Privacy Policy

Who is responsible

S AND A LTD (შპს ეს ენდ ეი), identification code 405295648, trading as S&A, is the controller of the personal data described here under the Law of Georgia on Personal Data Protection. Our email address, telephone number and address are at the foot of this page and on the contact page.

What we receive and why

When you write to us or call us, we receive what you choose to tell us: usually your name, your company, your email address, your telephone number and what you write. We use it to answer you, to prepare a quotation and to carry out an order you place with us. The legal basis is entering into a contract at your request and performing it (Article 5(1)(b) of the Law), and dealing with your request (Article 5(1)(j)). After an order, we keep the documents that tax and accounting law requires us to keep (Article 5(1)(c)). You need not give us any of it, but without a way to reach you we cannot answer.

When you visit the site

The site has no contact form, no accounts and no advertising or tracking cookies, and it stores nothing in your browser for us. It is served by Cloudflare, Inc., which handles each request's technical data — including your IP address and browser details — to deliver the pages and to protect them from attacks. If its protection needs to confirm that a visitor is a person, it sets a cookie named cf_clearance for that purpose alone. Cloudflare Web Analytics counts visits for us without cookies: which pages are viewed, which site visitors came from, the type of browser and the country. Our basis for both is our legitimate interest in a site that is safe and works (Article 5(1)(i)). The typefaces are served from the site itself, so no font service learns of your visit.

Who else receives it

We do not sell personal data. We pass it only to those who must take part in carrying out your order — a manufacturer, a carrier, a customs broker — and to the authorities where the law requires it. Cloudflare processes the site's request data on our behalf, as a processor (Article 36 of the Law).

Data sent abroad

Most of the manufacturers we buy from are outside Georgia; when an order requires it, we send them, and the carriers who bring the goods, the details needed to fulfil it. Cloudflare is a United States company whose network runs in many countries, so request data may be processed outside Georgia. We transfer data abroad only on the conditions Article 37 of the Law sets, in Cloudflare's case on the basis of its data processing terms.

How long we keep it

Correspondence for as long as our dealings with you require; the documents of a completed order for the period tax and accounting law sets. Cloudflare keeps request data briefly, under its own policies.

Your rights

Under the Law of Georgia on Personal Data Protection you may ask us: what data we process about you and how (Article 13); to see it and receive a copy (Article 14); to correct, update or complete it (Article 15); to stop processing it, or to erase or destroy it (Article 16); to block it (Article 17); and, where the Law provides, to have it transmitted (Article 18). Where we rely on your consent, you may withdraw it at any time (Article 20). Write to the email address at the foot of this page; we answer within 10 working days, as the Law requires. If you believe your rights have been breached, you may apply to the State Audit Office of Georgia or to a court (Article 22).

Changes

We may update this policy; the date at the top shows when it last changed.