Privacy Policy
Last Updated: [Date]
1. Introduction
This Privacy Policy explains how Caffesta POS Georgia ("we," "our," or "us") collects, uses, discloses, and protects your personal data when you use our website Caffesta.ge (the "Service"). By accessing the Service, you agree to this policy. If you disagree, please refrain from using the Service.
We comply with:
- The General Data Protection Regulation (GDPR) for users in the European Union (EU).
- Georgian data protection laws (e.g., Law of Georgia on Personal Data Protection).
2. Data We Collect
We may collect:
- Personal Data: Name, email, phone number, billing address (processed via EU payment gateways like Stripe/PayPal).
- Payment Data: Transaction details (handled by third-party processors; we do not store full card numbers).
- Technical Data: IP address, browser type, device information, cookies (see Section 5).
- Usage Data: Pages visited, session duration (via analytics tools like Google Analytics).
3. How We Use Your Data
We process data to:
- Provide and improve the Service.
- Process payments (via EU-based processors).
- Communicate with you (e.g., support, updates).
- Comply with legal obligations (e.g., tax laws in Georgia/EU).
Legal Basis (GDPR):
- Contractual necessity (e.g., processing payments).
- Legitimate interest (e.g., analytics, fraud prevention).
- Consent (e.g., marketing emails—you may opt out).
4. Data Sharing & Third Parties
We may share data with:
- Payment Processors: EU-based services (e.g., Stripe, PayPal) under their privacy policies.
- Analytics Providers: Google Analytics (anonymized data).
- Legal Authorities: If required by Georgian/EU law.
We do not sell your data.
5. Cookies & Tracking
We use cookies to:
- Enable login sessions.
- Analyze traffic (opt-out via browser settings).
- Remember preferences.
6. Data Security
We implement:
- Encryption (SSL/TLS).
- Regular security audits.
- Restricted access to personal data.
7. Your Rights (GDPR & Georgian Law)
You may:
- Access, correct, or delete your data.
- Withdraw consent (e.g., unsubscribe from emails).
- Request data portability.
- Lodge complaints with Georgian/EU regulators.
Contact us at: sales@caffesta.ge to exercise these rights.
8. International Transfers
Data may be transferred to:
- EU: For payment processing (under GDPR safeguards).
- Other Jurisdictions: With your consent or where legally permitted.
9. Changes to This Policy
We may update this policy. Changes take effect upon posting on the Service.
