Privacy policy

Last updated: 27 August 2026

1. Controller

The controller is Individual Entrepreneur Davit Kidzinidze, Trendystore, identification number 61001058407, 54 Zurab Gorgiladze Street, Apartment 200, 6000 Batumi, Georgia; info@trendystore.ge.

2. Data we process

  • name, email, telephone, delivery and billing address;
  • order, product, price, payment status, return, correspondence and support data;
  • account details and preferences;
  • device, browser, IP, security-log and essential-cookie data;
  • marketing choices and consent/withdrawal evidence.

Please do not provide health or other special-category data in free-text support messages unless necessary.

3. Purposes and legal bases

  • Contract/request: cart, order, payment, delivery, tracking, returns, refunds and support;
  • Legal obligation: tax, accounting, consumer-protection and legal requirements;
  • Legitimate interests: security, fraud prevention, service protection and legal claims, unless overridden by customer rights;
  • Consent: email/SMS marketing and non-essential analytics/advertising technologies if later introduced.

4. Required data

Name, contact/delivery data and payment confirmation are needed to fulfil an order. Without them we cannot process it. Marketing data is optional.

5. Recipients and processors

As necessary, data may be shared with Shopify, OriginDrop and fulfilment partners, carriers, the selected payment provider, email/IT/security providers, professional advisers and legally authorised authorities. Trendystore does not receive full card numbers. For some services Shopify may act in an independent or joint-controller role under its terms.

6. International transfers

Shopify, OriginDrop and subprocessors may process data outside Georgia, including the United States, Canada, Singapore, Korea or other countries. Transfers are made only on a valid legal basis with appropriate safeguards, such as contracts, adequacy or required authorisation. Information about a specific transfer may be requested by email.

7. Retention

Order/accounting records are kept for legally required periods; support/return data until resolution and applicable legal-claim periods; account data while the account exists and thereafter only as legally necessary; marketing until withdrawal, with consent/withdrawal evidence retained for one year after direct marketing ends; security logs for a limited risk-management period. Data is then erased, destroyed or depersonalised unless law requires retention.

8. Cookies and marketing

Essential cookies support functionality and security. Non-essential analytics/advertising cookies or pixels will be used only with an appropriate consent mechanism. Google Analytics 4 is connected for analytics, and Meta Pixel is connected for advertising measurement. Non-essential analytics and marketing technologies are used only after the corresponding consent is given and can be disabled through cookie preferences. Direct marketing requires consent and can be withdrawn free of charge through the message link or info@trendystore.ge.

9. Shopify Network Intelligence

Shopify Network Intelligence is currently enabled. Shopify may securely use customer data with other Shopify data for product, personalisation and advertising purposes under its Additional Services Terms and privacy documentation. Trendystore will not change this feature without a further owner decision. Available privacy choices may be exercised through mechanisms provided by Shopify.

10. Security and incidents

We use access controls, account protection, platform security and other risk-appropriate measures. Incidents are logged and, where legally required, notified to the State Audit Office of Georgia within 72 hours; affected individuals are informed without undue delay where there is a high risk.

11. Minors

Consent-based processing for a person under 16 requires consent from a parent/legal representative. The minor’s best interests are prioritised. This rule does not determine contractual capacity.

12. Rights

Data subjects may request information, access/copy, correction/completion, cessation/erasure, blocking, portability where technically feasible, consent withdrawal and statutory review of automated decisions. Email info@trendystore.ge. Reasonable identity verification may be required. Statutory requests are generally handled within 10 working days, with a justified extension of up to 10 working days where permitted.

13. Complaints

A complaint may be made to the State Audit Office of Georgia at https://pdp.sao.ge/en or to a court. Contacting us first is optional.

14. Changes

We update this policy when services or law change. Material changes will be dated and additionally communicated where required.