1. Controller and scope
SYMETRA determines how personal data submitted through this website is used. The complete registered controller details and legal address will be added before commercial sales begin. You can exercise privacy rights through the Contact page.
2. Data we collect
The current website does not collect face scans or biometric templates. Any future scanning feature will provide a separate, specific notice and consent controls before capture.
- Order data: name, email, phone, delivery address, products, delivery zone, order total and order status.
- Payment data: TBC payment identifiers and status. Full card numbers and security codes are handled by TBC Checkout and are not stored by SYMETRA.
- Contact data: the information and message you submit through the Contact form.
- Technical data: essential security logs, browser/device information and language preference.
- Cart data: the current cart is stored locally in your browser until you clear it or browser storage is removed.
3. Why we use data
- To prepare, accept, deliver and support an order and perform a contract.
- To process payment, prevent fraud, maintain security and protect legal rights.
- To answer questions, return requests and complaints.
- To meet accounting, tax, consumer protection and other legal duties.
- To improve the service using necessary operational information. Optional marketing or analytics will require an appropriate legal basis and choice.
4. Sharing and processors
We share only the data reasonably required with service providers that help operate the store.
- TBC Checkout and banking/payment partners.
- Hosting, database, security and content-management providers.
- Courier and delivery partners selected for your order.
- Professional advisers, regulators or public authorities where legally required.
5. Retention
- Order and payment records are kept for the period required by Georgian accounting, tax and consumer law, and while needed to resolve claims.
- Contact messages are normally kept for up to 24 months after resolution unless a longer period is needed for an order, dispute or legal duty.
- Security logs are kept only as long as reasonably necessary for security and troubleshooting.
- Local cart and language preferences remain on your device until you clear them.
6. Security and international processing
We use access controls, server-side payment credentials, encrypted transport and restricted databases designed to protect personal data. No system can guarantee absolute security. If a legally reportable incident occurs, we will follow applicable notification duties.
- Some infrastructure providers may process data outside Georgia.
- Where required, transfers will use an adequacy basis, contractual safeguards, consent or another mechanism permitted by Georgian law.
7. Your rights
Subject to Georgian law, you may request information and a copy of your data, correction or completion, cessation of processing, deletion or destruction, blocking, objection, or withdrawal of consent where processing relies on consent. You may also complain to the competent supervisory authority or a court.
- We may request reasonable information to verify identity before acting on a request.
- Some data cannot be deleted immediately where retention is required by law or necessary for legal claims.
8. Cookies, children and updates
The site currently uses only essential storage for language, cart and security functions. We do not currently use non-essential advertising cookies. The store is not intended for children to place orders independently.
- Material policy changes will be dated and posted here.
- If a change requires consent, we will request it before the relevant processing begins.