This Privacy Policy describes how we collect, use, and protect your personal data when you use the website bgcars.ge. This document is prepared in accordance with the Law of Georgia on Personal Data Protection (effective 1 March 2024).
1.Data Controller
The data controller is:
Sole proprietor:Luka VarshanidzePersonal ID:61006071887Address:Aghmasheneblis 13a, Batumi, GeorgiaEmail:[email protected]Phone:+995 555 39 22 21 For any privacy-related questions or requests, contact us at the details above.
2.What data we collect
When you use the website, we may collect the following information:
- Name — provided by you via the consultation form and live chat.
- Phone number — provided by you via the consultation form and live chat.
- Chat messages — text you send via live chat (max 1000 characters per message).
- IP address — used for rate limiting and abuse prevention. Stored only briefly in server memory and not logged.
- Language preference — stored in your browser localStorage, never transmitted off your device.
- VIN and lot numbers — when you use the VIN/lot check tools. They are not your personal data unless you submit them together with your identity.
We do not collect special category data (health, religion, political views, etc.) and the website is not directed to children under 16.
3.Purposes of processing
- Responding to consultation requests and preparing cost estimates.
- Communicating with you via live chat.
- Ensuring safe operation of the website (rate limiting, abuse prevention).
- Complying with applicable Georgian law.
4.Legal basis for processing
Your data is processed in accordance with Article 5 of the Law of Georgia on Personal Data Protection, on the following grounds:
- Your consent — given before submitting any form or starting a chat.
- Preparation and performance of a contract — to deliver consultation and brokerage services.
- Legitimate interest of the controller — to ensure the safe operation of the website.
5.Retention period
- Chat sessions in server memory — 24 hours, then automatically purged.
- IP addresses for rate limiting — 1 minute to several minutes in memory.
- Messages forwarded to Telegram — kept in our business communication archive in accordance with legal requirements or until you request deletion.
- Consultation requests (name + phone) — kept for the duration of service delivery and up to 3 years afterwards.
6.Sharing with third parties
We do not sell your data. For the operation of the website, we use the following services:
- Telegram FZ-LLC (UAE / USA) — to receive consultation requests and chat messages.
- Hostinger International Ltd. (European Union) — for website hosting.
- Google Fonts — for loading fonts (your IP becomes visible to Google).
- Competent Georgian authorities — when required by law.
Telegram servers may be located in countries that are not recognised as providing an adequate level of protection by the Personal Data Protection Service of Georgia. You may choose not to use the live chat and contact us directly by phone or email instead.
7.Rights of the data subject
Under the Law of Georgia on Personal Data Protection, you have the following rights:
- To be informed about what data we process about you.
- To request correction or update of your data.
- To request deletion of your data.
- To request restriction or suspension of processing.
- To receive your data in a structured format (portability).
- To withdraw your consent at any time.
- To object to direct marketing.
To exercise these rights, write to [email protected]. We respond within a maximum of 10 working days.
8.Complaint to the Data Protection Service
If you believe your data is processed unlawfully, you have the right to file a complaint with the Personal Data Protection Service of Georgia:
9.Cookies and similar technologies
The website uses cookies and similar technologies (localStorage, sessionStorage) grouped into three categories:
- Essential (always on) — language preference (localStorage), live-chat session (sessionStorage, 24 hours), and storage of your cookie choice (localStorage). The site cannot function without them.
- Analytics (only with your consent) — Google Analytics 4 and Microsoft Clarity. Anonymous data about site usage: number of visits, popular pages, session recordings (Clarity). IP is anonymised.
- Marketing (only with your consent) — Meta Pixel (Facebook). Used when we run paid advertising, to measure conversions and for retargeting.
You can change your choice at any time via the "Cookie preferences" link in the footer. On the first visit no non-essential cookies are set without your consent (Google Consent Mode v2).
10.Security
We apply technical and organisational measures to protect your data: HTTPS encryption, rate limiting, access restrictions, regular security updates. However, no system is 100% secure on the internet.
11.Changes to this policy
We may update this policy from time to time. Changes take effect once published on the website. Please review this page periodically.