About this Policy
The Royal House of Georgia respects the privacy of those who visit its website or communicate with it. This Privacy Policy explains what personal data we collect, why we process it, how long we retain it, with whom it may be shared, and the rights available to you.
This Policy applies to the official website of the Royal House of Georgia and to enquiries submitted through it. It does not apply to websites or services operated independently by third parties.
Controller and Contact Details
The controller responsible for the processing described in this Policy is The Royal House of Georgia, based in Georgia.
Questions about this Policy, the processing of your personal data, or the exercise of your rights may be sent to .
Personal Data We Collect
We may collect the following categories of personal data:
- Information you provide: your name, email address, subject, message, and any other information included in an enquiry. Providing a telephone number is optional.
- Technical and security information: your Internet Protocol address, browser and device information, operating system, requested pages, date and time of access, referring page, diagnostic information, security signals, and information used to prevent spam or misuse.
- Consent and preference information: choices recorded through the website’s cookie and consent controls.
- Analytics information: where you have consented, information about visits and interactions, such as pages viewed, approximate location, device and browser characteristics, referring sources, and the manner in which the website is used.
- Embedded-content information: technical information transmitted when third-party media or content is loaded or used.
Purposes and Legal Bases
We process personal data only where there is an appropriate legal basis. Depending on the circumstances, we process personal data for the following purposes:
- to review and respond to an enquiry or request;
- to take steps requested by you or to administer relevant correspondence;
- to operate, maintain, secure and improve the website;
- to detect and prevent spam, fraud, misuse and security threats;
- to record and respect your privacy choices;
- to understand website use where you have consented to analytics;
- to maintain appropriate official, administrative, legal and historical records;
- to comply with applicable legal obligations; and
- to establish, exercise or defend legal claims.
The applicable legal bases may include the review of an application or request submitted by you, taking steps at your request, our important legitimate interests in administering correspondence and operating a secure website, compliance with a legal obligation, and your consent for non-essential analytics or optional third-party content. Where processing is based on legitimate interests, we consider whether those interests are overridden by your rights and interests.
Contact Enquiries
The contact form requires your name, email address, subject and message so that we can review and respond to your enquiry. If you do not provide the required information, the form cannot be submitted. A telephone number may be provided voluntarily.
Contact-form submissions are delivered to the Royal House of Georgia by email through Google Workspace. They are not stored as submissions in the WordPress website database.
Please do not include unnecessary sensitive information or special categories of personal data in your message. If such information is submitted, we will process it only where necessary and legally permitted and may delete it where it is not required.
Spam Prevention
The contact form uses technical checks and the Akismet service to identify spam and abusive submissions. For this purpose, the contents of a submission and associated technical information, which may include an Internet Protocol address, browser information, referring page and submission time, may be transmitted to Automattic, the provider of Akismet. Further information is available in Automattic’s Privacy Policy.
Automated spam screening may mark or reject a message believed to be abusive or unsolicited. We do not use automated decision-making that produces legal or similarly significant effects concerning you.
Cookies and Consent Choices
The website uses strictly necessary technologies to provide essential functions, remember privacy choices and help protect the website. Where permitted by law, these technologies are used without consent because the website cannot function properly without them.
Non-essential cookies and similar technologies are used only after you have made the relevant choice through the consent controls. You may accept or reject them and may change or withdraw your consent through the Cookie Settings control. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
Further information about the technologies used, their purposes and their duration is provided in our Cookies Policy.
Google Analytics
With your consent, we use Google Analytics to understand how visitors use the website and to improve its operation and content. Google Analytics may process information about your device, browser, approximate location, referring source, pages viewed and interactions with the website.
User-level and event-level Analytics data are retained for up to 14 months. The Analytics retention setting does not apply in the same way to standard aggregated reports, which may remain available for longer. Google Analytics is not used by the Royal House of Georgia for advertising, advertising profiling or direct marketing. Further information is available in Google’s Privacy Policy.
Fonts and Embedded Content
The website may request font files from Google Fonts. When this occurs, your browser connects to Google’s servers and transmits technical information, including your Internet Protocol address and browser request. The Royal House of Georgia does not use Google Fonts for advertising or visitor profiling.
Articles may contain videos or other content provided by third parties, including YouTube. When a page containing embedded content is opened, or when that content is used, the provider may receive your Internet Protocol address, browser and device information, the page visited, and information about your interaction. Depending on the provider and the manner in which the content is embedded, this connection may occur before you actively play or interact with the content.
Third-party providers may use cookies or similar technologies under their own terms. You may prevent or limit this processing through the consent controls where they apply, through your browser settings, or by choosing not to interact with the embedded content. Information about Google’s processing is available in Google’s Privacy Policy.
Recipients and Service Providers
Personal data may be accessed by authorised officers or persons acting for the Royal House of Georgia where access is necessary for the purposes described in this Policy. It may also be processed by the following service providers:
- Gandi: website hosting and rotating website-file snapshots;
- Cloudflare: website delivery, performance and security;
- Google: Google Workspace email, Google Analytics, Google Fonts and YouTube services; and
- Automattic: Akismet spam prevention.
We may also disclose personal data to professional advisers, courts, regulators, supervisory authorities or other competent bodies where disclosure is required by law or is necessary to establish, exercise or defend a legal claim.
We do not sell or rent personal data. We do not use contact details for direct marketing, and we do not disclose personal data to third parties for their advertising.
International Processing and Transfers
Gandi, Cloudflare, Google and Automattic operate in more than one country. Depending on the service, network routing and provider infrastructure, personal data may be processed outside Georgia, including in the United States.
Not every country in which a provider operates has been recognised by the State Audit Office of Georgia as providing adequate safeguards for personal data. In particular, the United States is not included in the current Georgian list of countries recognised as providing adequate safeguards. Personal data processed there may be subject to different laws, governmental-access rules and legal protections.
The safeguards applicable to a particular service may include provider data-protection agreements, binding contractual commitments, encryption in transit, access controls and informed consent for an optional service. These measures do not constitute a Georgian adequacy finding. You may contact us for information about the destination, purpose and safeguards relevant to a particular transfer.
Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and in accordance with the following periods or criteria:
- Ordinary enquiries and correspondence: up to three years after the last substantive communication.
- Official, legal, financial or historically significant records: up to seven years after the correspondence is closed or the record is created.
- Google Analytics user-level and event-level data: up to 14 months.
- Website-file snapshots: Gandi maintains rotating snapshots for up to 14 days. These snapshots cover website files and not the WordPress database.
- Security and server information: for the period reasonably necessary to investigate incidents, maintain security and meet applicable technical or legal requirements, after which it is deleted or anonymised in accordance with the relevant retention process.
Data may be retained for a longer period where this is required by law or necessary for an unresolved legal claim. When data are deleted from active systems, limited copies may remain temporarily in provider recovery or security systems until their ordinary deletion cycles are completed.
Your Rights
Subject to applicable law, you may have the right to:
- receive information about the processing of your personal data;
- request access to and a copy of your personal data;
- request the correction, updating or completion of inaccurate or incomplete data;
- request the termination of processing or the deletion of data;
- request that data be blocked or processing restricted;
- object to processing in circumstances provided by applicable law;
- withdraw consent at any time where processing is based on consent;
- receive or transmit data in a structured, commonly used and machine-readable format where the right to data portability applies; and
- submit a complaint to a competent supervisory authority or court.
These rights are offered to visitors globally, subject to the conditions, exceptions and limitations established by applicable law. We may request information reasonably necessary to verify your identity before acting on a request.
Requests may be sent to . We will respond within the period required by applicable law.
Complaints
We encourage you to contact us first so that we may consider and address your concern. Under Georgian law, you also have the right to apply to the State Audit Office of Georgia or to a competent court. Where another data-protection law applies, you may also have the right to complain to the competent supervisory authority in the relevant jurisdiction.
Security
We use organisational and technical measures appropriate to the nature of the personal data and the risks involved. These measures are intended to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction. No method of transmission or storage can be guaranteed to be completely secure.
External Links
The website contains links to external websites and social-media services. Following an external link takes you to a service operated independently by another organisation. Its processing is governed by its own privacy policy, and the Royal House of Georgia is not responsible for that service’s privacy practices.
Changes to this Policy
We may revise this Privacy Policy when the website, its services, or applicable legal requirements change. The current version will be published on this page with its date of revision.
Last updated: 22 August 2026