Privacy Policy

1. Introduction

Craftarea ("we", "our") respects your privacy. This policy explains what personal data we collect when you use craftarea.ge, how we use it, and what rights you have. This policy is effective from 1 January 2024.

2. Data Controller

• Name: Craftarea
• Address: 2 David Kipiani St, Tbilisi, Georgia
• Email: info@craftarea.ge
• Website: craftarea.ge

3. What Data We Collect

• Contact form: name, email address, phone number, service type, and message.
• Automatic data: IP address, browser type, device, visit date/time — via Google Analytics.
• Cookies: technical cookies (session management) and analytics cookies (Google Analytics GA4).

4. Why We Process Your Data

• To handle and respond to your inquiry or order (contractual obligation).
• To improve the functionality of our website (legitimate interest).
• Statistical analysis of visits (your consent via the cookie banner).

5. Data Retention

Contact form data is retained for 24 months from the date of submission. Analytics data is retained for 14 months in line with Google Analytics default settings.

6. Third-Party Sharing (Data Processors)

• Google Analytics (GA4) — website traffic analysis. Data stored on Google servers (EU/US). Provider: Google Ireland Limited.
• Vercel Inc. (US) — hosting platform, processes technical logs, IP addresses, and request metadata.
• Neon Inc. (US) — database provider (PostgreSQL). Stores contact form submissions, blog content, and portfolio data.
• Upstash Inc. (US) — Redis service used for rate limiting. Stores IP-based counters on a short-term basis.
• Resend Inc. (US) — email delivery service. Processes recipient email addresses for contact form notifications.
• Google Gemini API (Google Ireland Limited) — AI content generation. Does not process personal user data — only editorial content.
• Telegram Bot API (Telegram FZ-LLC, Dubai) — operator notifications. Contact form data is forwarded to allowlisted internal operators.
• Sentry (Functional Software Inc., US) — error monitoring. Technical errors (stack traces, URL, user agent) are sent for diagnostics. No PII is transmitted.
• We do not sell or rent your data. All processors listed above process data only under our instructions.

7. International Data Transfers

Some of our service providers (Vercel, Neon, Upstash, Resend, Sentry) are based in the United States. Data transfers are conducted under the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) pursuant to GDPR Article 46.

8. Your Rights (GDPR)

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data.
• Right to restriction — restrict how we use your data.
• Right to portability — receive your data in a structured format.
• Right to object — object to processing based on legitimate interests.
• Right to lodge a complaint — if you believe your rights have been violated, you may contact the Personal Data Protection Service of Georgia (pdps.ge).
• To exercise any right, contact us at: info@craftarea.ge — we are obligated to respond within 30 days.

9. Data Erasure Procedure

• To request erasure, send an email to info@craftarea.ge with the subject line "Data Erasure Request".
• Include your name and the email address you used in the contact form.
• We will delete your data from the database within 30 days.
• A confirmation of deletion will be sent to your email.
• Automated backups (Neon database snapshots) are automatically purged after 7 days.

10. Cookies

Our website uses cookies. On your first visit you will see a cookie consent banner where you can manage your preferences. You can withdraw analytics consent at any time via the banner or your browser settings.

11. Georgian Law

This policy complies with the Georgian Law on Personal Data Protection (2011) and the EU General Data Protection Regulation (GDPR) insofar as it applies to users located in the EU/EEA.

12. Policy Updates

We may update this policy from time to time. Any changes will be published on this page with an updated effective date.

13. Contact

For questions or requests: info@craftarea.ge