1. Who is the data controller
The data controller is Individual Entrepreneur Levan Tabidze, trading as “Partner Estate”. Tax ID: 61003007799. Registered office: No. 10, Angisa, 2nd dead-end, Batumi 6010. For any privacy question or to exercise the rights described below, write to legal@partnerestate.ge or call +995 577 555 709.
2. What data we collect
We process information you submit and technical request data needed to operate and protect the site. When analytics is enabled, we also collect aggregate visit data. We do not run advertising trackers or buy contact lists.
- Enquiry data — name, phone or WhatsApp number, message, optional budget and goal, page address and context, language and enquiry purpose.
- Visit source — the first page you opened in this browser session, the referring site's domain (not the full address) and campaign tags (`utm_*`) if the link contained them. Kept in your browser's session storage until you close the tab and sent to CRM only together with a form you submit.
- Direct messages — content of your WhatsApp, email or phone conversations with us about a property, purchase or sale.
- Cookies — a 1-year cookie that remembers your language choice. See the Cookie Policy for details.
- Server logs — IP address, user-agent, request path and technical timestamps, kept for security, abuse prevention and debugging. We do not use these logs for advertising.
- Aggregate analytics — page path, referrer, device category, country-level location and form outcome events. We do not send names, phone numbers, message text or other form contents to analytics.
3. Why we use it
- To respond to your request, create the lead in CRM and prepare a market read, valuation or short-list for you.
- To remember your language preference between visits.
- To understand which channels bring enquiries, so we invest in the ones that help people reach us.
- To diagnose technical issues and detect abuse via short-lived server logs.
- To understand aggregate site usage and whether forms work, without building advertising profiles.
4. Legal basis
- Consent — when you submit the lead form. You give that consent voluntarily and may withdraw it at any time by emailing us.
- Legitimate interest — to remember your language choice, understand which channels bring enquiries, maintain technical logs and limit abusive requests. Hosting and security providers may process the technical data needed for these functions.
- Legitimate interest — to measure aggregate site performance and form reliability through cookie-free analytics, without sending lead contents.
5. Who we share it with
We do not sell, rent or trade your personal data. We do not share it with marketing partners.
A small number of trusted providers process data on our behalf only as strictly necessary to operate the site, route enquiries and keep records:
- Hosting and edge delivery — Vercel, Inc., USA. The public site and serverless functions run there.
- CRM — MyDeal / G-PLUS CRM. Form submissions are sent there so we can respond to enquiries and keep the transaction context in one workspace.
- Email notifications, when enabled — Resend receives enquiry details to send a notification to our configured mailbox. The mailbox provider also processes the message.
- Request limiting, when enabled — Upstash Redis stores a keyed hash derived from the IP address and a request counter for a one-hour window. The limiter does not send form contents or the raw visitor IP to Redis.
- Domain and DNS — Domenebi / JSC Caucasus Online for domain registration, and Vercel DNS for routing partnerestate.ge.
- WhatsApp / phone — when you choose to contact us via these channels, your message also reaches the platform operator (Meta Platforms, Inc. for WhatsApp). We have no control over their processing — see WhatsApp's privacy notice.
- Authorities — only when required by Georgian law and only the minimum necessary.
- Aggregate analytics — Umami Analytics. It is configured without cookies and receives no lead-form contents.
6. International transfers
Some providers operate outside Georgia. Depending on the service, both technical data and enquiry contents may be processed abroad. This includes hosting, CRM and, when enabled, email notifications. The provider and service determine the processing location.
7. How long we keep it
- Lead form submissions — kept in CRM until you ask us to delete them, or for up to 5 years if your enquiry never converts (after which we delete them automatically).
- Active client engagements — for the duration of the engagement plus 5 years, as required by Georgian tax and AML record-keeping rules.
- Browser preferences — the language cookie lasts up to one year.
- Server logs — up to 30 days, then automatically rotated out.
8. Your rights
Under Georgian law and recognised international standards, you have the right to:
- Access the personal data we hold about you and request a copy.
- Correct any inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten") when there is no legal reason to keep it.
- Withdraw your consent at any time without affecting the lawfulness of prior processing.
- Object to processing based on legitimate interest.
- Lodge a complaint with the State Audit Office of Georgia (sao.ge), which supervises personal data protection from 2 March 2026, if you believe your data has been handled unlawfully. You may also contact us at legal@partnerestate.ge.
9. Security
The site is served exclusively over TLS. Access to form submissions is restricted to the founder and authorised CRM workspace users. We do not store payment data and do not process bank credentials at any stage.
10. Changes to this policy
We may update this policy as the service evolves. Material changes will be flagged at the top of the page and dated. The previous versions are available on request.