Privacy Policy

1. Who processes data

The operator of polisi.ge is [LEGAL ENTITY NAME], identification code [COMPANY ID], address [REGISTERED ADDRESS].

For questions or data-protection requests, use [SUPPORT EMAIL].

2. What data we collect

We may collect: full name, phone, email, preferred language and preferred contact channel.

We may collect request data: insurance category, company/person details, field of activity, description of the insured object or risk, location, desired limits, deductible, existing insurance, claims history, turnover, number of employees, security measures, files/photos if uploaded, and other details entered by the user.

We may collect technical and analytics data: IP address, device type, browser, language, cookie/analytics identifiers, UTM and source data.

At MVP stage the platform may allow photos/files of the object or risk to better describe the request, while final document requests, inspection, risk assessment and underwriting are carried out by the selected insurance partner.

3. Why we process data

Data is used to operate the request form, prepare comparison results, send the user's request to the selected insurance partner, create a PDF summary, support, security, fraud prevention, analytics, and legal/audit purposes.

The platform must not use the data to make the final insurance underwriting or policy-issuance decision about the user.

Automated processing notice: the platform may use automated processing and comparison logic to prepare estimated categorization, a request summary, partner-fit indicators and informational matching outputs. These processes are used for informational purposes only.

4. Who data may be shared with

After the user's consent, data is shared only with the insurance partner or partners the user selected.

Data may also be processed by technical service providers such as hosting, email, CRM, analytics, security services and document/PDF generation.

Data may be disclosed to a public authority or court where required by applicable law.

5. Consent and withdrawal

At the insurance-partner handoff step the user separately confirms that their data may be shared with the selected insurance partner or partners.

Consent may be withdrawn by writing to [SUPPORT EMAIL]. Withdrawal does not affect processing already carried out based on consent before withdrawal.

6. Retention

Data is kept for as long as necessary for service delivery, audit, commission/partner settlement, prevention of legal disputes, or a legally required period.

If exact periods are not yet defined, the operator should approve an internal retention policy and state it in this document.

7. Security

The platform uses reasonable technical and organizational measures to protect data, including access control, logging, encrypted connection and least-privilege access.

No online system is absolutely secure; users should not enter unnecessary or unrequested sensitive information.

8. User rights

Within applicable law, users may have the right to receive information about data processing and to request access, correction, deletion, restriction, objection, or the exercise of other rights.

Requests are sent to [SUPPORT EMAIL]. The operator responds within the period set by applicable law.

9. Cookies and analytics

The platform may use necessary cookies for service functionality and analytics/marketing cookies only to the extent permitted by applicable rules.

The cookie banner and preferences center must match the technologies actually used.

Cookie notice: where required by applicable law or platform configuration, users may be presented with a cookie banner or preferences center.

10. International transfers

If technical providers process data outside Georgia, the operator must ensure an appropriate legal basis and security measures.

This section must be completed based on the real infrastructure.

11. Minors

The platform is intended for adults researching insurance products. Minors should not use the platform without a parent/legal representative.

12. Changes

This policy may be updated. The new version will be published on the website or app with its effective date.

Electronic records notice: electronic consent records, timestamps and communication logs may be retained for audit and compliance purposes.