Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data Uno Group collects when you use this website, why we collect it, who we share it with and what rights you have. We process personal data in accordance with the Law of Georgia on Personal Data Protection.
1. Who is responsible for your data
The data controller is Uno Group, თბილისი, იური გაგარინის 24. Contact: company@unogroup.ge, +995 591 36 84 84.
2. What data we collect
- Account: first and last name, email, phone number and a password, which we store only in hashed form. If you sign in with Google or Facebook, we receive your name, email and profile picture from that service.
- Orders: recipient name, phone number, city and delivery address, order notes, the products you ordered and the order history.
- Payments: you enter your card details on the bank's secure payment page, not on our website, and we never see or store them. From the bank we receive only the payment result, a masked card number (for example 4444 55** **** 1111), the card type and the transaction number.
- Messages: what you send us through the contact form.
- Technical data: your IP address and the time of requests, which we keep in security logs to protect accounts from password guessing and the site from abuse.
3. Why we use it
- to create and manage your account;
- to process, deliver and support your orders, and to issue refunds;
- to send service emails: email confirmation, order confirmation, password recovery;
- to answer your messages;
- to keep the site and your account secure and to meet our legal and accounting obligations.
We do not sell your personal data and do not use it for third-party advertising. The site has no analytics or advertising tracking tools.
4. Who we share it with
- Banks: Bank of Georgia and TBC Bank (through the Flitt payment platform) process card payments.
- Courier service: receives the recipient's name, phone number and address to deliver the order.
- Google and Facebook: only if you choose to sign in with them.
- Hosting provider: stores the website and its database.
- Public authorities: only when required by law.
5. Cookies
We use only the cookies the site needs to work: a session cookie that keeps you signed in, remembers your cart and protects forms from forgery. The site's fonts are loaded from Google Fonts and the map on the contact page from Google Maps, so these services may receive your IP address.
6. How long we keep data
We keep account data while your account exists. Order and payment records are kept for the period required by Georgian tax and accounting legislation. Records of login attempts are deleted automatically within a day; server logs are kept for a limited period for security and troubleshooting.
7. Your rights
You may ask us to tell you what data we hold about you, to correct it, to delete it or to restrict its processing, and you may withdraw consent at any time. Order records that the law requires us to keep cannot be deleted before that period ends. Send your request to company@unogroup.ge. If you believe your rights have been violated, you can also contact the Personal Data Protection Service of Georgia.
8. Changes to this policy
We may update this policy. The current version is always published on this page, with the date of the last update at the top.