Privacy policy
Seller: individual entrepreneur Davit Dumbadze · ID 61006009818
Data controller
Saojaxo Gemo, operated by individual entrepreneur Davit Dumbadze (identification number 61006009818, registered address: Txilnari 22, Georgia), is responsible for personal data processing. Contact: saojaxogemo2026@gmail.com or +995 571 049 892.
Information collected
When you order, we process your name, phone number, delivery address and optional address details, order contents and amount, chosen time, comments, and payment method and status. The website also stores your cart and language preference in your browser.
Purposes and legal bases
We use the information to enter into and perform your order contract, prepare and deliver goods, contact you about the order, arrange payments or refunds, respond to enquiries and comply with legal duties. We cannot fulfil a delivery without the required contact and address details. We do not send marketing messages.
Recipients and external services
Authorized staff and couriers may access information as needed. Our services include Render hosting, Telegram order notifications, Google Maps and, when enabled, Flitt, our online payment provider. Data may be processed outside Georgia subject to applicable legal requirements and safeguards. Third-party services have their own privacy practices.
Payments and protection
When online payment is available, card, Google Pay and Apple Pay payments are processed through Flitt on its secure payment page. Full card numbers and CVV/CVC codes are not sent to or stored on the Saojaxo Gemo server. Flitt receives the order identifier, amount and GEL currency to process payment; our website receives payment status and identifiers. When Google Pay or Apple Pay is used, the respective wallet service also processes payment data. We apply proportionate technical and organizational safeguards.
Retention
For personal data that identifies customers in completed orders, the retention period is up to six months from completion of the order. After this period, we manually review records and erase or de-identify that personal data unless there is a lawful reason to retain it for longer. Information needed for accounting and tax obligations, handling claims and disputes, or meeting other legal requirements may be kept longer, but only to the extent necessary and for a justified period. Order notifications in Telegram are reviewed separately. Data may remain in backup copies until those copies expire; access to them is restricted.
Your rights
Under applicable Georgian law, you may request information, access, correction, restriction or deletion where permitted. Write to saojaxogemo2026@gmail.com. You may also complain to the competent supervisory authority or a court.
Updates
This policy will be updated when our data processing practices change.