Adventure ExpertsGEORGIA

Legal · Privacy

Privacy Policy

Last updated: [DATE]  ·   Aligned with the Law of Georgia on Personal Data Protection & EU GDPR

DRAFT — not legal advice. Fill every highlighted placeholder with your real details, remove clauses that don't apply, and have this reviewed by a Georgian lawyer before publishing. Provide a Georgian-language version and state which controls.

Section 01

Who we are

This Privacy Policy explains how [REGISTERED LEGAL NAME] ("Adventure Experts Georgia", "we", "us") collects and uses your personal data when you visit [adventure-experts-georgia.vercel.app / final domain], send us an enquiry, or travel with us.

We are the data controller of your information.

  • Registered address: [ADDRESS, GEORGIA]
  • Email: [PRIVACY/CONTACT EMAIL]
  • Phone / WhatsApp: [NUMBER]
  • Privacy contact: [NAME OR ROLE]
A formal Data Protection Officer is generally only required for large-scale or sensitive processing. A small operator usually names a privacy contact instead — confirm with your lawyer, especially once the Children's Camp launches.

Section 02

The data we collect

You give us directly

Mainly via enquiry forms, email and WhatsApp:

  • Name, email, phone/WhatsApp, and country of residence
  • Your trip enquiry details, group size, dates and preferences
  • Booking and billing details once a trip is confirmed [list what you actually store]

Special-category data

Only when relevant to a trip:

  • Health, medical conditions, fitness level, and dietary requirements you share so we can run your tour safely.
This is "special category" data under Georgian law and the GDPR. We only collect it with your explicit consent, use it solely for trip safety and logistics, and do not keep it longer than needed. Confirm your handling matches this.

We collect automatically

  • IP address, device/browser type, and pages viewed, on an aggregate basis
  • Cookie and analytics data — see our Cookie information and section 5

Section 04

Marketing communications

We only send marketing emails or newsletters if you have given explicit, opt-in consent (no pre-ticked boxes). You can withdraw consent at any time via the unsubscribe link or by contacting us, and we will stop within 7 working days.

Withdrawing marketing consent does not affect emails about a trip you have actually booked.

Section 05

Cookies and analytics

We use [strictly necessary cookies only / strictly necessary plus analytics such as [TOOL] / plus marketing pixels such as [TOOL]]. Non-essential cookies are only set after you consent via our cookie banner, and you can change your choice at any time.

If you run Google Analytics, a Meta pixel, or similar, you MUST have a real consent banner with a working "reject" option — not just a notice.

Section 06

Who we share data with

We do not sell your data. We share it only with:

  • Service providers running our operations on our behalf, under contract — e.g. website hosting (Vercel), email/CRM [PROVIDER], our content platform [CMS], analytics [TOOL], and our payment provider [PROVIDER]
  • Local guides, drivers, accommodation and activity partners, strictly as needed to deliver your trip
  • Authorities, where the law requires it

Section 07

International transfers

Some of our providers (for example, website hosting and email) process data outside Georgia. Where this happens, we rely on [adequacy decisions / standard contractual clauses / other appropriate safeguards] so your data stays protected to the standard required by Georgian law and the GDPR.

This is real for you because Vercel and most SaaS tools host abroad. Confirm the actual safeguard with your lawyer — do not rely on "you agreed by browsing."

Section 08

How long we keep it

We keep your data only as long as needed:

  • Enquiries that don't become trips: [e.g. 12 months]
  • Booking, contract and financial records: [retain per Georgian tax/accounting law — confirm period]
  • Marketing data: until you unsubscribe
  • Health/dietary data: deleted shortly after your trip ends [confirm]

Section 09

Your rights

Under the Law of Georgia on Personal Data Protection and, where applicable, the GDPR, you have the right to:

AccessObtain a copy of the personal data we hold about you.
CorrectAsk us to fix inaccurate or incomplete data.
EraseRequest deletion of your data ("right to be forgotten").
RestrictAsk us to pause processing in certain circumstances.
ObjectObject to processing based on legitimate interest.
PortabilityReceive your data in a structured, machine-readable format.
Withdraw consentWithdraw consent at any time without affecting past processing.

To exercise any of these rights, contact us at [EMAIL]. We respond within the legal time limit.

You may also complain to the Personal Data Protection Service (PDPS) of Georgia, or — if you are in the EU/EEA — to your local data protection authority.

Section 10

Security

We use appropriate technical and organisational measures to protect your data, and limit access to authorised people who need it. [Describe at a high level: encryption in transit, access controls, etc.]

Section 11

Data breaches

If a breach is likely to affect your rights, we will notify the relevant authority and, where required, you, without undue delay.

Section 12

Children and minors

Our website and tours are intended for adults. We do not knowingly collect data from minors without verified parental or guardian consent.

Expand this section significantly before launching any children's programme. Minors' data carries stricter requirements under Georgian law and the GDPR — additional consent mechanisms, shorter retention and tighter access controls are likely to be required.

Section 13

Changes to this policy

We may update this policy from time to time and will post changes here with a revised "last updated" date. We encourage you to review this page periodically.

Section 14

Contact

Questions or requests about your personal data:

Privacy contact: [NAME / ROLE]
Email: [EMAIL]
Address: [REGISTERED ADDRESS, GEORGIA]

You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia (PDPS).