Sign In

Privacy policy

Version of 20 October 2026.

This policy explains what personal data the jaycraft.ge website collects, why, who it is shared with and what your rights are. We only collect what the shop needs to work and to answer your requests.

1. Who processes your data

The jaycraft.ge website belongs to Individual Entrepreneur Iason Leontiev, address: 140 Akaki Tsereteli Avenue, Tbilisi ("JayCraft", "we"). We are the data controller under the Law of Georgia on Personal Data Protection.

For any question about your data, write to info@jaycraft.ge or call +995 555 19 88 42.

2. What data we collect and why

Orders and your account. First and last name, phone, email, delivery address, the items ordered and your comment. We need them to process, take payment for and deliver your order, contact you about it, issue documents and handle warranty and returns. Ordering requires an account, which keeps your details and order history. We deliver orders in Tbilisi ourselves: your name, phone and address are seen only by our staff member who brings the order. For pickup no delivery address is needed.

Sign in with Google. If you sign in or register with the “Sign in with Google” button, Google passes us your first and last name, e-mail address and Google account ID — to create your account or sign you in. We do not receive your Google password. Google does not pass your phone number — you give it yourself when ordering. Google learns that you signed in to jaycraft.ge (under Google’s rules: policies.google.com/privacy).

Requests from the website (machine, service, question). Name, phone, email (optional), message, the machine configuration you chose, and the page and language the request was sent from. We need them to answer you and prepare an offer. A request reaches our work email and is kept in the website's admin area.

Payment. Card payments are taken by Bank of Georgia on its own secure page. We never see or store your card details — the bank only tells us the result: whether the payment went through, the amount and the transaction number.

Visit statistics. We count page views with our own tool on our server (Independent Analytics). It uses no cookies and shares no data with third parties. The statistics show us which pages and products visitors find interesting. If you agreed to statistics cookies, we also use Google Analytics (section 5): it shows how visitors get from the catalogue to an order.

Technical data. IP address and browser details are recorded in the server logs. We use them only to protect the website, for example to limit the number of requests from one connection and to filter out spam.

3. Legal grounds

  • performance of the sales contract and steps at your request before it — orders, account, requests;
  • legal obligations — keeping accounting and tax documents;
  • our legitimate interest — protecting the website and cookie-free visit statistics;
  • your consent — Google statistics and advertising cookies (see section 5).

4. Who we share data with

  • Bank of Georgia — to take payment;
  • Google — visit and purchase data for statistics and to measure advertising, only if you agreed to such cookies (section 5);
  • a courier or transport company — not at present: we deliver in Tbilisi ourselves, and other regions currently have pickup only. If we start using such a company, we will pass it only the recipient’s name, phone and address and name it in this section;
  • the hosting provider whose servers run the website and our work email;
  • public authorities — only where the law requires it.

We do not sell your data or pass it on for anyone else's advertising.

5. Cookies

Cookies are small files a website stores in your browser. At the moment we use only necessary cookies — the website cannot work without them:

  • cart and checkout (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_…) — up to 2 days;
  • signing in to your account (wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie) — until the end of the session, or 14 days if you chose "Remember me";
  • the website language you chose (pll_language) — 1 year;
  • a closed notice at the top of the website (store_notice…) — until the end of the session;
  • your choice in the cookie window (jc_consent) — 6 months;
  • the source of your visit for an order — where you came from: search, a link, a direct visit (sbjs_…) — up to 30 minutes; it is saved with the order so we can see which channels work.

Only with your consent — Google Ads (Google Ireland Ltd. / Google LLC): the ad and conversion measurement tag (gtag.js, _gcl_… cookies and Google cookies on google.com and doubleclick.net). It shows whether our Google ads led to a purchase. Until you click "Accept all", the tag runs without cookies and without personalisation (Google Consent Mode). Google processes the data under its own rules: policies.google.com/privacy.

Only with your consent — Google Analytics (Google Ireland Ltd. / Google LLC): visit and purchase statistics — which pages and products you viewed, what you added to the cart and whether you placed an order (without your name, phone or address). Cookies _ga and _ga_… — up to 2 years. Google keeps this data for 14 months; Google signals and ad personalisation are off in Analytics. Until you click "Accept all", Analytics runs without cookies (Google Consent Mode). The data may be processed on Google servers outside Georgia, including in the USA.

You can change your choice at any time with the "Cookie settings" link at the bottom of every page. If we add other statistics or advertising services, we will list them in this section.

6. How long we keep data

  • orders and related documents — for the period required by the tax and accounting laws of Georgia;
  • your account — until you delete it or ask us to;
  • requests — 3 years after the last contact, then deleted;
  • server logs — under the hosting provider's rules, usually a few weeks.

7. Your rights

Under the Law of Georgia on Personal Data Protection you can:

  • find out what data about you we process and get a copy;
  • correct or complete inaccurate data;
  • ask us to delete or block your data, except what the law requires us to keep;
  • withdraw your consent — this does not affect processing before the withdrawal;
  • object to processing and ask for your data in a portable format.

Write to us at info@jaycraft.ge — we will reply within the time limits set by law. If you believe we have violated your rights, you can contact the Personal Data Protection Service of Georgia (pdps.ge).

8. How we protect data

The website works only over a secure connection (HTTPS). Only staff who need it for their work have access to orders and requests. We do not store card details at all.

9. Changes to this policy

We may update this policy, for example when we add new services. The current version is always on this page, with its date at the top.