1. Who we are

This Privacy Policy explains how AUTO SCAN GE ("we", "us", "our") collects, uses, and protects your personal data when you visit our website, browse our shop, place an order, or contact us. We operate in Georgia and process your data in line with applicable Georgian law and, where relevant, EU GDPR-aligned standards.

2. What data we collect

We collect only the data we need to provide our service:

• Order data: name, phone, email, delivery address, and what you ordered.
• Account data: if you register — username, email, encrypted password.
• Booking data: name, phone, car details, requested service, preferred date.
• Payment data: we never see or store your card numbers. Card payments are handled directly by PayPal, which stores only what is required to process the transaction.
• Technical data: IP address, browser type, basic logs collected by our hosting for security.

3. Why we collect it

• To fulfil your orders and deliver products.
• To schedule and confirm your service appointments.
• To process payments and prevent fraud.
• To respond to your questions and provide support.
• To comply with legal obligations (tax records, etc.).

4. Who we share data with

We do not sell your personal data. We share it only with trusted service providers strictly to deliver our service to you:

• PayPal — processes card and PayPal payments. See PayPal's own privacy policy at paypal.com.
• Courier / delivery partners — to deliver your order. They receive only name, phone, and address.
• Web hosting provider — stores our website data on secure servers.
• Tax authorities — when required by law.

5. How long we keep your data

• Order records: as long as required by Georgian tax law (typically 6 years).
• Account data: until you delete your account or request removal.
• Booking data: 2 years from the appointment date.
• Technical logs: up to 90 days.

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention.
• Object to or restrict processing.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

7. Cookies & local storage

We use a minimal set of cookies and browser localStorage to make the site work — for example, to remember the items in your shopping cart, your language choice, and your favourite products. We do not use third-party advertising trackers. PayPal sets its own cookies when you pay; please see PayPal's cookie policy at paypal.com.

8. Security

Our site runs over HTTPS. Passwords are stored hashed (we cannot see them). Payment card details never reach our server — PayPal handles them directly. We apply security updates promptly. No system is 100% secure, but we take reasonable steps to protect your data.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top tells you when. Material changes will be highlighted on the website.