Privacy Policy

1Who We Are (Data Controller)

Website.ge ("we," "us") is a domain name marketplace operating in Georgia. We are the data controller for personal data collected through this platform. You can reach us at contact@website.ge for any data-related enquiry.

2Information We Collect

When you register, we collect your full name, email address, and mobile phone number. Optionally, you may provide a profile picture, and WhatsApp, Viber, or Telegram contact handles. We generate a unique numeric reference ID for your account, which is used to identify your bank transfers when topping up your balance.

When you buy or sell domains, we store records of your orders, offers, domain listings, and balance transactions, including prices, domain names, statuses, timestamps, and EPP transfer codes where applicable.

Every visit to a domain listing page is logged with: IP address, country and city (derived from IP geolocation), browser name and version, operating system, device type (desktop, mobile, or tablet), browser language, and referring URL. We also compute a daily visitor identifier (a one-way SHA-256 hash of your IP address, user agent string, and the current date) solely for counting unique daily visitors — this hash cannot be reversed to identify you.

We log all SMS messages sent through our platform (recipient phone number, message type, status, and timestamp) and all transactional emails (recipient address, subject, status, and any error messages). Call and message content is not retained beyond what is necessary for delivery confirmation.

We store your current balance, top-up and withdrawal requests, and a full transaction history. Bank transfer details you provide (such as bank name or transfer reference) are used only to match your payment to your account and are not stored beyond what is necessary for that purpose.

3How We Use Your Information

We use your personal data to: create and manage your account; verify your identity and phone number; process domain purchases, sales, and offers; send you transactional notifications by SMS and email (e.g. order status updates, offer responses); provide sellers with traffic and visitor statistics for their listings; detect and prevent fraud and policy violations; respond to your support requests; and comply with our legal obligations under Georgian law.

4Legal Basis for Processing

We process your personal data under the following legal bases as defined by the Law of Georgia on Personal Data Protection: (a) Contract performance — processing necessary to register your account and fulfil domain purchase and sale transactions; (b) Legitimate interests — fraud prevention, platform security, and traffic analytics to improve the service; (c) Consent — where you have explicitly opted in to optional features or communications; (d) Legal obligation — where processing is required to comply with Georgian law.

5Sharing Your Information

We do not sell your personal data to third parties. We share data only in the following limited circumstances: (a) With the counterparty in a domain transaction — limited to information necessary to complete a domain transfer (typically name and email); (b) With our service providers who process data on our behalf; (c) With Georgian authorities or courts when required by law, a court order, or to protect the rights and safety of users or the public.

6Cookies & Session Data

We use strictly necessary session cookies to keep you logged in across page requests and to store your selected language and theme preference (light/dark mode). These cookies are set only while you use the platform. We do not use advertising, tracking, or third-party cookies. You can disable cookies in your browser settings, but doing so will prevent you from signing in.

7Data Retention

We retain your account data for as long as your account is active. If you request account closure, we retain your personal data for up to 2 years thereafter to comply with legal obligations and resolve any outstanding disputes. Individual domain visit log records are retained for up to 12 months, after which they are purged. Aggregated, anonymised statistics (e.g. daily visit counts per domain) are retained indefinitely as they contain no personal data.

8Your Rights

Under the Law of Georgia on Personal Data Protection, you have the right to: access a copy of the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of your data (subject to our legal retention obligations); restrict or object to certain processing; and obtain your data in a portable, machine-readable format. To exercise any of these rights, please contact us at contact@website.ge. We will respond within 30 calendar days.

9Data Security

We apply appropriate technical and organisational measures to protect your personal data, including HTTPS encryption for all data in transit, password hashing (bcrypt), and role-based access controls limiting who can access sensitive data. No transmission over the internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.

10Children's Privacy

Our platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us at contact@website.ge and we will promptly delete it.

11Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of the page. We encourage you to review this page periodically. Continued use of the platform after an update constitutes acceptance of the revised policy.

12Contact Us

For any questions about this Privacy Policy, to submit a data rights request, or to report a data protection concern, please contact us at:

contact@website.ge

We aim to respond to all privacy-related enquiries within 5 business days.