Privacy notice
How Bamboo handles the personal data of visitors and customers of this website, and the rights you have wherever you live.
1. Who is responsible
This website is run by Bamboo ("we"). We are the controller of the personal data collected through it. Contact: 557 93 43 33, პეკინის 5 , Tbilisi, Georgia, 0171.
The website is built and hosted on the AFFIX platform. LTD AFFIX SERVICE (Georgia, affix.ge) stores and processes the data only on our behalf and on our instructions, as our processor, under a data processing agreement.
2. What data we collect
- What you send us in forms: name, email, phone, message and any other details you enter (contact, quote, booking, application or newsletter forms).
- If you order or book: contact and delivery details, the order or booking, payment status and your order history. Card details are entered on the payment provider's page; we do not see or store them.
- If you create an account: your name, email or phone, password (stored hashed) and your orders.
- Technical data: IP address, browser and device, pages visited and the time of the visit, kept in server logs for security.
- Cookies and similar technologies: see "Cookies" below.
3. Why we use it and on what legal basis
- To answer your enquiries and requests: steps you asked for before a contract, or our legitimate interest in replying.
- To process orders, bookings and payments, deliver and handle returns: performance of the contract.
- To keep accounting and tax records: our legal obligations.
- To protect the website against fraud, spam and attacks: our legitimate interest in security.
- To send newsletters: your consent, which you can withdraw with the link in every email.
- Analytics and advertising: only with your consent in the cookie banner.
We do not sell personal data and do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who receives it
- LTD AFFIX SERVICE - hosting of this website, its database, email and backups, on servers in the EU (Germany), with Cloudflare for delivery and protection against attacks.
- Payment providers we use: none at the moment. They process your payment under their own terms and privacy notices.
- Delivery companies, couriers and SMS providers, as far as they need your details to deliver an order or send you a notice.
- Analytics and advertising tools, only if you allow them: none at the moment.
- Public authorities, accountants and lawyers, only where the law requires it or to defend legal claims.
5. International transfers
Our platform provider is based in Georgia and stores data in the EU. Some service providers (for example analytics or payment providers) may process data in other countries, including the United States. Where the law of your country requires it, such transfers are protected by appropriate safeguards, such as the European Commission's standard contractual clauses.
6. How long we keep it
- Enquiries and form messages - as long as needed to deal with them and any follow-up.
- Orders, bookings and invoices - for the period required by tax and accounting law.
- Customer accounts - until you delete the account or ask us to delete it.
- Newsletter subscriptions - until you unsubscribe.
- Server logs - 14 days, then deleted automatically.
8. Your rights
Depending on the law that applies to you (for example the EU or UK GDPR, the Georgian Law on Personal Data Protection or US state privacy laws), you can ask for access to your data and a copy of it, correction, deletion, restriction or portability, object to processing based on legitimate interests or to direct marketing, and withdraw consent at any time. Write to us: 557 93 43 33, პეკინის 5 , Tbilisi, Georgia, 0171. We reply within the time the law sets.
You can also complain to a data protection authority, in particular in the country where you live or work (in Georgia, the State Audit Office; in the EU/EEA, your national data protection authority; in the UK, the Information Commissioner's Office).
9. Changes
We may update this notice. The current version is always on this page.
Standard text provided with the website. The website owner can complete or replace it.