This policy explains what personal data BOA design studio (“BOA”) collects on boadesign.ge, what it is used for and what rights you have. We process data in line with the Law of Georgia on Personal Data Protection.

Who is responsible

The data controller is BOA design studio. Contact: info@boadesign.ge, +995 585 89 22 00, D Block, 14 Merab Kostava St, Tbilisi.

What we collect

  • When you send the brief or an enquiry form: your name, phone number, email (if you give it), your answers about the space (type, area, budget, timing, style, comments) and when you sent it.
  • To stop spam: a one-way hash of your IP address (not the address itself), used to limit repeated submissions.
  • With the form: which link or ad brought you to the site (the utm_ tags and the ad's click ID on its address, if there were any) and the first page you opened.
  • Only with your consent: analytics about how the site is used (pages viewed, clicks, device and browser, approximate location), through Google Analytics and Microsoft Clarity, and Meta Pixel and Google Ads data to measure our ads on Facebook, Instagram and Google. See the cookie policy for details.
  • When you write to us on WhatsApp, Telegram or Instagram, or call: what you send us there. Those services have their own policies.

Why, and on what basis

  • To answer your enquiry and prepare an offer: your consent, given in the form, and the steps needed before a contract.
  • To carry out the contract, if you become a client.
  • To improve the site (analytics): only with your consent, which you can withdraw at any time.
  • To measure our ads and show them on Facebook, Instagram and Google to people who have visited the site (Meta Pixel, Google Ads): only with your consent.
  • To keep the site secure and free of spam: our legitimate interest.

We don't sell your data. If you have accepted advertising cookies and send a form, your phone number and email go to Meta and Google only in hashed form: a one-way code that can't be read, which the platform only compares with its own accounts to tell whether the enquiry came from its ad. Your name and your answers are never sent to them.

Who receives your data

Your data is processed only by the service providers the site needs, on our behalf:

  • Supabase: database and file storage (servers in the EU, Frankfurt);
  • Vercel: website hosting;
  • Google (Analytics) and Microsoft (Clarity): analytics, only with your consent;
  • Meta Platforms (Meta Pixel, Conversions API) and Google (Google Ads): ad measurement, only with your consent;
  • notification services (email or Telegram) that tell the studio about a new enquiry.

Some of them operate outside Georgia (in the EU and the USA). In that case data is transferred under the provider's data processing terms and appropriate safeguards.

How long we keep it

  • Enquiries and briefs: as long as we need them to reply and agree on a project, and no longer than 2 years after the last contact if you don't become a client.
  • Client data: for the length of the contract and as long as the law requires (for example, for accounting).
  • Analytics data: as set in those services, no longer than 14 months. Meta and Google keep advertising data under their own terms (Meta Pixel data for up to 2 years).

Your rights

You can ask what data we hold about you and for a copy of it, ask us to correct, delete or block it, object to its processing, and withdraw your consent at any time. Send your request to info@boadesign.ge; we'll reply within 10 working days.

If you think your rights have been breached, you can complain to the Personal Data Protection Service of Georgia.

Children

The site isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

When this policy changes, the new version is published on this page with the date it was updated.