Wellcome to GOAT shopping Online
This Privacy Policy (hereinafter referred to as the "Policy") defines the core principles, legal grounds, purposes, and rules governing the processing, storage, and protection of personal data collected from customers (hereinafter referred to as the "User" or "Data Subject") by goat.ge (operated under the applicable legislation of Georgia).
By accessing, browsing, registering, or electronically confirming/marking acceptance of the Terms and Conditions on the goat.ge platform, the User grants their explicit, informed consent to this Personal Data Protection Policy. The User guarantees that all information provided is accurate, truthful, and submitted voluntarily in full exercise of their legal rights and authorizations under Georgian law.
The User acknowledges that goat.ge has the right to request, receive, verify, and analyze personal data for user identification, validation, compliance, analysis, and the fulfillment of statutory or contractual obligations.
Website / Platform: The e-commerce marketplace operating under the domain https://goat.ge/.
The Company / Data Controller: The corporate entity operating the goat.ge platform, which independently or through authorized parties determines the purposes and technical means of personal data processing.
The User: Any individual or representative of a legal entity who visits, registers on, interfaces with, or purchases goods/services via the Website.
The Data Subject: Any natural person whose personal data is processed by the Company.
Personal Data: Any information relating to an identified or identifiable natural person. A natural person is identifiable if they can be recognized directly or indirectly, including by name, identification/personal number, contact details, geolocation data, electronic communication logs, or specific economic, cultural, or social characteristics.
Legal Compliance: The Company ensures the absolute confidentiality and security of personal data by fully adhering to the rigorous statutory requirements of the Law of Georgia "On Personal Data Protection" and international data governance standards.
Data-Driven Trust: Maintaining proactive data protection measures forms the core foundation of the Company's business integrity, transparent e-commerce operations, and partner network relationships.
Marketing Limitations: The Company processes personal data for direct marketing purposes strictly upon receiving the prior explicit consent of the Data Subject.
Processing Methods: This Policy applies completely to all automated, semi-automated, or manual processing of personal data executed by the Company, its internal processing systems, or its contracted data processors.
Applicability: The scope covers goat.ge customers, digital account holders, platform vendors, third-party logistics contractors, and any other external entities whose personal data flows through the marketplace system.
Statutory Principles: All data operations on goat.ge are strictly governed by the following legal principles:
Lawfulness & Fairness: Data is processed in a transparent, legitimate manner that respects the dignity and rights of the Data Subject.
Purpose Limitation: Data is collected solely for explicit, legitimate, and predefined business purposes and cannot be processed for incompatible secondary reasons.
Data Minimization: Processing is strictly restricted to the minimal volume necessary to achieve the designated service purpose.
Accuracy & Quality: Data must be kept accurate and up to date. Erroneous, obsolete, or incomplete information will be corrected, blocked, or purged without undue delay.
Storage Limitation: Personal data is retained only for the timeframe strictly required to fulfill the primary purpose of its processing.
Security & Integrity: The Company deploys advanced technical and organizational encryption, firewalls, and access controls to prevent unauthorized access, data leaks, accidental loss, damage, or destruction.
Legal Bases for Processing: Data processing on our platform is legally permitted if:
The Data Subject has granted clear consent for one or more specific transactional purposes.
The processing is strictly required to execute an online order, complete a sale, or initiate banking installment agreements at the request of the User.
The processing is mandated by the tax, financial, or anti-money laundering legislation of Georgia.
The data has been made intentionally public by the Data Subject themselves without an explicit restriction on use.
The processing is necessary to protect the vital interests of the Data Subject or public security.
goat.ge does not collect or process special categories of sensitive data (e.g., data revealing racial or ethnic origin, political opinions, religious beliefs, health status, or biometric profiles).
In the highly exceptional event that such data processing becomes legally necessary under Georgian law (e.g., identity verification for high-value custom security transactions), it will be handled strictly under written consent or specific judicial/statutory mandates with extreme security protocols.
Core Data Points: To provide seamless marketplace services, the Company primarily collects and processes the following customer data:
Full First Name and Last Name.
Personal Identification Number (ID / Passport number for invoice and installment processing).
Active Phone Number and E-mail Address.
Physical Shipping/Delivery and Billing Address.
Technical data: IP address, device type, browser cookies, and platform navigation logs used to access the Website.
Scope of Operations: Data processing operations include digital collection, registration, structured sorting, storage, cloud hosting, modification, retrieval, blocking, deletion, or technical destruction.
Authorized Third-Party Processors: The Company may delegate specific processing stages to highly vetted specialized entities (e.g., IT hosting infrastructure, CRM systems, or cloud databases) governed strictly by binding data-processing contracts that match or exceed the Company's security benchmarks.
Consent Requirement: The User’s contact details will never be used for commercial newsletters, SMS alerts, or promotional campaigns unless the User actively opts in and gives explicit consent.
Transparency: Before obtaining marketing consent, the Company ensures the User is informed in plain language of their unconditional right to opt out at any time.
Mandatory Opt-Out Deadline: The Company is legally bound to immediately cease processing data for direct marketing free of charge within 7 (seven) working days from receiving an explicit cancellation request from the User.
How to Opt Out: Users can revoke their marketing consent instantly by utilizing the "Unsubscribe" links inside emails, adjusting their account settings, or writing directly to our corporate helpdesk at info@goat.ge.
Quality and Security Records: To maintain transaction verification, quality control, and fraud prevention, all inbound and outbound phone conversations with the official goat.ge support desk and call center are securely recorded.
Automatic Consent: The User is audibly informed about the active call recording at the start of the communication. Continuing the telephone call constitutes an automatic, valid consent to audio monitoring.
Retention Cap: Standard telephone audio logs are securely archived for a maximum retention period not exceeding 5 (five) years, unless a pending legal dispute, judicial order, or tax audit requires a specific record to be held longer.
The Company may securely transmit specific parts of user data to external third parties strictly under the following operational paradigms:
Logistics & Delivery Carriers: Providing names, phone numbers, and addresses to courier networks to successfully deliver heavy HVAC systems or marketplace cargo.
Banking and Financial Institutions: Sharing transactional and identification data with licensed partner banks (e.g., TBC Bank, Bank of Georgia, Credo Bank) strictly to process instant checkouts or digital installment applications initiated by the customer.
Credit Information Bureau: Sharing necessary identification data with JSC Creditinfo Georgia in strict accordance with the financial regulations governing loan applications and state-monitored credit checks.
State Authorities: Disclosing data to tax authorities, courts, or law enforcement agencies exclusively upon receiving formal, legally binding official requests under Georgian statutory law.
Technical Safeguards: goat.ge utilizes industry-standard Secure Sockets Layer (SSL/TLS) encryption technology to safeguard data transmissions and sensitive financial transactions.
Restricted Internal Access: Internal access to user personal data is strictly ring-fenced on a "need-to-know" basis. Only authorized employees or system administrators who require the data to perform critical operational duties are granted access keys.
Data Protection Officer: The Company designates an internal compliance officer responsible for supervising data protection workflows, auditing internal systems, and addressing customer privacy queries.
Under the Law of Georgia "On Protection of Consumer Rights" and data privacy legislation, every customer has the right to demand the following from goat.ge:
Right to Access: To receive free confirmation regarding whether their data is being processed, the legal basis of processing, the source of collection, and details of any third-party transfers within 10 working days of submission.
Right to Rectification: To instantly request the correction, updating, or completion of any inaccurate, false, or incomplete data points.
Right to Erasure / Deletion: To request the absolute deletion or technical destruction of their stored personal data profile.
Right to Block: To request the immediate freezing/blocking of data processing if the data's accuracy is disputed or if the processing is deemed non-compliant.
⚠️ Statutory Restriction Note: In strict compliance with the legislation of Georgia, the Company’s ability to immediately erase historical personal data may be restricted or legally paused due to overriding statutory obligations, including tax record laws, anti-money laundering (AML) tracking rules, and active retail dispute limitations.
The Data Subject maintains the unconditional right to withdraw their general data processing consent at any time without providing any justification. Upon receiving a formal revocation notice at info@goat.ge, the Company will terminate all non-statutory data processing operations and securely purge the files within 10 working days, provided there are no overriding fiscal or legal mandates requiring data preservation.
If a user believes that their data privacy rights have been compromised, mismanaged, or infringed upon by the platform, they possess the full legal right to lodge a formal complaint with the Personal Data Protection Service of Georgia or file an appeal through the judicial court system of Georgia.
For any technical questions, data access requests, rectification updates, or to exercise your right to withdraw consent, please contact our data compliance desk:
Official Email Support: info@goat.ge
Platform URL: https://goat.ge
