This Policy explains which personal data the Sweet Note online store processes, why it is used, and which rights are available to users.
1. Who processes personal data
The personal data controller is:
- Controller
-
David Patsatsia (დავით ფაცაცია)
- Address
-
6 Niko Ketskhoveli Street, Tbilisi, Georgia
Personal data is processed in accordance with Georgian personal data protection legislation.
All collection, storage, and use of information is intended to safeguard users’ right to privacy and protect their personal information.
2. Personal data we collect
Sweet Note may process the following categories of personal data to provide its online-store services.
Contact information
- First and last name;
- Phone number;
- Email address.
Delivery information
- City;
- Street;
- House number;
- Entrance;
- Floor;
- Apartment;
- Comments relating to the order or delivery.
Account information
- Email;
- Password hash;
- Order history;
- Saved delivery addresses.
Order information
- Products ordered;
- Order value;
- Payment status;
- Delivery status.
Sign-in through third-party services
- The user’s name received when signing in with Google or Facebook;
- Email address;
- Technical account identifier supplied by the relevant service.
Technical information
- IP address;
- Browser type;
- Browser language;
- Cookies;
- Security logs;
- Technical device information.
Newsletter subscription
- Email;
- Information about the consent provided;
- Unsubscription information.
Important: Sweet Note does not receive or store users’ complete bank card details. Online payments are processed exclusively through secure bank payment systems.
3. How personal data is used
We use personal data only for lawful purposes necessary to operate the online store.
- Placing and processing orders;
- Confirming payments;
- Organising delivery;
- Communicating with the customer;
- Operating the customer account;
- Handling claims and enquiries;
- Issuing refunds;
- Preventing fraudulent activity;
- Maintaining website security;
- Complying with tax and accounting requirements;
- Sending news, special offers, and promotions only where the user has consented;
- Automatically notifying the administrator about new orders.
4. Legal grounds for processing
Personal data is processed only in circumstances permitted by law.
Users may unsubscribe from promotional messages at any time by using the unsubscribe link in an email or by contacting info@sweetnote.ge.
- Performance of the contract between the Customer and the Seller;
- Compliance with legal requirements;
- The user’s consent, for example when subscribing to the newsletter;
- The Controller’s legitimate interests in website security, fraud prevention, and improving service quality.
5. Sharing data with third parties
We share only the amount of data required to provide the relevant service.
Banks
- Bank of Georgia;
- TBC Bank;
- Data is shared solely to process online payments.
Delivery service
- Name;
- Phone number;
- Delivery address;
- Information required to fulfil the order.
Authentication providers
- When a user signs in through Google or Facebook, the relevant service participates in authentication under its own privacy policy.
Telegram
- Used exclusively to send internal new-order notifications to the online-store administrator.
Technical contractors
- Hosting provider;
- Server administrators;
- Technical specialists who maintain the website.
The website is currently planned to be hosted on domenebi.ge infrastructure. The accuracy of this information should be confirmed before publication.
We never sell users’ personal data or disclose it to third parties for commercial purposes.
6. Use of Cookies
The website uses Cookies to operate correctly.
Users can delete or completely disable Cookies in their browser settings.
If Cookies are disabled, some website functions may not operate correctly.
- Operating the shopping cart;
- Signing users in;
- Remembering the selected website language;
- Maintaining security;
- Saving user preferences.
7. Data retention
Personal data is retained only for as long as necessary to achieve the purposes for which it is processed.
After unsubscription, an email address may remain on a suppression list solely to prevent promotional messages from being sent again.
- Account data — until the user deletes the account or processing is no longer required;
- Order and payment data — for the period required by law;
- Subscription data — until the user unsubscribes from the newsletter.
8. User rights
Every user has the right to:
To exercise these rights, email info@sweetnote.ge with the subject “Personal Data”.
For security purposes, the Controller may request additional information to verify the applicant’s identity.
- Learn which personal data is being processed;
- Request a copy of their data;
- Request correction of inaccurate information;
- Update personal data;
- Request deletion where provided by law;
- Restrict the processing of personal data.
9. Data security
Sweet Note takes reasonable organisational and technical measures to protect personal data.
Despite these measures, no method of transmitting information over the Internet can guarantee absolute security. We continually improve our safeguards to minimise potential risks.
- Secure HTTPS connection;
- Restricted access to the administration panel;
- Secure password storage through hashing;
- Protection of user sessions;
- Checking and validating incoming data;
- Regular information backups.
10. Changes to this Privacy Policy
Sweet Note reserves the right to amend this Privacy Policy.
A revised version takes effect when it is published on the website unless the updated document states otherwise.
