Privacy Policy
This policy explains what personal data molo collects through this website and in related communication, why we use it, how long we keep it and what rights you have. It is prepared in accordance with the Law of Georgia on Personal Data Protection.
1. Who is responsible for your data
The data controller is [Individual Entrepreneur — full name], identification number [ID number], address: [legal address], Georgia (the “Controller”, “we”). Contact for any data protection matter: [email], or a direct message to @molo.space on Instagram.
2. What data we process
- Request data you enter in our forms: name, preferred contact channel and contact details (phone, messenger username or email), residential complex, apartment area and condition, preferred style, your message.
- Files you attach: floor plans and photos of the apartment. Please do not upload documents containing ID numbers or other information we do not need.
- Order and payment data: the service ordered, amount, payment status and the order number. Card data is entered on the payment provider’s page; we do not receive or store it.
- Communication with us in messengers and by email.
- Technical data processed by our hosting provider to deliver and protect the website (IP address, browser type, time of request).
- Cookies: the website does not use cookies for analytics or advertising by default. If we enable an advertising measurement tool (Meta Pixel), it runs only after you consent in the cookie banner, and you can withdraw that consent at any time.
3. Purposes and legal grounds
| Purpose | Legal ground (Law of Georgia on Personal Data Protection) |
|---|---|
| Answering your request and preparing a free visualization | Steps taken at your request before entering into a contract; your consent |
| Providing the design project or other ordered services, accepting payment | Performance of the contract with you |
| Accounting and tax records | Obligations imposed on the Controller by law |
| Protecting the website from spam and abuse | Legitimate interest of the Controller |
| Sending tips and offers | Your separate consent, which you can withdraw at any time |
| Measuring advertising (Meta Pixel), if enabled | Your consent given in the cookie banner |
4. How long we keep data
- Requests that did not lead to an order: up to 12 months after our last contact.
- Client data: for the term of the contract and 3 years after it ends, to handle claims and questions.
- Accounting documents: for the period required by Georgian tax legislation.
- Data processed on the basis of consent: until you withdraw consent.
After these periods the data is deleted or anonymised, unless the law requires us to keep it longer.
5. Who receives data
- Cloudflare, Inc. — website hosting and form processing.
- Telegram — our internal channel where the team receives new requests.
- Meta Platforms — if you write to us on Instagram, and for advertising measurement if you have consented.
- Payment service provider indicated on the payment page — to process your payment.
- Stores, delivery and assembly services, photographers in Batumi — only for turnkey work and only the data needed to complete it (for example, a contact for delivery).
- Public authorities — where we are required to do so by law.
We do not sell personal data. Our processors may process data only on our instructions and must keep it confidential.
6. Transfer outside Georgia
The providers listed above may process data on servers outside Georgia, including in the European Union, the United States and the United Arab Emirates. We transfer data only on the grounds provided by the Law of Georgia on Personal Data Protection, including where it is necessary to perform the contract with you or with your consent.
7. Your rights
You have the right to:
- receive information about the processing of your data and access it, including a copy;
- request correction, updating or completion of inaccurate or incomplete data;
- request deletion or blocking of data, or the end of processing;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- object to the use of your data for direct marketing;
- file a complaint with the supervisory authority or a court.
Send requests to [email]. We reply without undue delay and within 10 working days; this period may be extended by up to 10 working days, of which we will notify you. Requests to block data are handled within 3 working days, and requests to stop direct marketing within 7 working days. We may ask you to confirm your identity.
8. Supervisory authority
Since 2 March 2026, supervision of personal data processing in Georgia has been carried out by the State Audit Office of Georgia, which took over the functions of the Personal Data Protection Service. You may also go to court.
9. Security
We protect data with organisational and technical measures: encrypted connection (HTTPS), restricted access for team members, and storage only for as long as needed.
10. Minors
Our services are intended for adults. We do not knowingly collect data of persons under 18.
11. Changes
We may update this policy. The current version is always available on this page, with its date at the top.