Skip to main content
AllDigital

Policies

Privacy policy

Last updated:

In force from October 15, 2026. This is a translation; the Georgian text prevails.

This policy explains what personal data we process on alldigital.ge, why, who we share it with and how you can exercise your rights. We process data in line with the Law of Georgia on Personal Data Protection.

1. Who is responsible

The controller is ALL DIGITAL LLC (identification code 412686464), address: Kutaisi, 1–3 Aghmashenebeli Ave.. For any question about your data, write to info@alldigital.ge.

2. What data we collect

  • When you order: first and last name, phone, email, delivery address or pickup point, order comment, the products, amounts, payment and delivery method. When buying for a company: the company name and identification code. When you request installation: the installation address and a description of the site.
  • When you create an account: name, email and password (stored only hashed, that is irreversibly transformed). For a company account, also the company name, identification code, legal address and VAT status.
  • In the installation request form: name, phone, email (optional), city, address, site type, number of cameras and comment.
  • When you subscribe to an alert (back in stock or price drop): email, product and language.
  • When you pay by card: you enter your card details on the bank's secure page. They are never passed to or stored by us; the bank sends us only the payment result and the transaction number.
  • When you contact us on WhatsApp or Viber: the site's button pre-fills the message with your client code, the page you are writing from and up to 5 products from your cart. You send the message yourself; we keep the code so we can find your cart or order.
  • When you contact us by phone, email or messenger: the information you give us and our correspondence.
  • Technical data: your IP address, used to protect our forms from abuse; server logs; site usage statistics (page views, search queries, checkout steps). We collect these statistics ourselves, without any external analytics service, and they are linked only to a hashed (irreversibly transformed) session identifier, not to your name.

3. Why we use your data

  • To fulfil your order: confirming the order, payment, delivery or pickup, installation, warranty and returns, running your account and answering your questions. Legal basis: the contract with you.
  • To meet legal obligations: invoices and accounting records. Legal basis: a legal obligation.
  • For our legitimate interests: site security, preventing fraud and abuse, and improving the site with anonymous statistics. After an order is completed we may ask you by email for a review; the email has a link to stop such requests.
  • With your consent: stock and price alerts you subscribe to yourself. Every alert email has an unsubscribe link.

We do not send advertising emails without your consent. We do not sell your data. We do not take decisions that significantly affect you by automated processing alone, without a person involved.

4. Who we share data with

We share only what a specific purpose needs:

  • Delivery: the courier, Georgian Post or the partner pickup point receives your name, phone, address and the order contents.
  • Oracle Cloud Infrastructure (servers in Frankfurt, Germany): hosting of the website and its database.
  • Cloudflare (USA, global network): network protection and content delivery (CDN), DNS, forwarding of email sent to our address (Email Routing), and storage of off-site backups (R2).
  • Resend (USA): sending the site's emails (order, status, alerts) and our outgoing email.
  • Google (USA): the Gmail mailbox where our email correspondence is kept.
  • Anthropic (USA): the AI assistant our staff use to run the store; it processes order data only on our instructions.
  • TBC Bank and Bank of Georgia (Georgia): processing the payment when you pay by card.
  • Public authorities: only where the law requires it.

Oracle, Cloudflare and Resend process data only on our instructions and under a contract with us. Google (a standard Gmail account) and Anthropic (Claude) are used under their standard terms, and we send them only what the specific email or question needs.

The About page embeds a Google map. When it loads, Google itself receives your IP address and browser data and processes them under its own privacy policy.

5. Transfers outside Georgia

The website's data is stored in Germany (European Union), on Oracle's servers; Germany is covered by the EU's data protection rules. Through Cloudflare, Resend, Google and Anthropic, data may also be processed in the USA and in other countries of Cloudflare's network. For transfers to Cloudflare and Resend we rely on our data processing agreements with them, which include standard contractual data protection clauses. Google and Anthropic are used under their standard terms, so we send them only what the specific email or question needs.

6. Cookies and browser storage

The site uses only the cookies it needs to work:

  • Session cookie: keeps your cart and sign-in; expires after 2 hours of inactivity.
  • XSRF-TOKEN: protects forms against forged requests.
  • Remember me: only if you tick “Remember me” when signing in.
  • Cloudflare security cookies: Cloudflare may set these to protect the site from bots and attacks.

We use no advertising or external analytics cookies. Your browser's storage (localStorage) keeps recently viewed and compared products, recent searches, the list view and the details you entered for a proforma. This data stays on your device, is not sent to us, and you can delete it in your browser settings.

7. How long we keep data

  • Orders and invoices: for the period set by tax and accounting law (6 years).
  • Your account: while it is active, or until you ask us to delete it. On deletion we keep only the order data the law requires us to keep.
  • Installation requests: 3 years from the last contact.
  • Stock and price alerts: until you unsubscribe.
  • Messenger client code: 180 days from its last use.
  • Search and checkout statistics: 400 days; messenger button statistics: 365 days; server logs: 14 days.
  • Backups: no longer than 1 year, then deleted automatically.

8. Security

The site runs over a secure connection (HTTPS). Passwords are stored hashed, only authorised staff can access data, and administration is protected by two-factor authentication.

9. Your rights

You have the right to:

  • be informed about how your data is processed and get a copy of it;
  • have inaccurate data corrected or completed;
  • have your data deleted or its processing stopped;
  • have processing restricted (blocked);
  • receive the data you gave us in electronic form, or have it sent to another controller;
  • withdraw your consent at any time where processing is based on consent.

Send your request to info@alldigital.ge. We answer free of charge within 10 working days. We may ask you to confirm your identity so that we do not give your data to someone else.

If you believe your rights have been breached, you can complain to the State Audit Office of Georgia, which has supervised personal data protection since 2 March 2026, or go to court.

10. Minors

The site is not intended for anyone under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. The current version, with its effective date, is always on this page.

12. Contact