Privacy Policy
1. General provisions
| Seller | Anna Tskitishvili, IE |
| Identification number | 01405047665 |
| Registered address | Didube district, Tskaltubo street N 22, Tbilisi |
| bud8be@gmail.com | |
| Phone | +995 571 034 946 |
| Website | https://budbeflowers.ge |
| Pickup address | 83 David Agmashenebeli Ave., Tbilisi |
1.1. This Privacy Policy describes what personal data the Budbe Flowers online shop (hereinafter — we) processes on budbeflowers.ge and its language versions, for what purposes, who it may be shared with, and what rights users have.
1.2. By using the website, placing an order, or creating an account, you confirm that you have read this Policy.
1.3. For questions about personal data processing, you can contact us:
You can also reach us via the Contacts page and the messengers listed on the website.
2. What data we process
Depending on your actions on the website, we may process:
2.1. Order data — name, phone, email address, delivery address, recipient details, date and time of receipt, order comments, order contents and total, delivery method (delivery or pickup).
2.2. Account data — name, email address, password, order history, and other profile information you provide in your account.
2.3. Enquiry data — information you send via website forms, email, phone, or messengers, to the extent needed to respond and fulfil orders.
2.4. Technical data — IP address, browser and device data, date and time of access, cookie preference settings, and technical data required for the website and cart to work.
2.5. Payment data — payment is processed by a payment provider. We do not store full card numbers or CVV codes. The shop may retain payment status and payment ID received from the payment provider.
3. Purposes of processing
We process personal data to:
- place, pay for, and fulfil orders, including delivery and pickup;
- contact you about orders and enquiries;
- create and maintain a customer account;
- keep the website running and secure;
- comply with legal requirements;
- analyse website traffic — only if you consent to the relevant cookies.
We do not send marketing emails or SMS. If we introduce such communications, we will update this Policy and request consent where required.
4. Legal bases
Personal data is processed in accordance with the Law of Georgia on Personal Data Protection, including on the basis of:
- performance of a contract (order, delivery, account);
- your consent (for example, for non-essential cookies);
- legitimate interests of the shop within limits allowed by law (site security and operation);
- legal obligations.
5. Sharing data with third parties
We may share data only to the extent necessary for the purposes stated:
- delivery services — to hand over your order;
- payment provider — to process payment;
- hosting provider and other technical contractors — to host and operate the website;
- public authorities — where required by law.
We do not sell personal data to third parties.
If you contact us via messengers or social networks, processing is also governed by the rules of those platforms.
6. Retention periods
Data is kept no longer than necessary for processing purposes, order fulfilment, accounting, legal compliance, and for periods set by your cookie consent preferences.
After the retention period, data is deleted or anonymised unless the law requires otherwise.
7. Cookies
7.1. The website uses cookies and similar technologies.
7.2. Essential cookies enable the website, cart, login, and security features.
7.3. Other cookies (including for statistics) are used only after your consent. You can accept, reject, or change your choice via the cookie banner on the website.
7.4. You can also limit or delete cookies in your browser settings. Disabling essential cookies may affect how the website works.
8. Your rights
Under the law of Georgia, you may contact us to request:
- information about how we process your data;
- correction of your data;
- deletion or restriction of processing — where provided by law;
- withdrawal of consent, where processing is based on consent.
9. Data protection
We apply reasonable organisational and technical measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. Data is transmitted on the website over a secure connection.
10. Changes to this Policy
The current version of this Policy is always available on this page. If our data processing practices change, the text on this page will be updated.
Terms of purchase are set out in our Terms of Sale. Practical information on delivery and payment is on the Delivery & Payment page.