Privacy Policy
Last updated: 24.07.2026
1. Data controller
Your personal data is processed by:
-
LLC "Book Worm", ID code 405861241, address 12 Samghereti St., Tbilisi, Georgia.
-
Contact email for data protection matters: [info@booko.ge]
2. What data we collect
-
Account data: name, email, profile photo (optional), location (city).
-
Authentication: basic data received via Google / Facebook login (name, email).
-
Transaction data: orders, listings, delivery address, communication between buyer and seller.
-
Payment data: payments are processed by the bank (Bank of Georgia); Booko does not store your full card details.
-
Technical data: IP address, browser type, usage logs (for security and proper operation).
3. Why we process data (purpose and basis)
| Purpose | Legal basis |
|---|---|
| Creating and managing an account | Performance of contract |
| Processing transactions and payments | Performance of contract |
| Customer support | Legitimate interest |
| Fraud prevention and security | Legitimate interest / legal obligation |
| Service improvement | Legitimate interest |
| Marketing messages (optional) | Consent |
4. Data sharing
We share data only as far as necessary:
-
Seller ↔ buyer: to fulfil the transaction (e.g. delivery address).
-
Payment provider (Bank of Georgia) --- to process payment.
-
Delivery company (delivery partner) --- to deliver the item.
-
Technical providers: Supabase (database/hosting), Vercel (hosting), Resend (email), Sentry (error monitoring).
-
State authorities --- only where required by law.
We do not sell your personal data.
5. Data retention
Data is kept while your account is active, or for the period required by law (e.g. accounting/tax records --- 6 years). After account deletion we delete or anonymise data, except records required by law.
6. Your rights
Under the Law on Personal Data Protection, you have the right to:
-
obtain information about your data;
-
request correction or update;
-
request deletion (right to erasure);
-
restrict or object to processing;
-
withdraw consent (for marketing).
To exercise a right, write to [info@booko.ge].
7. Data deletion
To delete your account and data, contact us at info@booko.ge. We will process the request within 30 days.
8. Cookies
The platform uses essential cookies for authentication and proper operation.
9. Security
We use reasonable technical and organisational measures to protect data. However, transmission over the internet can never be 100% secure.
10. Changes and contact
This policy may be updated. For questions: [info@booko.ge].