Privacy Policy

1. Controller and scope

იანა კუც-ნეიჩერალ (identification code 145820582) is the personal data controller for data processed through this website. The store operates under the name NaturALL in Batumi, Georgia.

Contact for privacy requests: info@naturall.ge, phone +995 514 555 582, 6400 Batumi, Evtkime Takaishvili 36/38.

This Policy applies to browsing the website, registration and sign-in (including Google), checkout (including guest checkout), loyalty discounts, newsletters/marketing (only with separate consent), and contact forms.

2. Categories of personal data

Account and profile: email, first name, last name, phone number (optional), delivery addresses, preferred language, authentication provider, and records of acceptance of this Policy and the Terms of Service.

Orders: products, amounts, delivery method and address, payment status, order number, and guest contact details where you order without an account.

Technical and security data: session/cart identifiers, refresh-token cookies needed for sign-in, and limited logs required to secure and operate the service.

We do not intentionally store full payment card numbers on our servers. Card payments are processed by licensed payment providers (for example Flitt or BOG).

3. Purposes and legal bases

Performance of a contract / steps prior to a contract: creating and managing your account, authenticating you, processing carts and orders, delivery or pickup, customer support related to orders, and applying loyalty discounts according to the rules shown on the website.

Consent: optional marketing emails and similar promotional messages — only if you opt in and, where required, confirm via email. You may withdraw marketing consent at any time without affecting the lawfulness of processing before withdrawal.

Legitimate interests / legal obligations (where applicable under Georgian law): securing the website, preventing fraud and abuse, keeping necessary order and accounting records, and establishing, exercising or defending legal claims.

Registration and Google sign-up require affirmative acceptance of this Privacy Policy and the Terms of Service. We store the time and document version of that acceptance.

4. Recipients and processors

We may share data with service providers acting on our instructions (processors), such as hosting, email delivery, media storage, authentication (e.g. Google for Sign-In), and payment gateways — only as needed to operate the store.

We do not sell personal data. Disclosure may also occur where required by Georgian law or a competent authority.

5. Cross-border transfers

Some infrastructure or providers may process data outside Georgia. Where such transfers occur, we take measures consistent with Georgian personal data protection requirements so that an adequate level of protection is maintained.

6. Cookies and similar technologies

We use cookies and browser storage that are necessary for authentication, session continuity and the shopping cart (including a refresh-token cookie and a session identifier).

These technologies are used for essential store functions, not for third-party advertising profiling on this site.

7. Retention

We retain personal data only as long as needed for the purposes above: while your account is active; for order history and legal/accounting retention periods under Georgian law; and for security logs for a limited period.

When retention is no longer required, we delete or anonymise data, subject to legal exceptions.

8. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls and encrypted transport (HTTPS) where the service is provided online.

9. Your rights

Subject to the Law of Georgia on Personal Data Protection and its exceptions, you may request: access to your personal data; rectification of inaccurate data; erasure; restriction of processing; objection to processing based on legitimate interests; and withdrawal of consent where processing is based on consent.

You may also lodge a complaint with the Personal Data Protection Service of Georgia if you believe your rights have been violated.

To exercise your rights, contact info@naturall.ge or +995 514 555 582. We may need to verify your identity before fulfilling a request.

10. Children

The store is intended for adults capable of entering into contracts under Georgian law. We do not knowingly collect personal data from children for accounts or orders.

11. Changes

We may update this Policy. The version published on this page applies from the effective date shown above. Material changes may require renewed acceptance where the law or our processes so require.