PRIVACY POLICY
Last Updated: June 30, 2026
This Privacy Policy describes how Your personal data is collected, used, stored, and protected when You visit or make a purchase from https://nanaform.shop. We prioritize the privacy of our customers and process data in strict compliance with the Law of Georgia on Personal Data Protection, as well as the General Data Protection Regulation (GDPR) for users from the European Union.

1. DATA CONTROLLER
The entity responsible for processing and protecting Your personal data is:
  • Business Name: Individual Entrepreneur Diana Volkova
  • Address: Ilori st. 28, Tbilisi, 0167, Georgia.
  • Contact Email: nana.form.jw@gmail.com

2. PERSONAL DATA WE COLLECT
When You interact with our Site, we collect two types of information:
A. Information Provided by You when placing an order:
  • Identity Data: First name, last name.
  • Contact Data: Email address, phone number.
  • Shipping Information: Billing address, exact shipping address (country, city, zip code, street, building/apartment number).
  • Payment Information: We collect billing data (card type, holder's name), but the card data itself is encrypted and processed by certified international payment providers. We do not store Your credit or debit card numbers on our servers.
B. Information Collected Automatically (Technical Data):
When You visit the Site, we automatically record data about Your device, including information about Your web browser, IP address, time zone, operating system, and some of the cookies installed on Your device. We also collect information about which pages of the Site You view and how You interact with the interface.

3. PURPOSES AND LEGAL BASES FOR PROCESSING
We process Your data on lawful bases for the following purposes:
  • Performance of a Contract: To process Your order, confirm payment, manufacture the jewelry, arrange international shipping, and send You updates regarding Your package status.
  • Communication and Support: To respond to Your inquiries, send important information about the Site, or resolve order-related issues via nana.form.jw@gmail.com.
  • Compliance with Legal Obligations: To maintain accounting and tax records in accordance with the requirements of the Revenue Service of Georgia.
  • Marketing (subject to Your consent): To send promotional emails, information about new collections, or discounts, provided You have voluntarily subscribed to our newsletter. You can withdraw Your consent at any time.

4. DATA SHARING WITH THIRD PARTIES
We pledge not to sell, trade, or rent Your personal data to third parties. Data sharing is carried out exclusively to ensure the operation of the store and the fulfillment of Your order:
  • Logistics Companies: Your contact details and address are transferred to postal and courier services (Georgian Post, DHL, FedEx, UPS, or other involved operators) solely for the physical delivery of Your order.
  • Payment Gateways: Payment data is transferred directly to secure processing centers to complete transactions.
  • Analytical Tools: We use third-party services (such as Google Analytics) to analyze user behavior on the Site, which helps us optimize the interface and catalog. This data is transferred in an anonymized form.

5. DATA SECURITY AND RETENTION
5.1. We implement modern technical, administrative, and organizational security measures to prevent Your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized way. All transactions are encrypted using SSL (Secure Sockets Layer) technology.
5.2. We retain Your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, tax, or reporting requirements under Georgian law. Order data is retained for the period established by the Tax Code of Georgia (up to 6 years for reporting).

6. YOUR LEGAL RIGHTS
Based on applicable data protection laws, You possess the following rights:
  • Right of Access: You can request confirmation as to whether Your data is being processed and obtain a copy of it.
  • Right to Rectification: You have the right to request the correction of inaccurate or outdated data.
  • Right to Erasure ("Right to be Forgotten"): You can request the deletion of Your data from our system, except for information that we are legally required to retain (e.g., tax-related data).
  • Right to Restrict Processing or Withdraw Consent: You can unsubscribe from marketing newsletters at any time by clicking the "Unsubscribe" button or contacting us.

To exercise any of Your rights, please send an official request to our email: nana.form.jw@gmail.com. We will process Your request within the statutory timeframe.