Privacy Policy

Last updated: 25 October 2026

This policy explains what personal data the eg.ge website collects, for what purposes, who it is shared with, and what rights you have. We process data in accordance with the Law of Georgia on Personal Data Protection.

1. Who processes the data

  • GMC Motors LLC (GMC MOTORS), ID code 404447103
  • Legal address: Tbilisi, Toneti Square N5
  • Email: info@eg.ge
  • Phone: +995 32 2422311, +995 577 44 02 20

For any questions or requests related to personal data, write to us at info@eg.ge.

2. What data we collect

When you register and place an order:

  • buyer type (individual / legal entity);
  • first and last name;
  • mobile phone number and email address;
  • personal ID number (optional);
  • for legal entities — company name and identification code (optional);
  • city / district and address (optional);
  • order details: products, quantity, price, receiving method (branch pickup or delivery by arrangement), order notes;
  • account password — stored only in encrypted (hashed) form.

Through request forms (“Request a quote”, “Request a call”, “Notify me when available”, “Leasing / Installments”, “Wholesale purchase”, “Contact us”): name, phone number and, depending on the form, email address, branch, company, quantity, message, product, and the page from which the form was sent.

Technical data: when you place an order or submit a form — IP address and browser data (user agent), to protect against abuse and spam; as well as cookies (see section 7).

The website does not collect card details: payment is currently made by bank transfer.

3. Why we use the data

  • accepting orders, preparing invoices and recording payments;
  • contacting you about your order, pickup or delivery;
  • responding to your requests (price, call, leasing, stock notification, etc.);
  • account maintenance;
  • protecting the website against spam and abuse;
  • anonymous website usage statistics and improvement (Google Analytics);
  • meeting accounting and other legal obligations.

We process data on the legal grounds set out in Article 5 of the Law of Georgia on Personal Data Protection:

  • Entering into and performing a contract — registration, account, order, invoice, payment, pickup and delivery;
  • Handling your request — requests submitted through the price, call, leasing, stock notification and other forms;
  • Legal obligation — keeping accounting and tax records, and lawful requests from public authorities;
  • Legitimate interest — protecting the website and forms against spam and abuse, technical logs, backups;
  • Your consent — statistics (Google Analytics) cookies. Consent is voluntary and you can withdraw it at any time (see section 7).

We do not sell data and do not share it with third parties for marketing purposes.

4. The company’s internal system (CRM)

Order and request form data is automatically transferred to the company’s internal accounting system (CRM), where orders, invoices and payments are processed. The data transferred includes the buyer and order details listed in section 2, as well as the IP address and browser data. A copy of each order and request is also sent to the company’s email.

In the website’s technical logs, email addresses, phone numbers and other identification numbers are stored in masked form.

5. Who the data is shared with

Only those authorized company employees who need the data to perform their job duties have access to it, and only to the extent necessary. Employees are required to keep the data confidential.

Technical service providers that process data on our instructions and solely to provide their services:

  • Hosting (website server) — Cloud9 (cloud9.ge);
  • Email — Microsoft 365;
  • Spam protection — Cloudflare Turnstile;
  • Visitor statistics — Google Analytics (Google);
  • Website backups — Google Drive (Google);
  • Internal accounting system (CRM) — the application is hosted on the Vercel platform and the database on Supabase, both in the European Union region (Frankfurt, Germany);
  • When paying an invoice, you transfer the amount to an account held at JSC Bank of Georgia.

Data may be disclosed to public authorities where required by law.

CRM data is stored in the European Union (Germany). When Google, Microsoft and Cloudflare services are used, data may be processed outside Georgia, including in the United States. Any transfer of data abroad complies with the requirements of Article 37 of the Law of Georgia on Personal Data Protection.

6. Retention period

We keep data no longer than necessary for the purpose for which it is processed or as required by law. After the retention period expires, the data is deleted or altered so that you can no longer be identified.

  • Invoices, payments and order accounting data — 6 years from the end of the reporting year to which they relate (required by accounting and tax legislation);
  • Account data — for as long as the account exists; deleted upon a request to delete the account, except for data that must be kept by law. An account that has been inactive for 3 years may be deleted;
  • Incomplete orders — 30 days;
  • Request forms (price, call, leasing, wholesale purchase, “Contact us”), if no order was placed — 1 year;
  • “Notify me when available” — until the notification is sent, but no longer than 1 year;
  • IP address, browser data and technical logs — 6 months, unless needed to investigate a specific incident;
  • Google Analytics data — 14 months;
  • Website backups — 90 days, on a rotating basis.

7. Cookies

A cookie is a small file that a website stores in your browser.

Necessary cookies (for the website to work):

  • WooCommerce — cart and order session (e.g. woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_…);
  • WordPress — signing in to your account (wordpress_logged_in_… and similar);
  • LiteSpeed Cache — serving the correct version of a page from the cache (e.g. _lscache_vary).

Security: Cloudflare Turnstile checks that whoever signs in, registers or submits a form is a human and not an automated program.

Statistics: Google Analytics (_ga, _ga_…) — number of visits, pages viewed, device type and similar aggregated statistics. Visits by signed-in (authenticated) users are not counted in the statistics.

Consent cookie: stores your choice in the cookie banner so that the banner does not reappear on every visit.

Consent. A cookie banner appears on your first visit to the website. Necessary and security cookies are required for the website to work and do not require consent. Statistics (Google Analytics) cookies are stored only after you give your consent. If you decline, the website will still work fully.

You can change your choice or withdraw your consent at any time using the “Cookie settings” link on the website. You can also delete or block cookies in your browser settings. If you block necessary cookies, the cart and your account may not work.

8. Security

  • the website uses a secure connection (HTTPS);
  • passwords are stored in hashed form;
  • the sign-in and registration forms are protected against automated attacks;
  • personal data is masked in technical logs.

9. Your rights

In accordance with the law, you may request:

  • information about what data we process about you, and a copy of it;
  • correction of inaccurate or incomplete data;
  • deletion of data or termination of its processing, unless we are required by law to keep it;
  • blocking of data;
  • receipt of the data you provided in a structured, machine-readable format, or its transfer to another organization, where technically feasible;
  • withdrawal of consent, where processing is based on consent.

You can change some of your account data yourself on the “My account” page. For any other request, write to us at info@eg.geor call +995 32 2422311.

We respond to requests no later than 10 working days after receiving them. For requests for information or a copy of data, in exceptional cases and with justification, this period may be extended by no more than 10 working days, and we will inform you of this without delay.

If you believe your rights have been violated, you may apply to the State Audit Office or to a court.

10. Changes to this policy

When this policy is updated, the new version is published on this page with the date of the update.

11. Contact

  • Email: info@eg.ge
  • Office: +995 32 2422311
  • Mobile: +995 577 44 02 20