Privacy policy

Privacy Policy of www.gogutsa.com 

1. Introduction

This Privacy Policy (the “Policy”) explains how Gogutsa LLC (“the Company,” “we,” “our,” or “us”) collects, uses, stores, and protects personal data of individuals (“you,” “your,” or “the Customer”) who visit or make purchases through www.gogutsa.com

 (the “Website”).

The Company is committed to safeguarding your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Law of Georgia on Personal Data Protection.

By using our Website, creating an account, or purchasing any product, you acknowledge that you have read and understood this Policy.

1. Data Controller

Gogutsa LLC

Legal Form: Limited Liability Company

Identification Number: 405763099

Registered Address: Tbilisi, Georgia

Website: www.gogutsa.com

For the purposes of applicable data protection law, Gogutsa LLC is the Data Controller responsible for determining the purposes and means of processing your personal data.

1. Legal Basis for Processing

We process your personal data lawfully, fairly, and transparently in accordance with Georgian Law on Personal Data Protection and GDPR Articles 5–6.

The legal bases for processing may include:

• Contract performance – to process and fulfill your orders, deliver products, and provide related services.

• Consent – when you voluntarily subscribe to newsletters, marketing emails, or participate in promotions.

• Legal obligation – to comply with tax, accounting, or consumer-protection requirements under Georgian law.

• Legitimate interest – to improve our Website, prevent fraud, or protect our business operations and users.

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

1. Categories of Personal Data Collected

We collect and process the following types of data:

• Identification and Contact Data: name, surname, phone number, email address, billing/delivery address.

• Account Data: username, password, and user preferences.

• Transaction Data: purchase history, order details, payment information (processed via secure third-party providers).

• Technical Data: IP address, browser type, device information, operating system, and access times.

• Communication Data: messages sent via contact forms, email correspondence, or customer-support interactions.

• Marketing Data: subscription preferences, feedback, and participation in promotions.

We do not collect or store sensitive personal data (e.g., health, religion, biometric data).

1. Purposes of Processing

Your personal data is processed for the following purposes:

• To manage and fulfill product orders and deliveries.

• To create and maintain your user account.

• To communicate order confirmations, delivery updates, or support responses.

• To process payments through authorized payment gateways.

• To send marketing offers, promotions, or updates (only with your explicit consent).

• To improve our Website, services, and customer experience.

• To comply with legal obligations, including tax and accounting regulations.

• To prevent fraud, misuse, or security incidents.

1. Cookies and Tracking Technologies

The Website uses cookies and similar tracking tools to ensure proper functionality, analyze performance, and personalize content.

For detailed information, please refer to our separate Cookie Policy, which explains:

• the types of cookies we use (essential, analytical, marketing);

• how long they remain active;

• how you can manage or disable cookies through browser settings.

By using our Website, you consent to the use of cookies as described therein.

1. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Customer account data: retained while your account is active, and up to 2 years after closure.

• Transaction and billing records: retained for 6 years for accounting and tax compliance.

• Marketing data: retained until you unsubscribe or withdraw consent.

• Technical logs: retained for up to 12 months for security and analytics.

After expiry of retention periods, data is securely deleted or anonymized.

1. Sharing and Disclosure of Personal Data

We may share your data only with trusted third parties, including:

• Payment processors (for example, bank card services, electronic gateways).

• Delivery and logistics partners (for shipping and order tracking).

• IT hosting and website maintenance providers.

• Analytics and advertising services (e.g., Google Analytics, Meta Pixel).

• Legal and governmental authorities, when required by law or to defend our legal rights.

All third parties act as Data Processors under written agreements that ensure GDPR-compliant protection and confidentiality of your data.

We never sell or rent personal data to third parties.

1. International Data Transfers

Some of our service providers may be located outside Georgia or the European Economic Area (EEA).

In such cases, we ensure that:

• The destination country has been recognized as providing adequate data protection; or

• Standard Contractual Clauses (SCCs) approved by the European Commission are in place; or

• You have provided explicit consent for the transfer.

A copy of the applicable safeguards can be requested by contacting us at info@gogutsa.com

1. Data Security

We apply appropriate technical and organizational measures to protect your personal data, including:

• SSL encryption for data transmission.

• Restricted access to personal data by authorized personnel only.

• Secure storage systems and regular backups.

• Periodic reviews of security practices.

Despite these measures, no system is completely secure; we cannot guarantee absolute protection against unauthorized access or cyber incidents. In such cases, we act promptly in accordance with applicable breach-notification requirements.

1. Your Data Protection Rights

You have the following rights under the GDPR and Georgian law:

• Access: to obtain confirmation and a copy of your personal data.

• Rectification: to correct incomplete or inaccurate data.

• Erasure (“right to be forgotten”): to request deletion when data is no longer needed.

• Restriction: to limit processing under certain circumstances.

• Portability: to receive your data in a structured, machine-readable format.

• Objection: to processing based on legitimate interest or for marketing purposes.

• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at maiagorgiladze@gogutsa.com 

We will respond within 30 calendar days of your verified request.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Service of Georgia (PDPS).

1. Marketing and Consent Withdrawal

You may opt out of marketing communications at any time by clicking “unsubscribe” in our emails or contacting us directly.

Withdrawing consent will not affect the lawfulness of prior processing.

1. Children’s Privacy

Our Website is not directed to children under 18.

We do not knowingly collect personal data from minors. If we become aware that data from a child has been collected without parental consent, we will delete it promptly.

1. Changes to this Policy

The Company may update or revise this Privacy Policy from time to time to reflect legal, technical, or business developments.

All updates will be published on this page with a new “Effective Date.”

We encourage you to review the Policy periodically.

1. Contact Information

For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:

Gogutsa LLC

Identification Number: 405763099

Registered Address: Tbilisi, Georgia

Website: www.gogutsa.com 

If you believe your rights have been violated, you may file a complaint with:

Personal Data Protection Service of Georgia (PDPS)

Website: https://pdps.ge 

Email: office@pdps.ge