Privacy policy

1. Who handles your data

Your data is handled by LTD Nianna (identification code 405882754, 26 V. Dolidze St, Tbilisi 0171, Georgia). If you have any questions, email nianna2026@gmail.com or call +995 555 33 73 33.

2. What we collect

Only what we need to fulfil your order:

• your name, phone number and email;
• your delivery address and any order note;
• your order history and payment status;
• if you create an account: your email and password, which is stored encrypted;
• if you sign in with Google: your name, email and Google account ID. We never see your Google password.

3. Why we use it

• to confirm and deliver your order and contact you about it;
• to process payments and refunds;
• for accounting and other legal obligations.

We do not send advertising without your consent, and we never sell your data.

4. Who we share it with

Only those who help us fulfil your order, and only what they need:

• the courier company: your name, phone and address, to deliver the parcel;
• Bank of Georgia: the order number and amount, to process the payment;
• our hosting provider: our server is in Germany, in the European Union, where strict data protection rules apply.

We pass data to public authorities only where the law requires it.

5. Card details

You enter your card number, expiry date and CVV on Bank of Georgia's secure page. These details never reach us and we do not store them.

6. Cookies

We use only the cookies the site needs to work: to remember your cart and your sign-in. We use no advertising or tracking cookies.

7. How long we keep it

We keep order data for as long as Georgian tax and accounting law requires. We will delete your account on request, but records of orders already placed stay until the legal period ends.

8. Your rights

Under the Law of Georgia on Personal Data Protection, you can:

• find out what data we hold about you;
• ask us to correct or delete it;
• withdraw your consent where we rely on it.

Send requests to nianna2026@gmail.com. If you believe your rights have been breached, you can contact the Personal Data Protection Service.

9. Changes

We may update this policy. The date of the last update is shown at the top of this page.