Privacy Policy
1. Privacy Policy
1.1 General Provisions
This Privacy Policy (the “Policy”) sets out how personal data of users of the website BERHASM.COM (the “Website”) is processed and protected. The Website is owned and operated by Individual Entrepreneur Besiki Turazashvili, Identification Number: 01601149565 (the “Company”, “we”, “us”, or “data controller”).
By using the Website and placing orders, the user agrees to the terms of this Policy. If the user does not agree with these terms, they should discontinue use of the Website.
As the Website serves customers worldwide, including residents of the European Union, we comply with applicable data protection requirements, including, where applicable, the General Data Protection Regulation (GDPR), as well as other applicable national data protection laws.
1.2 What Data We Collect
Data provided when placing an order:
• First and last name
• Email address
• Delivery (postal) address
• Phone number
Payment data:
• Bank card details and other payment information are processed exclusively through the third-party payment provider UNIPAY. BERHASM.COM does not store full bank card details on its own servers.
Technical data and cookies:
• IP address
• Browser type and version, device type, operating system
• Pages visited, time spent on the Website, referral source
• Cookies and similar technologies
1.3 Purposes of Data Processing
We use the collected data for the following purposes:
• Processing and fulfilling orders, arranging delivery
• Communicating with the customer regarding the order (confirmation, status updates, delivery issues)
• Processing payments via the UNIPAY payment system
• Providing customer support
• Improving the Website and user experience
• Complying with legal obligations (accounting, tax reporting, dispute resolution)
• Preventing fraud and ensuring the security of the Website
1.4 Legal Basis for Processing
Personal data is processed on the basis of:
• Performance of a contract (order processing and delivery)
• User consent (e.g., for the use of cookies, where applicable)
• Legitimate business interests (security, service improvement)
• Compliance with legal obligations (tax and accounting reporting)
1.5 Disclosure of Data to Third Parties
We disclose data to third parties only to the extent necessary to fulfill the order, and provided that such third parties maintain an adequate level of data protection:
• Payment system UNIPAY — for processing payments. UNIPAY processes bank card and payment data in accordance with its own privacy policy and applicable security standards (PCI DSS).
• Shipping company 4PX — for delivery of the order (name, address, and phone number are shared only to the extent necessary for delivery).
We do not sell and do not share personal data with third parties for marketing purposes without the user’s consent.
Data may be disclosed to government authorities where required by law (e.g., upon request from tax or law enforcement authorities).
1.6 International Data Transfers
As the Website serves customers worldwide and the Company is registered in Georgia, user data may be transferred to and processed in countries outside the user’s country of residence, including transfers to Georgia and other countries where our service providers (payment system, shipping company) are located.
When such transfers occur, we take reasonable measures to ensure an adequate level of data protection in accordance with applicable law, including, where applicable, the use of contractual data protection mechanisms.
1.7 Cookies
The Website uses cookies and similar technologies to ensure proper functioning of the Website, analyze traffic, and improve user experience.
Users may adjust cookie settings in their browser, including disabling cookies. Please note that disabling certain cookies may affect the functionality of the Website.
1.8 Data Retention
Personal data is retained for as long as necessary to achieve the purposes outlined in Section 2.3, as well as for any period required by applicable law (e.g., for tax and accounting purposes).
Upon expiry of the retention period, data is deleted or anonymized.
1.9 User Rights
Depending on applicable law (including GDPR for users in the EU), users have the right to:
• Access their personal data
• Request correction of inaccurate data
• Request deletion of data (“right to be forgotten”)
• Restrict processing of data
• Object to the processing of data
• Receive their data in a structured format (right to data portability)
• Withdraw consent to data processing at any time
To exercise these rights, users may contact us at: support@berhasm.com.
1.10 Data Security
We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
Despite these measures, we cannot guarantee absolute security of data transmitted over the internet.
1.11 Children’s Data
The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, it will be deleted.
1.12 Changes to This Privacy Policy
We may update this Policy from time to time. The current version is always published on the Website, with the date of the last update indicated.
Continued use of the Website after changes are made constitutes acceptance of the updated Policy.
1.13 Contact Information
Data Controller: Individual Entrepreneur Besiki Turazashvili
Identification Number: 01601149565
Website: BERHASM.COM
Email: support@berhasm.com