Last updated:
1. General information
LILAT Flowers respects its customers' privacy and processes personal data in accordance with the applicable legislation of Georgia.
This Policy explains what data we process, for what purposes, with whom we may share it, how long we retain it and what rights data subjects have.
This Policy applies to www.lilatflowers.ge and to the processing of personal data in connection with services provided through the website.
Data controller:
- Trading name: LILAT Flowers
- Name: Individual Entrepreneur Miriam Khutsishvili
- Identification number: 01005033968
- Legal address: 7 Egnate Ninoshvili Street, Tbilisi, Georgia
- Contact email: info@lilatflowers.ge
- Telephone: +995 599 108 071
2. What data do we process?
Data of the person placing the order:
- First name and surname;
- Telephone number;
- Email address;
- Order details and history;
- Payment status and relevant transaction information;
- Comments provided by the customer.
Recipient data:
- Name;
- Contact number;
- Delivery address;
- Additional details necessary for delivery.
Technical information:
- IP address;
- Technical data about the browser and device;
- Information relating to website use;
- Data obtained through cookies and similar technologies, in accordance with the terms governing their use.
3. Purposes of data processing
Data is processed for the following purposes:
- Receiving and processing orders;
- Preparing products and arranging delivery;
- Confirming payment;
- Providing information about order status;
- Handling customer requests and complaints;
- Fulfilling financial and legal obligations;
- Ensuring website security;
- Improving service quality;
- Analytics and marketing where an appropriate legal basis exists.
4. Legal bases for data processing
LILAT Flowers processes personal data where an appropriate legal basis exists for the specific purpose.
These bases may include the performance of a contract or steps necessary to enter into one, obligations established by law, the legitimate interests of the data controller or a third party where permitted by law, and the data subject's consent where required.
Where data is processed on the basis of consent, the customer has the right to withdraw that consent at any time.
5. Processing recipient data
If a customer sends flowers to another person, the recipient's data must be processed to fulfil the order. This data is used to arrange delivery and for necessary communication.
The recipient's contact number will not be used to send promotional messages without the appropriate consent merely because they have received a gift.
6. Payment data
When paying online, data may be processed by the relevant payment service provider. LILAT Flowers processes the payment information necessary to confirm the transaction and maintain the relevant financial records.
The protection of payment data is also governed by the terms of the relevant payment service.
7. Data recipients
To the extent necessary to provide the service, data may be shared with:
- Delivery and logistics service providers;
- Payment service providers;
- Hosting and technical support providers;
- Accounting service providers;
- Analytics and marketing technology providers, where an appropriate legal basis exists;
- Authorised public authorities, in cases provided for by law.
Data is transferred to the extent necessary for the specific purpose and subject to appropriate safeguards.
8. Direct marketing
LILAT Flowers may offer customers the opportunity to receive news, promotions and special offers. Personal data is used for direct marketing on the basis of the data subject's consent.
Customers may withdraw their consent at any time and request that promotional communications stop. They can do so by using the opt-out mechanism indicated in the message or by emailing info@lilatflowers.ge.
Requests to stop direct marketing will be fulfilled within a reasonable period, no later than 7 working days.
Necessary service messages about order status, payment and delivery are distinct from promotional communications.
9. Data retention periods
Data is retained for as long as necessary to fulfil the relevant purpose or comply with obligations established by law.
When determining retention periods, we take into account the time needed to fulfil the order, financial and accounting obligations, the need to handle customer complaints, security requirements, and the provision and withdrawal of consent.
Customers may request further information about the retention period for specific data. When there is no longer a basis for retaining data, it is deleted, destroyed or anonymised in accordance with the law.
10. Data security
LILAT Flowers uses appropriate organisational and technical measures to reduce the risks of unauthorised access to, loss, alteration and disclosure of personal data.
Only authorised persons who need the data to perform their duties should have access to it. In the event of a data security incident, the relevant obligations established by law apply.
11. Data subject rights
In accordance with applicable law, data subjects have the right to:
- Receive information about the processing of their data;
- Access their data and request copies;
- Request the correction of inaccurate or incomplete data;
- Request the deletion or destruction of data where applicable;
- Request that processing be stopped or blocked on grounds provided for by law;
- Withdraw consent;
- Exercise other rights provided for by law.
To submit a request, contact info@lilatflowers.ge. Requests are handled in accordance with the procedures and time limits established by law.
Data subjects may also contact the public authority responsible for personal data protection or apply to a court.
12. International data transfers
Some technical, payment or analytics services may require data to be processed outside Georgia.
In such cases, data is transferred only where an appropriate legal basis and the safeguards required by law are in place.
13. Cookies
The website may use cookies and similar technologies. Information about their categories, purposes and management is provided on the separate Cookie Policy page.
14. Policy updates
LILAT Flowers may update this Policy when necessary. The updated text will be published on the website, and customers will be informed of material changes in the manner prescribed by law.
15. Contact
LILAT Flowers — Individual Entrepreneur Miriam Khutsishvili, identification number 01005033968; legal address: 7 Egnate Ninoshvili Street, Tbilisi.
Website: www.lilatflowers.ge; email: info@lilatflowers.ge; telephone: +995 599 108 071.
Your trust and the protection of your personal data are important to us.