1. Purpose The purpose of this Privacy Policy is to ensure the protection of the rights and freedoms of the individual, the user, and specifically their personal information, during the processing of personal data by the Merchant.

2. Significance For the Merchant, the protection of users' personal information when receiving any service is of paramount importance; therefore, the Merchant guarantees that its activities are in full compliance with the requirements of the Law of Georgia on Personal Data Protection.

3. Definition of Terms The terms used in this Privacy Policy have the following meanings:

3.1. Personal Data (hereinafter − Data) Any information relating to an identified or identifiable natural person. A person is identifiable when they can be identified directly or indirectly, specifically by an identification number or by physical, physiological, psychological, economic, cultural, or social features characteristic of the person.

3.2. Data Processing Any operation performed on data using automatic, semi-automatic, or non-automatic means, specifically: collection, recording, photographing, audio recording, video recording, organization, storage, alteration, retrieval, consultation, use, or disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure, or destruction.

3.3. Written Consent of the Data Subject Voluntary consent expressed by the data subject after receiving relevant information regarding the processing of their data for a specific purpose, which the data subject has signed or otherwise noted in writing or in an equivalent form.

3.4. Consent Voluntary consent expressed by the data subject verbally, via telecommunication, or by other appropriate means after receiving relevant information regarding the processing of their data for a specific purpose, through which the will of the data subject can be clearly established.

4. Collected Information 4.1. When providing services, the Merchant is authorized to collect the user's personal information to the extent necessary for the provision of the specific service. The aforementioned personal information may include: a) Name, surname, personal number, address, telephone number, and other data necessary for the initial identification of the person; b) Financial information, such as bank account information, etc.

4.2. Based on the specifics of the service, in addition to Article 4.1, the Merchant is authorized to request other personal data of the user necessary for the provision of the service.

4.3. Before providing the service, the Merchant is obliged to send the user a consent form, by signing which the user confirms their will regarding the processing of personal data by the Merchant. The product will be considered delivered only after we receive confirmation of this from you. In the event that you still do not receive the product after two attempts, our representatives will contact you to clarify details so that the product can be delivered on the third attempt. The delivery process will begin only after the company ensures that you have provided correct, exhaustive information and that both the product and delivery fees have been paid.

5. Data Processing and Storage 5.1. The processing and storage of users' personal data by the Merchant are carried out in accordance with the Law of Georgia on Personal Data Protection. Although the order placement process on the website is described quite simply, we will clarify the aforementioned in the terms and conditions as follows:

• Add any product to the cart;

• Fill in the requested information (Name, Surname, Mobile Number, Email);

• Indicate the card you wish to pay with and complete the transaction. By using the card with which you are making the purchase, you confirm that the card represents your property and you accept responsibility for the transaction.

5.2. The user is responsible for the accuracy of any personal data provided to the Merchant.

5.3. In the case of a request by the data subject, the data processor is obliged to correct, update, add to, block, delete, or destroy data if it is incomplete, inaccurate, not updated, or if its collection and processing were carried out illegally.

6. Data Disclosure 6.1. The Merchant is obliged to take such organizational and technical measures that ensure the protection of data against accidental or illegal destruction, alteration, disclosure, extraction, any other form of illegal use, and accidental or illegal loss.

6.2. The Merchant is obliged to ensure the logging of all actions performed on data existing in electronic form. When processing data in non-electronic form, the data processor is obliged to ensure the logging of all actions related to data disclosure and/or alteration.

6.3. Any employee of the data processor and authorized person who participates in data processing is obliged not to exceed the scope of the authority granted to them. Furthermore, they are obliged to protect the confidentiality of the data, including after the termination of their official authority.

6.4. The Merchant does not have the right to disclose or otherwise transfer users' personal data, except in exceptional cases established by law.

7. Other Guarantees 7.1. Matters not covered in this Privacy Policy are regulated by the Law of Georgia on Personal Data Protection. 7.2. This Privacy Policy is public and accessible to any user.