Privacy policy

01Who processes the data

The responsible party (controller) is Individual Entrepreneur Irina Babkova, identification number 345649890, registered on 14.06.2022 in the Register of Entrepreneurs and Non-Entrepreneurial (Non-Commercial) Legal Entities of the LEPL National Agency of Public Registry of the Ministry of Justice of Georgia, operating under the brand KStudio Georgia (hereinafter “KStudio”, “we”).

• Legal address: 22a Tamar Mepe Ave, floor 12, apt. 143, Batumi, Georgia.
• Studio: 52 Javakhishvili St, Batumi, Georgia (visits by appointment).
• E-mail: kstudio.ge@gmail.com, phone and WhatsApp: +995 599 678 458.

This policy applies to the website kstudio.ge in all languages, to the forms and quiz on the website, the Telegram bot @KStudio_AI_Manager_bot and to correspondence with us by phone, e-mail, WhatsApp, Telegram and social media. Processing is based on the Law of Georgia “On Personal Data Protection” of 14 June 2023 No. 3144-XIმს-Xმპ.

02What data we receive

Data you provide yourself

• Request and the “Cost estimate” quiz: name, phone number, preferred way of contact (WhatsApp, Telegram, call), property type, area, city, services needed, the “I am currently abroad” mark.
• Correspondence: messages, voice notes, photos, floor plans and other files you send us by e-mail, in messengers, via the Telegram bot or the project upload form.
• When signing a contract: full name, identity document details, property address, contacts, payment details; if a third party pays — the payer’s details. These data are needed only for the contract and its documents.

Data collected automatically

• IP address, device and browser type, language, approximate location (city/country), pages and time of visit, referral source, actions on the site (clicks on contact buttons, form submission).
• Cookies and similar technologies — see section 4 for details.

We do not request special category data through the site (health, religion, political views, etc.). Please do not send it to us.

03Purposes and legal grounds

We process data only for clear purposes and only to the extent necessary (Article 5 of the Law).

Providing data is your choice. But without a name and contact we cannot reply to your request, and without contract details we cannot sign a contract.

04Cookies and analytics

Cookies are small files that a website stores in your browser. We use:

• Necessary — for the website, forms and menu to work (Tilda platform). Without them the site does not work properly.
• Analytics — Google Analytics 4 and Google Tag Manager, Yandex Metrica, Tilda statistics: they help us understand which pages are useful and where the site is inconvenient. Data are analysed in aggregate.
• Advertising — Meta pixel (Facebook and Instagram): lets us show KStudio ads to people who have already visited the site and measure their effectiveness.

Analytics and advertising cookies are enabled only with your consent. You can withdraw consent at any time: delete cookies and block them in your browser settings or use the services’ own tools — Google Analytics opt-out, Yandex Metrica opt-out, Meta ad settings.

05Who we share data with

We do not sell personal data. Access is given only to those without whom the service cannot be provided, and only to the extent necessary:

• Services that run the website and communication: Tilda (website, forms, request CRM), Google (mail, spreadsheets, analytics), Meta (WhatsApp, Instagram, Facebook), Telegram, Yandex (Metrica).
• AI assistant. Messages to the Telegram bot @KStudio_AI_Manager_bot are processed by an AI assistant based on the Claude model (Anthropic). It answers first questions and passes the request to Irina. The bot does not make decisions about you that have legal consequences — these are always made by a person.
• Specialists and partners on your project — site manager and crews, furniture makers, smart home specialists, material suppliers. We share only what is needed for the work (e.g. the property address, a delivery contact), and only when you have ordered the relevant service.
• Accountant and bank — for accounting and payments.
• Government authorities — only upon a lawful request.

06International data transfers

The servers of several services (Google, Meta, Telegram, Anthropic, Tilda, Yandex) are located outside Georgia — in EU countries, the USA and other states. International transfers follow Articles 37–38 of the Law: to countries with an adequate level of data protection or with safeguards provided by the services’ terms. Where no such safeguards exist, transfer is possible only with your consent.

KStudio clients often live abroad. If you write to us from another country, your data are processed in Georgia under this policy.

07Retention periods

We keep data no longer than the purpose requires:

• Requests and correspondence without a contract — up to 3 years from the last contact, then deleted or anonymised.
• Contracts, acts, invoices and payment details — for the term of the contract and then for the periods set by Georgian tax and accounting law.
• Consent to newsletters — until you withdraw it; the record of consent is kept for 1 more year after mailings stop (Article 12 of the Law).
• Analytics data — within the periods set in the services’ settings.

08How we protect data

• The website runs over the secure HTTPS protocol.
• Only Irina and the staff who need it for their work have access to requests and documents; accounts are password-protected.
• We do not publish property addresses, apartment numbers, client names or signatures on drawings.
• If a breach occurs that may cause harm, we will report it to the State Audit Office of Georgia within 72 hours and notify you without undue delay if the risk to you is high (Articles 29–30 of the Law).

09Your rights

Under the Law of Georgia “On Personal Data Protection” you have the right to:

• find out whether we process your data, which data, why, on what basis, who we share them with and how long we keep them;
• access your data and receive a copy — free of charge;
• correct or complete inaccurate data;
• demand that we stop processing, delete or destroy the data;
• demand that the data be blocked (processing temporarily restricted);
• receive your data in a convenient machine-readable format or ask us to transfer them to another party, where technically possible;
• not be subject to a decision made solely by automated means if it has legal or other significant consequences for you;
• withdraw your consent at any time — without giving reasons;
• appeal our actions to the State Audit Office of Georgia (sao.ge), which has been given the functions of supervising personal data protection, or in court.

Some rights may be limited by law. For example, we must keep the contract and payment documents for the full period set by tax law, even if you ask us to delete them.

10How to submit a request

• We reply within 10 business days. In complex cases this may be extended by no more than 10 further business days — we will let you know in advance.
• When consent is withdrawn, we stop processing based on it within 10 business days at the latest.
• Requests are handled free of charge.

11Newsletters and marketing

We send news, project selections and offers only to those who have agreed to receive them. You can opt out at any time and free of charge: reply “Stop” to a message or write to us. We will stop as soon as possible and no later than 7 business days (Article 12 of the Law).

Messages about your current project — approvals, stages, invoices — are not newsletters.

12Project photos and portfolio

Under the contract, KStudio may photograph and film the property and publish the materials in the portfolio on the website and social media. When publishing, we do not state the client’s name, exact address, apartment number or floor, and do not show personal belongings or documents. If you do not want your property in the portfolio, tell us before signing the contract or write to us later — we will remove the materials from the website and our pages.

A review with your name is published only with your consent.

13Data of minors

Our services are intended for adults. We do not knowingly collect data from persons under 16. If you believe a child has given us their data, write to us — we will delete it.

14Changes to this policy

We may update this policy, for example when new services are added or the law changes. The new version is published on this page with the date at the top. If the changes are significant, we will also announce them on the website.

If this page has not answered your question, write to us — we will reply in plain words and to the point.