Privacy Policy

Privacy Policy

Last Updated: August 3, 2026

This Privacy Policy explains how the Admiral Rafting website collects, uses, stores, and protects personal user data.

By using the website, creating an account, booking a tour, or contacting us, the user confirms that they have read and understood this policy.

1. Data Controller

The operator of the website and services is:

Name: Lela Murguli

Personal Identification Number: 01024063836

Legal / Registered Business Address: Pasanauri #7, Kazbegi Municipality, Georgia

Phone: +995 555 641 712

Email: info@admiralrafting.ge

For any requests related to personal data, users can contact us at: info@admiralrafting.ge.

2. What Data We Collect

When using the website, the following data may be processed:

2.1. Information Provided by the User

When booking a tour, creating an account, placing an order, or filling out a contact form, we may collect:

First and last name;
Phone number;
Email address;
Payment and order details;
Booked tour, date, time, and number of participants;
Messages sent by the user;
Special requests or additional details;
Data associated with the WooCommerce user account.

If participating in a tour requires providing details about health conditions, physical limitations, or other special circumstances, such information will be collected only to the extent necessary to ensure safety and properly organize the service.

2.2. Payment Data

Tour payments are processed online through a bank or an authorized payment service provider. We do not store full credit/debit card numbers, security codes (CVV), or full card credentials.

We may receive and retain:

Payment status;
Date and amount of transaction;
Transaction ID;
Limited technical information about the payment method;
Refund status.

Payment providers process user data in accordance with their own privacy policies.

2.3. Automatically Collected Technical Data

When visiting the website, the following technical details may be collected automatically:

IP address;
Device type;
Operating system;
Browser type and version;
Screen resolution and technical parameters;
Date and time of visit;
Pages visited and time spent on pages;
Clicks and website navigation logs;
Traffic source;
Language and region settings;
Data obtained via cookies and similar technologies;
Error and security logs;
Technical data related to orders and active sessions.

We do not monitor or track overall user activity across the internet; only data strictly related to our website’s functionality, security, analytics, and service delivery is processed.

3. Purposes of Processing

We process personal data for the following purposes:

Processing tour bookings and orders;
Processing online payments;
Sending order and payment confirmations;
Coordinating tour dates, times, and logistical details;
Communicating with users;
Creating and managing user accounts;
Handling cancellations, refunds, and inquiries/complaints;
Ensuring user safety;
Improving service quality;
Analyzing website usage;
Detecting and resolving technical issues;
Preventing fraud and unauthorized transactions;
Fulfilling accounting and tax obligations;
Complying with legal requirements;
Conducting direct marketing only where there is a valid legal basis or prior user consent.

4. Legal Basis for Processing

User data may be processed on the following legal grounds:

Performance of a contract or steps taken prior to entering into a contract at the user’s request;
Compliance with legal obligations;
Legitimate interests, including website security, fraud prevention, and service optimization;
User consent, where explicitly required by law;
Protection of vital interests of the user or another individual in emergency situations.

5. Cookies

The website uses cookies and similar tracking tools to:

Support shopping cart and checkout functions;
Maintain user login sessions;
Remember language preferences and settings;
Process secure payments;
Measure website performance and analytics;
Enhance overall site security;
Enable marketing activities (where appropriate consent is granted).

Essential cookies are required for core website and WooCommerce functionality. Non-essential analytical or marketing cookies are activated in accordance with user choices and applicable laws. Users can manage cookie preferences via browser settings, though disabling certain cookies may limit site functionality.

6. Data Sharing & Third Parties

Personal data is shared only with third parties essential for providing our website services, including:

Banks and payment processors;
Web hosting providers;
Technical system administrators;
WooCommerce and related platform service providers;
Email and messaging providers;
Accounting and financial advisors;
Analytics and security providers;
Guides and instructors directly involved in tour execution;
Public authorities, strictly where required by law;
Legal and professional advisors, as needed.

Third parties receive only the minimum data necessary to perform their specific tasks. We do not sell personal user data under any circumstances.

7. International Data Transfers

Certain technical providers, hosting platforms, analytics tools, or email services may process data outside Georgia. In such cases, reasonable measures are taken to ensure transfers comply with applicable privacy laws and adequate security safeguards.

8. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes outlined above or as required by applicable law:

Order and financial records are kept for statutory tax and accounting retention periods;
User account details are stored for the duration of the account’s active state;
Correspondence is kept for the time needed to resolve inquiries or disputes;
Technical and security logs are held for a reasonable timeframe for audit purposes;
Marketing data is retained until consent is withdrawn or processing is no longer necessary.

Upon expiration of the retention period, data is securely erased, destroyed, or anonymized.

9. Data Security

We maintain administrative and technical safeguards to protect personal data, including:

Encrypted web connections (SSL/TLS);
Restricted access controls to administration panels;
Password-protected accounts;
System software updates;
Routine data backups;
Integration of secure payment systems;
Access restricted strictly to authorized personnel.

While we take every reasonable precaution, no method of transmission over the internet can be guaranteed 100% secure.

10. User Rights

Subject to applicable law, users have the right to:

Obtain confirmation regarding data processing;
Request access to and copies of their personal data;
Request correction of inaccurate or incomplete information;
Request deletion or destruction of personal data under statutory conditions;
Request restriction or temporary blocking of data processing;
Withdraw consent at any time (where processing relies on consent);
Object to direct marketing communications;
Request data portability where legally applicable;
Lodge a complaint with a supervisory authority or court.

To exercise any of these rights, contact us at: info@admiralrafting.ge. Additional proof of identity may be requested to protect account security.

11. Direct Marketing

Promotional messages are sent only when a valid legal basis or prior explicit consent exists. Users can opt out of marketing at any time by:

Clicking the unsubscribe link inside any promotional email;
Sending a direct request to info@admiralrafting.ge.

Opting out of marketing emails does not affect operational communications regarding bookings, payments, or active services.

12. Minors

Bookings or data submissions by minors must involve a parent or legal guardian when required by law or terms of service. If we learn that minor data was processed without an appropriate legal basis, steps will be taken to erase the data or secure proper parental authorization.

13. Third-Party Links

The website may contain links to third-party sites, platforms, or social media networks. We do not control and are not responsible for the privacy practices or content of third-party services.

14. Changes to This Policy

We reserve the right to update this Privacy Policy periodically. The latest version will always be published on the website with an updated “Last Updated” date. Material changes may also be communicated directly via email or site notification.

15. Contact Us

For questions or concerns regarding this Privacy Policy or personal data handling:

Operator: Lela Murguli

ID Number: 01024063836