Last updated: 6 June 2026
This policy describes how East Commerce Company LLC (Salonova) processes your personal data on salonova.ge. We act in accordance with the Law of Georgia on Personal Data Protection and recognised best practices.
1. Data controller
The data controller is East Commerce Company LLC. Contact address: Universiteti St. 24, 0144, Tbilisi, Georgia. Email: [email protected].
2. Data we collect
- Identity data: first name, last name, email, phone number.
- Company account data: company name, identification number, role in the organisation.
- Order data: delivery address, order history, payment status.
- Technical data: IP address, browser type, cookies, website usage statistics.
- Communications: messages sent via the contact form or email.
3. Purposes and legal bases
- Order fulfilment and delivery — performance of a contract.
- Account management and authentication — contract or legitimate interest.
- Customer support — contract or legitimate interest.
- Legal obligations — for example, accounting and tax requirements.
- Marketing communications — only with your separate consent.
- Website security and improvement — legitimate interest.
4. Data sharing
We do not sell your data. Transfers may occur only where necessary:
- Delivery partners — to fulfil your order.
- IT and hosting providers — to operate the website.
- Banking and payment services — to process payments.
- Public authorities — where required by law.
5. Retention
We retain data only for as long as necessary for the stated purpose or as required by law. Order and accounting records are usually kept for periods required under Georgian law.
6. Your rights
Under Georgian law, you have the right to:
- Request information about your personal data.
- Request correction or updating of your data.
- Request deletion where permitted by law.
- Restrict or object to processing in cases allowed by law.
- Withdraw marketing consent at any time.
7. Security
We use technical and organisational measures to protect data, including encryption, access controls, and secure servers. However, no internet transmission can be guaranteed to be fully secure.
8. Children's data
The website is not intended for persons under 16. If you believe we have processed a child's data without consent, please contact us so we can delete it.
9. Changes
This policy may be updated. The current version will be published on this page with the "last updated" date.
For personal data requests, contact [email protected]. You may also contact the Personal Data Protection Service of Georgia (pdps.ge) where provided by law.
