (basis: performance of a contract);
• order communication and support (basis: performance of a contract, legitimate interest);
• legal compliance — accounting, tax, handling requests (basis: legal obligation);
• security, fraud prevention and service improvement (basis: legitimate interest);
• analytics and marketing messages — only with your consent (basis: consent).

4. Recipients and processors

To provide the service we use providers that process data on our behalf:

• Resend — sending transactional emails (email verification, notifications);
• SMSOffice (smsoffice.ge) — sending SMS notifications and campaigns;
• Cloudflare R2 — storing uploaded files (product and request images, payment confirmations);
• Keepz — processing online payments;
• Google — sign-in via your Google account.

If you consent to analytics and marketing cookies, we also use Google (Google Analytics) and Meta (Meta Pixel); these tools are planned. See the Cookie Policy for details.

We may also disclose data to carriers/couriers for delivery and to public authorities where required by law.

5. Cross-border transfer

Some providers (including those above) may process data on servers outside Georgia. In such cases, the transfer is carried out with the appropriate safeguards required by the Law of Georgia on Personal Data Protection.

6. Retention

We keep data no longer than necessary for the stated purposes. Order data and accounting records are retained for the period required by Georgian tax law. Account data is kept while the account is active; marketing data until consent is withdrawn. After the period ends, data is deleted or anonymised.

7. Your rights

In respect of your data you have the right to:

• be informed about the processing and access your data;
• request correction, updating or completion of inaccurate data;
• request blocking, deletion or destruction of data in cases provided by law;
• withdraw consent previously given;
• lodge a complaint with the supervisory authority.

To exercise your rights, write to a1tochka322@gmail.com. We will respond within the time limits set by law.

8. Marketing messages

We send marketing messages only with your prior consent. You can opt out at any time, free of charge — via the link in the message or by contacting us; the request is handled within the time limit set by law.

9. Security

We apply reasonable organisational and technical measures to protect data. Access to payment confirmations is restricted. In the event of an incident affecting your data, we act in the manner provided by law.

10. Cookies

The use of cookies and similar technologies is described in a separate Cookie Policy.

11. Supervisory authority

Personal-data protection in Georgia is supervised by the Personal Data Protection Service. You have the right to lodge a complaint with it if you believe your rights have been violated.